last executing test programs: 4.928240215s ago: executing program 4 (id=1606): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11fb9) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2004, 0x800}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f00000002c0)=@req3={0x8001, 0xfc, 0x1, 0x3, 0x6, 0xcb, 0x4}, 0x1c) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xe, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @exit, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x10, 0x100, 0x5}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)=[{0x1, 0x2, 0x10, 0xb}], 0x10, 0x10001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='mr_dereg\x00', r7, 0x0, 0x1000100}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r6, 0x0, 0x200000000000000}, 0x18) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000340)={{0x2, 0x4e21, @rand_addr=0x64010100}, {0x1, @remote}, 0x14, {0x2, 0x4e24, @remote}, 'veth0_to_team\x00'}) dup3(r5, r4, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001900)={@fallback=r10, r10, 0x2f, 0x0, 0x0, @void, @value=r2}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r11, 0xffffffffffffffff, 0x0) 4.849555896s ago: executing program 4 (id=1610): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x4008840) 4.815285147s ago: executing program 4 (id=1611): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) socket$inet6(0x10, 0x3, 0x0) creat(&(0x7f0000000380)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r7 = add_key$user(&(0x7f00000001c0), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000240)='\t', 0x1, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r7}) pread64(r6, &(0x7f0000000040), 0x0, 0x2) 4.001152867s ago: executing program 4 (id=1623): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f00000000c0), 0x0}, 0x20) socket(0x1e, 0x4, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) 3.886344919s ago: executing program 4 (id=1625): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=@ipmr_delroute={0xf0, 0x19, 0x600, 0x70bd27, 0x4, {0x80, 0x80, 0x20, 0xf, 0xff, 0x2, 0x0, 0x0, 0x200}, [@RTA_METRICS={0xbc, 0x8, 0x0, 0x1, "37d3ddd9551731eb22c1a0dc63842d9657543596451083fd13cc381f558fe8b3b1c8511e17525aa8b8d17e396d24d015becf7d914b9a2dd00a42e8f60630cd8bba946e1684b4aa9d10cdb8905f441b5640c90f5b679569a1451dc40092ec7f25ac50a435244c46afbfa066ee663e9681247797d4ace08f4de884ca9c14aa658a32f06936768d82117423aafc86405a02546b262dd87964767d05587735327a104c9f4ea9bfc4f962f37058d72e1bf9c22a778bc6d265fbe0"}, @RTA_SRC={0x8, 0x2, @multicast1}, @RTA_PREFSRC={0x8, 0x7, @private=0xa010102}, @RTA_NH_ID={0x8, 0x1e, 0x7}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40}, 0x2004000) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x5, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat2$dir(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', &(0x7f00000005c0)={0x80402, 0x5c, 0x3}, 0xfffffffffffffdc0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@acl}, {@barrier}, {@barrier_val}, {@sysvgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000002100)="$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") chdir(&(0x7f0000000100)='./file0\x00') link(&(0x7f0000000440)='./file0\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.615510302s ago: executing program 4 (id=1628): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000034c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x5, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0xbdec, 0x20000000, 0x2, 0x6, 0x4, {0x8, 0x2, 0x5, 0x100, 0x5, 0x1}, {0xf6, 0x1, 0x8, 0x0, 0x200, 0x400}, 0x0, 0x5, 0x4d9}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x40) 2.066192793s ago: executing program 2 (id=1643): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 2.040145743s ago: executing program 1 (id=1644): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x4008840) 1.981345783s ago: executing program 1 (id=1646): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r0], 0x28}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC=r0], 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x8, [@typedef={0x6, 0x0, 0x0, 0x8, 0x1}, @var={0x10, 0x0, 0x0, 0xe, 0x3, 0x1}, @enum={0x9, 0x5, 0x0, 0x6, 0x4, [{0xf, 0xfffffff7}, {0x4}, {0xa, 0xd}, {0x3, 0x9}, {0x1, 0x8000}]}, @restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0xb0}}]}, {0x0, [0x2e, 0x61, 0x0, 0x30, 0x61, 0x61]}}, &(0x7f00000003c0)=""/136, 0x94, 0x88, 0x0, 0x4, 0x0, @void, @value}, 0x28) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055a322ace5ccf22d8500000000000000bf91c50000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000840)=ANY=[@ANYBLOB="0800892f00040900ffff"], 0xfce) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x200000b, &(0x7f0000000380)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES64, @ANYRES64=0x0], 0x0, 0x257, &(0x7f00000000c0)="$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") setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001108000440000000250900010073797a30000000000900020073797a32"], 0x78}}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='mm_page_free\x00', r8, 0x0, 0x6}, 0x18) syz_open_dev$usbmon(&(0x7f00000000c0), 0xcfae, 0x84102) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r5) 1.927262155s ago: executing program 2 (id=1649): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000660c67d17ca6129bce517c83d3f7d51b611d06c73cdbeeb8cd4e53c9a47f2dab853695c18e3df8957e3c03190626f344188fcfc87a32e09d5f450feefd864aa0609c866e7ba1aee60ae30877cc2f09565eecaa78d6ba7efe653217a6c0c869de92531d25f036d4020556d68d0fa41884bccc96b105dd2d6cd750e0741450221c2fe34afb4f8c745afd51b916", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c000100", @ANYRES32=r2], 0x118}}, 0x4040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x4a, &(0x7f0000000400), 0x0, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x53, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000008000005c00000000000000", @ANYRES32, @ANYBLOB="00000000000000006dcf9700"/23, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) 1.730953567s ago: executing program 2 (id=1653): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) unshare(0x2c060000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x18, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="b45478037246f9552ee40a98738926fcdff504a55f63d20d5b56a6f96249a51763c21496166400000000000000", @ANYRES8=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) eventfd(0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) unshare(0x2c020400) unshare(0xc000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000500000008000000000000850000000f0000001801000020646c250000000000000000000600008b000000bfa100000000000007010000f8ffffffb702000008100000da03000000000000850000006c0000049504ae30aa3f54d04b8385c8eab684bc24bedfe79369da83df58181d26119abef75c9a63d6896f0b1993ee4143796263229cf9713b4c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a320000000008004100727865001400330076657468305f746f5f626f6e64"], 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0x0) 1.683331117s ago: executing program 1 (id=1654): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_mount_image$msdos(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@nodots}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffb94}}, {@nodots}, {@dots}, {@dots}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'dots'}}, {@subj_user={'subj_user', 0x3d, 'dots'}}, {@dont_appraise}]}, 0x1, 0x540, &(0x7f0000000b40)="$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") syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0xffdd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x400000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x2e, 0x0, "8ddbb51a3cfd954e41e8ccb21f650fa6a867fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71bc4b828c7de258b6b9ca1fc52bcc83e2a016a"}, 0xd8) unlinkat(r0, &(0x7f0000000380)='./file0\x00', 0x200) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4cf0, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20000004) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd26, 0x48000002, {0x0, 0x0, 0x0, r10, {0x6, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x1}, "a5"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000002780)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0x0, 0x2, 0x2, {0xa, 0x4e22, 0x9, @local, 0x401}}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000680)="f4dadb5fe6e900f5468a5327e2cf491622553e687f941799cf8344f9519f11bb3d092c1ec0d709eca54aeccc7d0786501a3b5b7d33f9343923a63630ea1884f77ed37b0aa278dd4a4a3c765226", 0x4d}, {&(0x7f0000000540)="e0335bd42d19ec620dc888aaa250f9bd87156c70450e6d3ef3e0bd28488ef99a58088c53e30649be0431b60bc38ea4", 0x2f}, {&(0x7f0000000700)}, {&(0x7f00000008c0)="a77de96faebe2f7c45095a55e4456e7b1bd2d9834d8f310522708bb99d3b208c6b2147a8b87003d025e79b0eb2443e7d733ad920d08c0dc9efcbf43b8df21207cef0cf605cd6e47f91efaa63d99cdfd52c9ccf1c8d038f8990f2badbaf4721824702639b4234e3ccf4917dce0a1d850c55d7fb650bdbe9cfb9ce57c3a48c18ee1c1992b5936ad2a50c7bd0c97125dc357e5c2323d8f368e8c2dd3db458f2c3bca8468b17731e54f3004444925b74fbb359bbcff6f97523aaa454f619e2b94c50f291c233fc3f7488662afcd8a4af145b55bfc8a5f3f49124bb141118c88819b560589486", 0xe4}, {&(0x7f0000000740)="22120cff29794182aef2693723dfcf7ae0ff11650bcc7acb722ad4800e5d852b6438da6d5f0c0724579f62637d58b37985bab71cb5719c95b548d2d63b48200beb647cb22b7307e5c90da65cee5b34e6b12de78a78b6c69b5e", 0x59}, {&(0x7f00000009c0)="dbd7a4b2e10481f32fccdf5c5fb9cdecdbfbee82d4", 0x15}], 0x6, &(0x7f0000000b80)=[@txtime={{0x18, 0x1, 0x3d, 0x401}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xfffff001}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a00)="68ffa81fa9104bade818ca316e3a1299c30863c8c0d431889c61212b33ce786bc8bd93", 0x23}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000000c40)="a285eb17869f625691508c3bd2dfb7d01f9b5f01d31f1ec1b25138161cc97745c1192d94aa6e6ace40b5ff24687cbac59f5445c78ba9810c8b8ed16a9e6aa1aa64e47f4134256d7502154b4cb147689b34fb0c592c1873", 0x57}, {&(0x7f0000000cc0)="461f9cae1e3e24ca60084b78bcff7353de9d51c14a24c1d73fc42f8f8201cadf698c089f6b54dbfebaebb756e0d7bfdc860fa7f3497903118decc6fa88cbbc132a104f99b4ecf8992a951c6c1a75cc79200fe57e", 0x54}, {&(0x7f0000000d40)="9b1d7ef39854d865c0d48054123530d8ab8a2d1c026952593e87aa16822220611925a79d8d83b8341918ece4207a0b1b9737cb1b4fc6ca6dce83a86d116c9445c3411f845db09f2264b2639a26b04f090ec6b96bdcbd28abe67b52d7fb8cbc7acb17b0cf4e7a8db6f0c63968383848366bec62a764f2c9cb082f35245ac097474a3be368f50a01a697ff17cbd48f9f8d286b15ce3d8752fcd768f860d431a80f2aff0040", 0xa4}, {&(0x7f0000000e00)="bf736266157e93e57fddab06c3673979bbb383150e6ee727a0bdcff93126abc41125e424e393e09acc1526b1f84ae22813d79e2bd8e5c9730571e61d554b86785407648003318ce5", 0x48}], 0x6, &(0x7f0000000f00)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0x60}}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000f80)="14d690e4b9a0fec98983e2efdeb91f4722230f925d5d82c433c513170334f83ab642e99ed4534dfe18e78a220969feae", 0x30}, {&(0x7f0000000fc0)="67cff4be2b52941cbb917ef8df378e98f2f0963eb10fa3b0f5374b42364f3491e330ca7f3bff1bf91c75989e3256134a19ab2ad0ec77536b1fe0148eba22b7bb92e6fb7f37a8b6235b3b353c995da8ff15d8e556c167a6ea71b8895b4fe6513c1591d8a8b5930eb5d9267dafa7812cd42efa4286a0a34ed6984baf3546cd4eb381dfdf7e26", 0x85}, {&(0x7f0000001080)="caf4ca9fdf86b4a940ce517a679cf4eb7a10494da09d5880ee11dcb25a7a576eb6e4423d96798f2e5784b31b42c3c0898ea05316c76bccc1e096226f49cfca5e5722b9c86697e162fa497a7909402d26f7f8923a1b7a389867247ecf8d4c8a4ec2586bc1bfb276ff0e4d4814d8a50b84f09e13dbeb842f46fa2bc0194786e4a39e4d19b8976275bd1e9165112b46c86195dca063775aaf3333106f8ad705e70971c9b7a0556c7f0c3d6d5de781a4527538a420ae20557675633e52c75d7030888437ccf9ae342dd253c9b216cffd7323f2dee3a24d06f1edc356f86ab37107c84e241c238100365a4adb4a44", 0xec}, {&(0x7f0000001180)}, {&(0x7f0000001240)="5ae8d7e72ae9fec2787c126a9bf0221a46b869", 0x13}, {&(0x7f0000002300)="5a65633f1449b78b50e045fa5391ee357b8273b995a24888de69641a2eb470d7c3dadb9ee4dd5a95a9795721fd009a665272b692198a155b86449f6dd82f34f2ababbe7e5752ca169788288550e5dbed3e3a243aa86c19ed7830983c06302a36c34ba19f33d5dad27321165c0f530cd578fb736c52778202dc3efe97a77ac3cf85243f9b509a9bdd2597615fa4cbab264d35e30ed32a7e0ac3c8006f14", 0x9d}, {&(0x7f00000023c0)="174eecf8ff507043a94894a07f4f9428bd13267c04158a4030f272de2a82689e1bbd37b67d00240fac6120e8ac01df6be581d93a494f32aea6ec62a8e0e3f6936d2a3c378ca7a9c62c2b6d05e2dae8b9514bb0e652b86ba39c849ea9aa3053eba8b139788a5fb2afc8c826cba8078c4989de95aa3a400ad1d3", 0x79}, {&(0x7f0000002440)="98a0aba6cdddf830d8260759b42531c5b00a55d44f1d890fd2f44de56caf616092c7b73bbbbef2c3d087e8fcdc2b9615a67c4fe213012233e296a4917408b9b00a88b2d49c7367f68d711e30bd76a3bc2fe513cc83ca3d8f6289cd4486e429dfab347030577932cdb72ec2c78650fab834fcf31879b963e63c9645acb23fc86626034fc394cc4b692c406c06eddc74f6640ea4c973b76ce8ec7b032ab31be62f23f978aa4aed510c265e3c363013bfc7244a5f0bb1e2e0d60fd5851822346d9fe59d08470041d324d9d5eb19862936e8baba1bbecabce8be5656ea5566e031ac50bef75e874d60b594", 0xe9}, {&(0x7f0000002540)="be0cf93cce0bb5979330d7b5e97fc9510f28e58757fd25a25601484eba789d27681d5f842663a73e01a370575f2649f2999210131b2f40254c9d081cfca60385f9c7973848bcb0b6fe343b042d6b770b1723e4ff8e1319aa487740367d9922f472b9020c42f8be2d570f2dfc98d5fafd992190d271a0bdd7a65f69216dbc1e77bedd0526df459ac2a20d0b4b58cc89490b26bed2e768ee9ec43837bb3906acdd35dbc5194c01f08efdb806f3d5462ee53685197a268e45681515569fbdc74e764bc977f6832fcef1a5be59a384a96018742eab6741e719e430f17e3171aab2abb08493", 0xe3}], 0x9, &(0x7f0000002700)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffe01}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x48}}], 0x3, 0xeb728f9d2d798e91) setresgid(0xee00, 0xee01, 0x0) 1.536232699s ago: executing program 2 (id=1655): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x4, 0x0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9beb010018000000000c00a1b64ec800c7e56c86cee7acd3bccf6bf31a20b7b9c00c7514a612ac4daf862a3785d20c0000008200f266fd997f53c60cb50000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000001680)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000002}, 0x2c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x8, 0x0, 0x0}}, 0x10) syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3}, 0x0, &(0x7f0000ffe000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 862.008079ms ago: executing program 3 (id=1659): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 791.182419ms ago: executing program 0 (id=1660): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) 753.07542ms ago: executing program 2 (id=1661): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f00000000c0), 0x0}, 0x20) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f00000002c0)=@req3={0x8001, 0xfc, 0x1, 0x3, 0x6, 0xcb, 0x4}, 0x1c) dup3(r5, r4, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x1000200c}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 752.66458ms ago: executing program 3 (id=1662): unshare(0x20060400) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) 729.79084ms ago: executing program 1 (id=1663): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, 0x0, 0x25, 0x0, @val=@netkit={@void, @value=r1}}, 0x1c) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) 713.21067ms ago: executing program 0 (id=1664): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010140)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_getres(0x7ffffffff000, 0x0) 699.22909ms ago: executing program 3 (id=1665): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 594.711152ms ago: executing program 0 (id=1666): unshare(0x20060400) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) 558.931532ms ago: executing program 1 (id=1667): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x4008840) 535.779542ms ago: executing program 1 (id=1668): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffffffffffc4a, &(0x7f00000000c0)={0x0}}, 0x20000020) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x250, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @private=0xa010100, 0x0, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0x1c8, 0x1f8, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x0, 0x39, 0x0, 0x0, 0x80000000, 0x3, 0x3}, {0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xa, 0x81, 0x7, 0x2}}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff, 0xffffff, 'veth0_vlan\x00', 'vcan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x400, 0x7ff, 0x200, 'netbios-ns\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000840)="17000000028001000003d68c5ee17688a208000000000000003f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002", 0x8a) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r4, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1b0000001000010000aa696e8485b1d76c7178000000000000000000000a20000000000a0101000000000000000002000003090001007379001100010000008e23de2d8b97227a000a54d119c5b4b0"], 0x48}, 0x1, 0x0, 0x0, 0x88d5}, 0x0) 486.029473ms ago: executing program 2 (id=1669): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x80000000000}, 0x18) mknod$loop(&(0x7f00000000c0)='./file1\x00', 0xc000, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa0000181200", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0) 474.175354ms ago: executing program 3 (id=1670): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) 441.945204ms ago: executing program 0 (id=1671): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000, @value}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f0000000740)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x1c}, 0x48, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x4, r4, r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000fd8f71183b00000000006e050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x2}, 0x48, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x280008a, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRES64=r3, @ANYBLOB="ed6e7c9e834e69128a4d7e825a5a421bd6892fb9be3cea4c3332d266f086bfed0dc68f299522a8852fbcf95b8ae9338ec7df5fb7b5dce508aa4b810c4fe0581e962ccd584e5a315299af9369c803f9e8b2164bfe14dfdefd8e82edc077db300dacdaf759dcb22a8786845a66f54b1fca2b9aac5501ec793f75fe40a1988fb8465c5e26f5e75ce2914d2006b01490d24862df567cc4c8f364fc00f9b02ed9bf3447feea1ef522cce1fb011ba2c68bf170e4972534ebc7c759bb06810f9ee78a47a2f3eb32f8519ffb27d2a67331ad8182d758c2d8669f921e4858cc32d7"], 0x96, 0x2b3, &(0x7f0000000c40)="$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") r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r7, &(0x7f0000000000)=0x8, r7, 0x0, 0x4, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) fallocate(r8, 0x0, 0x0, 0x2c2) 370.309435ms ago: executing program 3 (id=1672): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r0], 0x28}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC=r0], 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x8, [@typedef={0x6, 0x0, 0x0, 0x8, 0x1}, @var={0x10, 0x0, 0x0, 0xe, 0x3, 0x1}, @enum={0x9, 0x5, 0x0, 0x6, 0x4, [{0xf, 0xfffffff7}, {0x4}, {0xa, 0xd}, {0x3, 0x9}, {0x1, 0x8000}]}, @restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0xb0}}]}, {0x0, [0x2e, 0x61, 0x0, 0x30, 0x61, 0x61]}}, &(0x7f00000003c0)=""/136, 0x94, 0x88, 0x0, 0x4, 0x0, @void, @value}, 0x28) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055a322ace5ccf22d8500000000000000bf91c50000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000840)=ANY=[@ANYBLOB="0800892f00040900ffff"], 0xfce) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x200000b, &(0x7f0000000380)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES64, @ANYRES64=0x0], 0x0, 0x257, &(0x7f00000000c0)="$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") setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001108000440000000250900010073797a30000000000900020073797a32"], 0x78}}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='mm_page_free\x00', r8, 0x0, 0x6}, 0x18) syz_open_dev$usbmon(&(0x7f00000000c0), 0xcfae, 0x84102) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='\x00', &(0x7f0000000300)='.\x00', 0x0) close(r5) 80.695179ms ago: executing program 3 (id=1673): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 43.725629ms ago: executing program 0 (id=1674): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) 0s ago: executing program 0 (id=1675): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000, @value}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f0000000740)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x1c}, 0x48, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x4, r4, r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000fd8f71183b00000000006e050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x2}, 0x48, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x280008a, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRES64=r3, @ANYBLOB="ed6e7c9e834e69128a4d7e825a5a421bd6892fb9be3cea4c3332d266f086bfed0dc68f299522a8852fbcf95b8ae9338ec7df5fb7b5dce508aa4b810c4fe0581e962ccd584e5a315299af9369c803f9e8b2164bfe14dfdefd8e82edc077db300dacdaf759dcb22a8786845a66f54b1fca2b9aac5501ec793f75fe40a1988fb8465c5e26f5e75ce2914d2006b01490d24862df567cc4c8f364fc00f9b02ed9bf3447feea1ef522cce1fb011ba2c68bf170e4972534ebc7c759bb06810f9ee78a47a2f3eb32f8519ffb27d2a67331ad8182d758c2d8669f921e4858cc32d7"], 0x96, 0x2b3, &(0x7f0000000c40)="$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") openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) fallocate(r7, 0x0, 0x0, 0x2c2) kernel console output (not intermixed with test programs): .470558][ T6818] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 223.485615][ T6818] EXT4-fs (loop4): mount failed [ 223.542514][ T6824] loop3: detected capacity change from 0 to 256 [ 223.552405][ T6824] vfat: Unknown parameter 'uni_' [ 223.564602][ T6820] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.587890][ T6827] loop0: detected capacity change from 0 to 256 [ 223.595232][ T6827] vfat: Unknown parameter 'uni_' [ 223.769934][ T6825] 9pnet_fd: Insufficient options for proto=fd [ 225.301908][ T6820] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.330771][ T6840] loop0: detected capacity change from 0 to 2048 [ 225.340093][ T6840] msdos: Bad value for 'time_offset' [ 225.369378][ T6841] wg2: entered promiscuous mode [ 225.374343][ T6841] wg2: entered allmulticast mode [ 225.391753][ T6820] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.494035][ T6820] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.618327][ T6846] loop2: detected capacity change from 0 to 2048 [ 225.626135][ T6846] msdos: Bad value for 'time_offset' [ 225.647990][ T6820] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.703574][ T6820] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.738638][ T6820] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.838720][ T6820] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.981352][ T6852] loop1: detected capacity change from 0 to 512 [ 226.063501][ T6852] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 226.088978][ T6852] EXT4-fs (loop1): orphan cleanup on readonly fs [ 226.105934][ T6852] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1059: bg 0: block 248: padding at end of block bitmap is not set [ 226.121909][ T6852] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1059: Failed to acquire dquot type 1 [ 226.134734][ T6852] EXT4-fs (loop1): 1 truncate cleaned up [ 226.173686][ T6852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 226.934405][ T6857] loop4: detected capacity change from 0 to 2048 [ 226.989245][ T6857] msdos: Bad value for 'time_offset' [ 227.010399][ T6859] loop0: detected capacity change from 0 to 2048 [ 227.059752][ T6859] msdos: Bad value for 'time_offset' [ 227.069160][ T6864] 9pnet_fd: Insufficient options for proto=fd [ 227.497677][ T6869] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1064'. [ 227.509727][ T6869] 0XD: entered promiscuous mode [ 227.514987][ T6869] 0XD: left allmulticast mode [ 227.523090][ T6869] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1064'. [ 227.533475][ T6869] 1XD: renamed from 30XD [ 227.540171][ T6869] 1XD: left promiscuous mode [ 227.545197][ T6869] 1XD: entered allmulticast mode [ 227.556683][ T6869] A link change request failed with some changes committed already. Interface 31XD may have been left with an inconsistent configuration, please check. [ 227.771312][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.790733][ T6869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1064'. [ 227.881044][ T6879] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1067'. [ 228.089361][ T6884] loop1: detected capacity change from 0 to 128 [ 228.103293][ T6885] loop3: detected capacity change from 0 to 512 [ 228.118146][ T6885] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 228.229269][ T6884] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.242540][ T6885] EXT4-fs (loop3): 1 truncate cleaned up [ 228.251539][ T6884] ext4 filesystem being mounted at /192/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 228.261976][ T6886] loop4: detected capacity change from 0 to 128 [ 228.278107][ T6886] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.297524][ T6886] ext4 filesystem being mounted at /234/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 228.309760][ T6885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.762369][ T6894] loop2: detected capacity change from 0 to 256 [ 228.781549][ T6893] loop0: detected capacity change from 0 to 2048 [ 228.824192][ T6894] FAT-fs (loop2): codepage cp950 not found [ 228.831194][ T6893] msdos: Bad value for 'time_offset' [ 229.010111][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.066322][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 229.066342][ T29] audit: type=1400 audit(1749291072.368:2480): avc: denied { write } for pid=6892 comm="syz.2.1071" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 229.111858][ T3324] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.659276][ T29] audit: type=1400 audit(1749330588.907:2481): avc: denied { execmem } for pid=6899 comm="syz.4.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 229.719182][ T29] audit: type=1400 audit(1749330589.068:2482): avc: denied { create } for pid=6903 comm="syz.2.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 229.742209][ T6904] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1074'. [ 229.764404][ T6904] 1XD: entered promiscuous mode [ 229.769792][ T6904] 1XD: left allmulticast mode [ 229.779301][ T29] audit: type=1400 audit(1749330589.089:2483): avc: denied { write } for pid=6903 comm="syz.2.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 229.799474][ T29] audit: type=1400 audit(1749330589.089:2484): avc: denied { nlmsg_write } for pid=6903 comm="syz.2.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 229.830628][ T6904] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1074'. [ 229.867430][ T6904] 0XD: renamed from 31XD [ 229.921778][ T6904] 0XD: left promiscuous mode [ 229.926792][ T6904] 0XD: entered allmulticast mode [ 229.943933][ T6904] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 230.231233][ T6904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1074'. [ 230.382416][ T29] audit: type=1326 audit(1749330589.776:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6914 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f91ae969 code=0x7ffc0000 [ 230.405989][ T29] audit: type=1326 audit(1749330589.776:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6914 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f91ae969 code=0x7ffc0000 [ 230.444001][ T6915] loop4: detected capacity change from 0 to 256 [ 230.452172][ T6915] vfat: Unknown parameter 'uni_' [ 230.598377][ T29] audit: type=1326 audit(1749330589.829:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6914 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fc2f91ae969 code=0x7ffc0000 [ 230.621994][ T29] audit: type=1326 audit(1749330589.829:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6914 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f91ae969 code=0x7ffc0000 [ 230.645625][ T29] audit: type=1326 audit(1749330589.840:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6914 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fc2f91ae969 code=0x7ffc0000 [ 230.892658][ T6920] loop2: detected capacity change from 0 to 256 [ 230.967008][ T6920] vfat: Unknown parameter 'uni_' [ 231.273500][ T6922] wg2: left promiscuous mode [ 231.278239][ T6922] wg2: left allmulticast mode [ 231.384333][ T6925] wg2: entered promiscuous mode [ 231.389279][ T6925] wg2: entered allmulticast mode [ 231.831090][ T6928] pim6reg1: entered promiscuous mode [ 231.836514][ T6928] pim6reg1: entered allmulticast mode [ 231.851815][ T6933] wg2: entered promiscuous mode [ 231.856792][ T6933] wg2: entered allmulticast mode [ 232.043556][ T6950] loop0: detected capacity change from 0 to 256 [ 232.077127][ T6950] FAT-fs (loop0): codepage cp950 not found [ 232.348720][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.710198][ T6947] loop4: detected capacity change from 0 to 512 [ 232.728980][ T6947] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 232.767504][ T6947] EXT4-fs (loop4): mount failed [ 233.329261][ T6972] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1092'. [ 233.440700][ T6973] loop4: detected capacity change from 0 to 512 [ 233.574002][ T6973] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 233.635008][ T6973] EXT4-fs (loop4): mount failed [ 233.736602][ T6977] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.788424][ T6980] 9pnet_virtio: no channels available for device 127.0.0.1 [ 233.864508][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 233.864522][ T29] audit: type=1326 audit(1749330593.520:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6979 comm="syz.2.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b977e969 code=0x7ffc0000 [ 233.898541][ T6978] 9pnet_fd: Insufficient options for proto=fd [ 233.910081][ T6977] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.926393][ T6980] loop2: detected capacity change from 0 to 1024 [ 233.943958][ T6980] ext4: Unknown parameter 'subj_user' [ 233.960390][ T29] audit: type=1326 audit(1749330593.552:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6979 comm="syz.2.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b977e969 code=0x7ffc0000 [ 233.984178][ T29] audit: type=1326 audit(1749330593.552:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6979 comm="syz.2.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f88b977e969 code=0x7ffc0000 [ 234.007700][ T29] audit: type=1326 audit(1749330593.552:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6979 comm="syz.2.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b977e969 code=0x7ffc0000 [ 234.031464][ T29] audit: type=1326 audit(1749330593.552:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6979 comm="syz.2.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b977e969 code=0x7ffc0000 [ 234.054976][ T29] audit: type=1326 audit(1749330593.552:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6979 comm="syz.2.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f88b977d2d0 code=0x7ffc0000 [ 234.078490][ T29] audit: type=1326 audit(1749330593.552:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6979 comm="syz.2.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f88b9780197 code=0x7ffc0000 [ 234.101924][ T29] audit: type=1326 audit(1749330593.563:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6979 comm="syz.2.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f88b977e969 code=0x7ffc0000 [ 234.125333][ T29] audit: type=1326 audit(1749330593.563:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6979 comm="syz.2.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f88b9780197 code=0x7ffc0000 [ 234.148834][ T29] audit: type=1326 audit(1749330593.563:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6979 comm="syz.2.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f88b977d5ca code=0x7ffc0000 [ 234.174781][ T6977] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.247391][ T6977] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.290807][ T6989] loop2: detected capacity change from 0 to 512 [ 234.306637][ T6989] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 234.327382][ T6989] EXT4-fs (loop2): orphan cleanup on readonly fs [ 234.334749][ T6989] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1098: bg 0: block 248: padding at end of block bitmap is not set [ 234.349628][ T6989] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1098: Failed to acquire dquot type 1 [ 234.361722][ T6989] EXT4-fs (loop2): 1 truncate cleaned up [ 234.368659][ T6989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 234.399619][ T6988] loop4: detected capacity change from 0 to 2048 [ 234.445304][ T6988] msdos: Bad value for 'time_offset' [ 234.550278][ T6977] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.654838][ T6977] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.760336][ T6977] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.803788][ T7000] loop3: detected capacity change from 0 to 256 [ 234.830138][ T6977] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.916084][ T7000] FAT-fs (loop3): IO charset iso8859-9 not found [ 235.404134][ T7003] loop1: detected capacity change from 0 to 256 [ 235.423028][ T7003] vfat: Unknown parameter 'uni_' [ 235.976931][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.993436][ T7007] loop3: detected capacity change from 0 to 2048 [ 236.000363][ T7007] msdos: Bad value for 'time_offset' [ 236.046310][ T7010] loop4: detected capacity change from 0 to 256 [ 236.063648][ T7010] vfat: Unknown parameter 'uni_' [ 236.283653][ T7022] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1108'. [ 236.292790][ T7022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1108'. [ 236.758316][ T7028] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1110'. [ 236.979323][ T7036] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1113'. [ 236.989033][ T7036] 0XD: entered promiscuous mode [ 236.994360][ T7036] 0XD: left allmulticast mode [ 237.003469][ T7036] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1113'. [ 237.020113][ T7036] 1XD: renamed from 30XD [ 237.027368][ T7036] 1XD: left promiscuous mode [ 237.032338][ T7036] 1XD: entered allmulticast mode [ 237.039891][ T7036] A link change request failed with some changes committed already. Interface 31XD may have been left with an inconsistent configuration, please check. [ 237.158935][ T7039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1113'. [ 237.252972][ T7044] loop2: detected capacity change from 0 to 2048 [ 237.265610][ T7044] msdos: Bad value for 'time_offset' [ 237.310829][ T7046] loop4: detected capacity change from 0 to 512 [ 237.353384][ T7048] loop1: detected capacity change from 0 to 512 [ 237.387313][ T7048] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 237.418128][ T7046] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 237.432889][ T7048] EXT4-fs (loop1): orphan cleanup on readonly fs [ 237.451357][ T7048] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1115: bg 0: block 248: padding at end of block bitmap is not set [ 237.490249][ T7048] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1115: Failed to acquire dquot type 1 [ 237.503301][ T7046] EXT4-fs (loop4): mount failed [ 237.532273][ T7048] EXT4-fs (loop1): 1 truncate cleaned up [ 237.554424][ T7048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 237.586821][ T7058] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1119'. [ 237.595939][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1119'. [ 237.783178][ T7064] loop0: detected capacity change from 0 to 512 [ 237.833639][ T7064] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 237.900311][ T7064] EXT4-fs (loop0): orphan cleanup on readonly fs [ 237.907391][ T7064] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1121: bg 0: block 248: padding at end of block bitmap is not set [ 237.946764][ T7064] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.1121: Failed to acquire dquot type 1 [ 237.974330][ T7064] EXT4-fs (loop0): 1 truncate cleaned up [ 237.984083][ T7064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 238.024215][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.108155][ T7069] pim6reg1: entered promiscuous mode [ 238.113587][ T7069] pim6reg1: entered allmulticast mode [ 238.190018][ T7072] loop1: detected capacity change from 0 to 512 [ 238.197763][ T7072] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 238.218823][ T7072] EXT4-fs (loop1): orphan cleanup on readonly fs [ 238.235145][ T7072] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1122: bg 0: block 248: padding at end of block bitmap is not set [ 238.250714][ T7072] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1122: Failed to acquire dquot type 1 [ 238.388174][ T7072] EXT4-fs (loop1): 1 truncate cleaned up [ 238.394662][ T7072] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 238.527437][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.018749][ T7082] loop3: detected capacity change from 0 to 128 [ 239.050493][ T7082] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 239.068751][ T7082] ext4 filesystem being mounted at /197/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 239.473519][ T3326] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 239.615491][ T7090] loop2: detected capacity change from 0 to 128 [ 239.741612][ T7090] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 239.754061][ T7090] ext4 filesystem being mounted at /231/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 240.208852][ T7100] loop4: detected capacity change from 0 to 512 [ 240.229490][ T7100] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 240.244317][ T7100] EXT4-fs (loop4): mount failed [ 240.260136][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 241.162396][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 241.162415][ T29] audit: type=1400 audit(1749370117.342:2751): avc: denied { name_bind } for pid=7112 comm="syz.2.1136" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 241.224825][ T29] audit: type=1107 audit(1749370117.396:2752): pid=7112 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 241.279856][ T7115] loop2: detected capacity change from 0 to 2048 [ 241.296545][ T7115] msdos: Bad value for 'time_offset' [ 241.655429][ T7124] pim6reg1: entered promiscuous mode [ 241.660855][ T7124] pim6reg1: entered allmulticast mode [ 241.755685][ T7126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1141'. [ 241.787550][ T7128] loop0: detected capacity change from 0 to 128 [ 241.802299][ T29] audit: type=1400 audit(1749370118.029:2753): avc: denied { mount } for pid=7127 comm="syz.0.1142" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 241.855408][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.935117][ T29] audit: type=1400 audit(1749370118.179:2754): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 242.022240][ T7136] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.065078][ T7136] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.074777][ T7137] loop0: detected capacity change from 0 to 512 [ 242.084825][ T7137] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 242.099991][ T7137] EXT4-fs (loop0): mount failed [ 242.119532][ T7138] 9pnet_fd: Insufficient options for proto=fd [ 242.132348][ T7136] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.180802][ T7136] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.192628][ T7145] netlink: 'syz.2.1148': attribute type 10 has an invalid length. [ 242.212631][ T7145] team0: left allmulticast mode [ 242.217707][ T7145] team_slave_0: left allmulticast mode [ 242.223393][ T7145] team_slave_1: left allmulticast mode [ 242.228917][ T7145] team0: left promiscuous mode [ 242.242695][ T7145] team_slave_0: left promiscuous mode [ 242.248285][ T7145] team_slave_1: left promiscuous mode [ 242.253946][ T7145] bridge0: port 3(team0) entered disabled state [ 242.275700][ T7148] netlink: 'syz.2.1148': attribute type 10 has an invalid length. [ 242.283657][ T7148] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1148'. [ 242.309663][ T7145] batman_adv: batadv0: Adding interface: team0 [ 242.315877][ T7145] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.341216][ T7145] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 242.356050][ T7148] team0: entered promiscuous mode [ 242.361117][ T7148] team_slave_0: entered promiscuous mode [ 242.367013][ T7148] team_slave_1: entered promiscuous mode [ 242.373052][ T7148] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.380020][ T7148] batman_adv: batadv0: Interface activated: team0 [ 242.386569][ T7148] batman_adv: batadv0: Interface deactivated: team0 [ 242.393416][ T7148] batman_adv: batadv0: Removing interface: team0 [ 242.457114][ T7153] loop3: detected capacity change from 0 to 512 [ 242.464402][ T7153] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 242.476660][ T7153] EXT4-fs (loop3): 1 truncate cleaned up [ 242.483261][ T7153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.561308][ T7157] 9pnet_fd: Insufficient options for proto=fd [ 242.869196][ T7148] bridge0: port 3(team0) entered blocking state [ 242.875658][ T7148] bridge0: port 3(team0) entered disabled state [ 242.882934][ T7148] team0: entered allmulticast mode [ 242.889542][ T7148] team_slave_0: entered allmulticast mode [ 242.895371][ T7148] team_slave_1: entered allmulticast mode [ 243.401576][ T7136] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.415685][ T7136] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.430716][ T7136] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.457484][ T7136] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.938425][ T7162] loop2: detected capacity change from 0 to 512 [ 243.956577][ T7162] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 243.989644][ T7162] EXT4-fs (loop2): 1 truncate cleaned up [ 243.996437][ T7162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.036001][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.241442][ T7169] loop1: detected capacity change from 0 to 512 [ 245.294971][ T7169] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 245.315001][ T7169] EXT4-fs (loop1): 1 truncate cleaned up [ 245.321853][ T7169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.419181][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.668788][ T7172] loop2: detected capacity change from 0 to 2048 [ 245.678775][ T7172] msdos: Bad value for 'time_offset' [ 245.936332][ T7177] loop4: detected capacity change from 0 to 512 [ 246.306098][ T7179] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.365820][ T7181] 9pnet_fd: Insufficient options for proto=fd [ 246.556302][ T7177] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 246.571039][ T7177] EXT4-fs (loop4): mount failed [ 246.584896][ T7179] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.635297][ T7187] loop0: detected capacity change from 0 to 128 [ 246.650639][ T7179] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.682174][ T7187] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 246.719551][ T7191] pim6reg1: entered promiscuous mode [ 246.724957][ T7191] pim6reg1: entered allmulticast mode [ 246.732380][ T7187] ext4 filesystem being mounted at /251/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 246.763016][ T7179] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.789086][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.833386][ T7193] loop1: detected capacity change from 0 to 2048 [ 246.841264][ T7193] msdos: Bad value for 'time_offset' [ 246.867680][ T7179] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.879700][ T7179] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.896176][ T7179] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.918986][ T7179] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.388595][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 247.661083][ T7206] loop0: detected capacity change from 0 to 512 [ 247.828370][ T7206] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 247.860416][ T7213] loop4: detected capacity change from 0 to 256 [ 247.878518][ T7206] EXT4-fs (loop0): orphan cleanup on readonly fs [ 247.886556][ T7206] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1163: bg 0: block 248: padding at end of block bitmap is not set [ 247.918343][ T7206] Quota error (device loop0): write_blk: dquota write failed [ 247.925855][ T7206] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 247.936412][ T7206] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.1163: Failed to acquire dquot type 1 [ 247.961409][ T7206] EXT4-fs (loop0): 1 truncate cleaned up [ 247.976037][ T7206] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 248.002472][ T7213] FAT-fs (loop4): IO charset iso8859-9 not found [ 249.598582][ T7231] loop4: detected capacity change from 0 to 2048 [ 249.628150][ T7231] msdos: Bad value for 'time_offset' [ 249.752580][ T29] audit: type=1326 audit(1749409642.557:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.2.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b977e969 code=0x7ffc0000 [ 249.779830][ T7235] loop2: detected capacity change from 0 to 256 [ 249.786727][ T7235] vfat: Unknown parameter 'uni_' [ 249.887676][ T29] audit: type=1326 audit(1749409642.589:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.2.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f88b977e969 code=0x7ffc0000 [ 249.911279][ T29] audit: type=1326 audit(1749409642.589:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.2.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b977e969 code=0x7ffc0000 [ 249.934751][ T29] audit: type=1326 audit(1749409642.589:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.2.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f88b977e969 code=0x7ffc0000 [ 249.958350][ T29] audit: type=1326 audit(1749409642.589:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.2.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b977e969 code=0x7ffc0000 [ 249.981853][ T29] audit: type=1326 audit(1749409642.589:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.2.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f88b977e969 code=0x7ffc0000 [ 250.005324][ T29] audit: type=1326 audit(1749409642.589:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.2.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b977e969 code=0x7ffc0000 [ 250.028945][ T29] audit: type=1326 audit(1749409642.589:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.2.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f88b977e969 code=0x7ffc0000 [ 250.230689][ T7244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1176'. [ 250.614073][ T7254] pim6reg1: entered promiscuous mode [ 250.614294][ T7249] loop1: detected capacity change from 0 to 512 [ 250.619551][ T7254] pim6reg1: entered allmulticast mode [ 250.666268][ T7249] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 250.704493][ T7249] EXT4-fs (loop1): mount failed [ 250.852679][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.873409][ T7262] loop3: detected capacity change from 0 to 256 [ 250.882402][ T7262] vfat: Unknown parameter 'uni_' [ 251.071739][ T7270] loop1: detected capacity change from 0 to 512 [ 251.324604][ T7278] loop2: detected capacity change from 0 to 512 [ 251.535480][ T7270] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 251.710902][ T7278] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 251.725069][ T7270] EXT4-fs (loop1): orphan cleanup on readonly fs [ 251.772610][ T7278] EXT4-fs (loop2): orphan cleanup on readonly fs [ 251.818916][ T7278] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1186: bg 0: block 248: padding at end of block bitmap is not set [ 251.835119][ T7278] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1186: Failed to acquire dquot type 1 [ 251.851739][ T7278] EXT4-fs (loop2): 1 truncate cleaned up [ 251.858792][ T7278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 251.880003][ T7270] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1185: bg 0: block 248: padding at end of block bitmap is not set [ 251.906078][ T7270] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1185: Failed to acquire dquot type 1 [ 251.959649][ T7270] EXT4-fs (loop1): 1 truncate cleaned up [ 251.982014][ T7289] loop3: detected capacity change from 0 to 2048 [ 252.007963][ T7289] msdos: Bad value for 'time_offset' [ 252.395149][ T7270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 252.442490][ T7301] pim6reg1: entered promiscuous mode [ 252.447992][ T7301] pim6reg1: entered allmulticast mode [ 252.461166][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.742657][ T7308] loop1: detected capacity change from 0 to 128 [ 252.753575][ T7308] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 252.766616][ T7308] ext4 filesystem being mounted at /216/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 252.888022][ T7302] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1189'. [ 253.246231][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 253.246248][ T29] audit: type=1326 audit(1749409646.312:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7315 comm="syz.4.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f91ae969 code=0x7ffc0000 [ 253.358703][ T29] audit: type=1326 audit(1749409646.355:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7315 comm="syz.4.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fc2f91ae969 code=0x7ffc0000 [ 253.360898][ T3324] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 253.382175][ T29] audit: type=1326 audit(1749409646.355:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7315 comm="syz.4.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f91ae969 code=0x7ffc0000 [ 253.414661][ T29] audit: type=1326 audit(1749409646.355:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7315 comm="syz.4.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f91ae969 code=0x7ffc0000 [ 253.503345][ T7321] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1199'. [ 253.829745][ T7327] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1201'. [ 254.340368][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.390497][ T7337] pim6reg1: entered promiscuous mode [ 254.395981][ T7337] pim6reg1: entered allmulticast mode [ 254.422217][ T29] audit: type=1326 audit(1749449163.570:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7338 comm="syz.4.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f91ae969 code=0x7ffc0000 [ 254.445726][ T29] audit: type=1326 audit(1749449163.570:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7338 comm="syz.4.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f91ae969 code=0x7ffc0000 [ 254.472823][ T7339] loop4: detected capacity change from 0 to 256 [ 254.479926][ T7339] vfat: Unknown parameter 'uni_' [ 254.514542][ T29] audit: type=1326 audit(1749449163.624:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7338 comm="syz.4.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fc2f91ae969 code=0x7ffc0000 [ 254.538063][ T29] audit: type=1326 audit(1749449163.624:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7338 comm="syz.4.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f91ae969 code=0x7ffc0000 [ 254.538164][ T29] audit: type=1326 audit(1749449163.624:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7338 comm="syz.4.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f91ae969 code=0x7ffc0000 [ 254.538202][ T29] audit: type=1326 audit(1749449163.624:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7338 comm="syz.4.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fc2f91ae969 code=0x7ffc0000 [ 256.321887][ T7363] loop0: detected capacity change from 0 to 512 [ 256.331913][ T7363] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 256.382693][ T7363] EXT4-fs (loop0): 1 truncate cleaned up [ 256.388704][ T7363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.475710][ T7367] loop1: detected capacity change from 0 to 2048 [ 256.495508][ T7367] msdos: Bad value for 'time_offset' [ 256.506511][ T7370] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1209'. [ 256.940036][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.130359][ T7378] pim6reg1: entered promiscuous mode [ 257.135892][ T7378] pim6reg1: entered allmulticast mode [ 257.295634][ T7383] loop3: detected capacity change from 0 to 512 [ 257.430924][ T7392] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1218'. [ 257.458956][ T7383] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 257.489991][ T7383] EXT4-fs (loop3): orphan cleanup on readonly fs [ 257.491866][ T7391] loop1: detected capacity change from 0 to 2048 [ 257.506242][ T7383] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1216: bg 0: block 248: padding at end of block bitmap is not set [ 257.511497][ T7383] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1216: Failed to acquire dquot type 1 [ 257.913530][ T7395] loop4: detected capacity change from 0 to 512 [ 258.049520][ T7383] EXT4-fs (loop3): 1 truncate cleaned up [ 258.056151][ T7391] msdos: Bad value for 'time_offset' [ 258.116003][ T7395] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 258.130868][ T7395] EXT4-fs (loop4): mount failed [ 258.496724][ T7383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 260.483144][ T7430] 9pnet_fd: Insufficient options for proto=fd [ 261.160565][ T7441] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1234'. [ 261.336626][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 261.336644][ T29] audit: type=1326 audit(1749567718.982:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e35dfe969 code=0x7ffc0000 [ 261.370359][ T29] audit: type=1326 audit(1749567719.004:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e35dfe969 code=0x7ffc0000 [ 261.395207][ T29] audit: type=1326 audit(1749567719.025:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f5e35dfe969 code=0x7ffc0000 [ 261.414188][ T7444] loop0: detected capacity change from 0 to 256 [ 261.418833][ T29] audit: type=1326 audit(1749567719.025:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e35dfe969 code=0x7ffc0000 [ 261.434132][ T7444] vfat: Unknown parameter 'uni_' [ 261.448427][ T29] audit: type=1326 audit(1749567719.025:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e35dfe969 code=0x7ffc0000 [ 261.476961][ T29] audit: type=1326 audit(1749567719.025:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f5e35dfe969 code=0x7ffc0000 [ 261.500459][ T29] audit: type=1326 audit(1749567719.025:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e35dfe969 code=0x7ffc0000 [ 261.523917][ T29] audit: type=1326 audit(1749567719.025:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e35dfe969 code=0x7ffc0000 [ 261.547456][ T29] audit: type=1326 audit(1749567719.036:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f5e35dfe969 code=0x7ffc0000 [ 261.570955][ T29] audit: type=1326 audit(1749567719.036:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e35dfe969 code=0x7ffc0000 [ 262.569357][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.579843][ T7459] loop1: detected capacity change from 0 to 512 [ 262.587095][ T7459] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 262.632454][ T7459] EXT4-fs (loop1): orphan cleanup on readonly fs [ 262.673311][ T7459] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1241: bg 0: block 248: padding at end of block bitmap is not set [ 262.694453][ T7466] loop2: detected capacity change from 0 to 512 [ 262.707763][ T7464] loop3: detected capacity change from 0 to 2048 [ 262.713801][ T7459] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1241: Failed to acquire dquot type 1 [ 262.726689][ T7459] EXT4-fs (loop1): 1 truncate cleaned up [ 262.732922][ T7464] msdos: Bad value for 'time_offset' [ 262.740421][ T7466] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 262.787299][ T7459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 262.803512][ T7470] loop4: detected capacity change from 0 to 128 [ 262.828102][ T7466] EXT4-fs (loop2): orphan cleanup on readonly fs [ 262.835387][ T7466] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1243: bg 0: block 248: padding at end of block bitmap is not set [ 262.851595][ T7466] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1243: Failed to acquire dquot type 1 [ 262.863812][ T7466] EXT4-fs (loop2): 1 truncate cleaned up [ 262.870434][ T7466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 263.037325][ T7458] loop0: detected capacity change from 0 to 512 [ 263.066682][ T7458] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 263.081790][ T7458] EXT4-fs (loop0): mount failed [ 263.187295][ T7480] loop4: detected capacity change from 0 to 512 [ 263.325892][ T7480] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 263.340641][ T7480] EXT4-fs (loop4): mount failed [ 263.637690][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.653122][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.713418][ T7491] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.772900][ T7491] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.811293][ T7498] loop4: detected capacity change from 0 to 2048 [ 263.815314][ T7499] 9pnet_fd: Insufficient options for proto=fd [ 263.818205][ T7498] msdos: Bad value for 'time_offset' [ 263.847908][ T7491] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.894603][ T7491] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.951210][ T7491] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.962803][ T7491] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.974500][ T7491] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.985612][ T7491] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.896740][ T7508] loop0: detected capacity change from 0 to 512 [ 264.945896][ T7508] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 265.114978][ T7508] EXT4-fs (loop0): 1 truncate cleaned up [ 265.121266][ T7508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.214249][ T7514] loop3: detected capacity change from 0 to 512 [ 265.748790][ T7514] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 265.763734][ T7514] EXT4-fs (loop3): mount failed [ 266.134645][ T7521] loop4: detected capacity change from 0 to 2048 [ 266.280726][ T7521] msdos: Bad value for 'time_offset' [ 266.306818][ T7529] pim6reg1: entered promiscuous mode [ 266.312155][ T7529] pim6reg1: entered allmulticast mode [ 266.699806][ T7531] loop1: detected capacity change from 0 to 512 [ 266.709656][ T7531] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 266.730009][ T7531] EXT4-fs (loop1): 1 truncate cleaned up [ 266.736136][ T7531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.776351][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.194732][ T7543] loop0: detected capacity change from 0 to 128 [ 267.603394][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.832203][ T7552] pim6reg1: entered promiscuous mode [ 267.837612][ T7552] pim6reg1: entered allmulticast mode [ 268.149872][ T7563] loop1: detected capacity change from 0 to 2048 [ 268.169197][ T7563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.208839][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.240065][ T7567] loop1: detected capacity change from 0 to 2048 [ 268.266271][ T7567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.344356][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.408668][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 268.408687][ T29] audit: type=1107 audit(1749607242.576:2975): pid=7573 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 268.476170][ T7578] loop1: detected capacity change from 0 to 2048 [ 268.483751][ T7578] msdos: Bad value for 'time_offset' [ 268.532817][ T7579] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1276'. [ 268.876070][ T7585] netlink: 'syz.2.1279': attribute type 10 has an invalid length. [ 268.886836][ T7585] team0: left allmulticast mode [ 268.891806][ T7585] team_slave_0: left allmulticast mode [ 268.897347][ T7585] team_slave_1: left allmulticast mode [ 268.902866][ T7585] team0: left promiscuous mode [ 268.907696][ T7585] team_slave_0: left promiscuous mode [ 268.913392][ T7585] team_slave_1: left promiscuous mode [ 268.919113][ T7585] bridge0: port 3(team0) entered disabled state [ 268.926765][ T7585] batman_adv: batadv0: Adding interface: team0 [ 268.933117][ T7583] loop0: detected capacity change from 0 to 512 [ 268.933041][ T7585] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.933177][ T7585] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 268.942404][ T7587] netlink: 'syz.2.1279': attribute type 10 has an invalid length. [ 268.982741][ T7587] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1279'. [ 268.991706][ T7583] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 269.001846][ T7587] team0: entered promiscuous mode [ 269.002878][ T7583] EXT4-fs (loop0): 1 truncate cleaned up [ 269.007316][ T7587] team_slave_0: entered promiscuous mode [ 269.013199][ T7583] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.018444][ T7587] team_slave_1: entered promiscuous mode [ 269.036937][ T7587] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.044299][ T7587] batman_adv: batadv0: Interface activated: team0 [ 269.050979][ T7587] batman_adv: batadv0: Interface deactivated: team0 [ 269.057694][ T7587] batman_adv: batadv0: Removing interface: team0 [ 269.064736][ T7587] bridge0: port 3(team0) entered blocking state [ 269.071056][ T7587] bridge0: port 3(team0) entered disabled state [ 269.077558][ T7587] team0: entered allmulticast mode [ 269.082706][ T7587] team_slave_0: entered allmulticast mode [ 269.088556][ T7587] team_slave_1: entered allmulticast mode [ 269.200861][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.410736][ T7602] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.477856][ T7604] loop0: detected capacity change from 0 to 512 [ 269.485923][ T7604] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 269.499582][ T7604] EXT4-fs (loop0): 1 truncate cleaned up [ 269.506420][ T7604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.601780][ T7602] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.770290][ T7602] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.813821][ T7603] 9pnet_fd: Insufficient options for proto=fd [ 269.841527][ T7602] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.927152][ T7602] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.321694][ T7602] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.377019][ T7602] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.421047][ T7602] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.024357][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.277227][ T7624] loop0: detected capacity change from 0 to 512 [ 271.285382][ T7624] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 271.298224][ T7624] EXT4-fs (loop0): 1 truncate cleaned up [ 271.304859][ T7624] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.449170][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.498974][ T7650] loop3: detected capacity change from 0 to 2048 [ 272.506797][ T7650] msdos: Bad value for 'time_offset' [ 273.716250][ T7675] netlink: 'syz.1.1311': attribute type 10 has an invalid length. [ 273.740436][ T7675] bridge0: port 3(team0) entered disabled state [ 273.747530][ T7675] team0: left allmulticast mode [ 273.752453][ T7675] team_slave_0: left allmulticast mode [ 273.758018][ T7675] team_slave_1: left allmulticast mode [ 273.763514][ T7675] team0: left promiscuous mode [ 273.768346][ T7675] team_slave_0: left promiscuous mode [ 273.774076][ T7675] team_slave_1: left promiscuous mode [ 273.775499][ T7676] netlink: 'syz.1.1311': attribute type 10 has an invalid length. [ 273.779795][ T7675] bridge0: port 3(team0) entered disabled state [ 273.787870][ T7676] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1311'. [ 273.803916][ T7675] batman_adv: batadv0: Adding interface: team0 [ 273.810154][ T7675] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.835456][ T7675] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 273.907758][ T7676] team0: entered promiscuous mode [ 273.914176][ T7676] team_slave_0: entered promiscuous mode [ 273.919997][ T7676] team_slave_1: entered promiscuous mode [ 273.936201][ T7676] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.943534][ T7676] batman_adv: batadv0: Interface activated: team0 [ 273.950061][ T7676] batman_adv: batadv0: Interface deactivated: team0 [ 273.956754][ T7676] batman_adv: batadv0: Removing interface: team0 [ 273.994756][ T7676] bridge0: port 3(team0) entered blocking state [ 274.001186][ T7676] bridge0: port 3(team0) entered disabled state [ 274.007690][ T7676] team0: entered allmulticast mode [ 274.012831][ T7676] team_slave_0: entered allmulticast mode [ 274.018619][ T7676] team_slave_1: entered allmulticast mode [ 274.032400][ T7676] bridge0: port 3(team0) entered blocking state [ 274.038785][ T7676] bridge0: port 3(team0) entered forwarding state [ 274.131237][ T7682] loop1: detected capacity change from 0 to 2048 [ 274.138198][ T7682] msdos: Bad value for 'time_offset' [ 274.787917][ T7699] loop4: detected capacity change from 0 to 2048 [ 274.799468][ T7700] loop0: detected capacity change from 0 to 512 [ 274.886853][ T7700] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 274.915055][ T7700] EXT4-fs (loop0): 1 truncate cleaned up [ 274.921677][ T7700] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.948716][ T7699] msdos: Bad value for 'time_offset' [ 275.989206][ T7714] 9pnet_fd: Insufficient options for proto=fd [ 276.200744][ T7716] loop3: detected capacity change from 0 to 128 [ 276.212165][ T7716] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 276.230497][ T7716] ext4 filesystem being mounted at /225/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 276.589527][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.643913][ T7722] loop0: detected capacity change from 0 to 2048 [ 276.653262][ T7722] msdos: Bad value for 'time_offset' [ 276.900869][ T3326] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 276.965340][ T7736] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7736 comm=syz.3.1332 [ 277.042323][ T7739] pim6reg1: entered promiscuous mode [ 277.047758][ T7739] pim6reg1: entered allmulticast mode [ 277.171439][ T7741] loop3: detected capacity change from 0 to 2048 [ 277.182747][ T7741] msdos: Bad value for 'time_offset' [ 277.581191][ T7754] loop1: detected capacity change from 0 to 512 [ 277.589201][ T7754] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 277.600692][ T7754] EXT4-fs (loop1): 1 truncate cleaned up [ 277.606848][ T7754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.860267][ T7759] 9pnet_fd: Insufficient options for proto=fd [ 277.889978][ T7751] loop0: detected capacity change from 0 to 128 [ 277.910228][ T7751] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 277.952648][ T7751] ext4 filesystem being mounted at /289/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 278.450892][ T7771] pim6reg1: entered promiscuous mode [ 278.456385][ T7771] pim6reg1: entered allmulticast mode [ 278.476342][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 278.541744][ T7776] loop4: detected capacity change from 0 to 512 [ 278.610421][ T7776] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 278.663545][ T7776] EXT4-fs (loop4): orphan cleanup on readonly fs [ 278.678658][ T7780] loop3: detected capacity change from 0 to 2048 [ 278.695456][ T7776] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1344: bg 0: block 248: padding at end of block bitmap is not set [ 278.718909][ T7780] msdos: Bad value for 'time_offset' [ 278.759324][ T7776] Quota error (device loop4): write_blk: dquota write failed [ 278.766801][ T7776] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 278.776847][ T7776] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1344: Failed to acquire dquot type 1 [ 278.867024][ T7776] EXT4-fs (loop4): 1 truncate cleaned up [ 278.880435][ T7776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 278.915022][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.191634][ T7787] loop1: detected capacity change from 0 to 512 [ 279.225766][ T7787] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 279.255377][ T7787] EXT4-fs (loop1): 1 truncate cleaned up [ 279.261972][ T7787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.637770][ T7791] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1349'. [ 280.097085][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.586960][ T7803] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1351'. [ 280.696690][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.913414][ T7811] netlink: 'syz.3.1357': attribute type 10 has an invalid length. [ 280.988368][ T7812] netlink: 'syz.3.1357': attribute type 10 has an invalid length. [ 280.996461][ T7812] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1357'. [ 281.042231][ T7811] bridge0: port 3(team0) entered disabled state [ 281.049323][ T7811] team0: left allmulticast mode [ 281.054361][ T7811] team_slave_0: left allmulticast mode [ 281.059871][ T7811] team_slave_1: left allmulticast mode [ 281.065536][ T7811] team0: left promiscuous mode [ 281.070586][ T7811] team_slave_0: left promiscuous mode [ 281.076047][ T7811] team_slave_1: left promiscuous mode [ 281.081704][ T7811] bridge0: port 3(team0) entered disabled state [ 281.091783][ T7811] batman_adv: batadv0: Adding interface: team0 [ 281.098150][ T7811] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.123538][ T7811] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 281.144647][ T7815] netlink: 'syz.4.1358': attribute type 10 has an invalid length. [ 281.152968][ T7812] team0: entered promiscuous mode [ 281.158245][ T7812] team_slave_0: entered promiscuous mode [ 281.164058][ T7812] team_slave_1: entered promiscuous mode [ 281.171198][ T7812] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.180177][ T7812] batman_adv: batadv0: Interface activated: team0 [ 281.186691][ T7812] batman_adv: batadv0: Interface deactivated: team0 [ 281.193511][ T7812] batman_adv: batadv0: Removing interface: team0 [ 281.205306][ T7817] netlink: 'syz.4.1358': attribute type 10 has an invalid length. [ 281.213375][ T7817] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1358'. [ 281.224261][ T7812] bridge0: port 3(team0) entered blocking state [ 281.230867][ T7812] bridge0: port 3(team0) entered disabled state [ 281.237264][ T7812] team0: entered allmulticast mode [ 281.242560][ T7812] team_slave_0: entered allmulticast mode [ 281.248358][ T7812] team_slave_1: entered allmulticast mode [ 281.254740][ T7812] bridge0: port 3(team0) entered blocking state [ 281.261182][ T7812] bridge0: port 3(team0) entered forwarding state [ 281.268712][ T7815] bridge0: port 3(team0) entered disabled state [ 281.276147][ T7815] team0: left allmulticast mode [ 281.281162][ T7815] team_slave_0: left allmulticast mode [ 281.286788][ T7815] team_slave_1: left allmulticast mode [ 281.292415][ T7815] team0: left promiscuous mode [ 281.297428][ T7820] loop2: detected capacity change from 0 to 512 [ 281.301270][ T7815] team_slave_0: left promiscuous mode [ 281.309927][ T7815] team_slave_1: left promiscuous mode [ 281.315713][ T7815] bridge0: port 3(team0) entered disabled state [ 281.324571][ T7820] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 281.334735][ T7815] batman_adv: batadv0: Adding interface: team0 [ 281.339962][ T7820] EXT4-fs (loop2): orphan cleanup on readonly fs [ 281.340968][ T7815] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.372639][ T7815] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 281.374827][ T7820] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1359: bg 0: block 248: padding at end of block bitmap is not set [ 281.399259][ T7820] Quota error (device loop2): write_blk: dquota write failed [ 281.406735][ T7820] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 281.416729][ T7820] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1359: Failed to acquire dquot type 1 [ 281.428299][ T7817] team0: entered promiscuous mode [ 281.429152][ T7820] EXT4-fs (loop2): 1 truncate cleaned up [ 281.433347][ T7817] team_slave_0: entered promiscuous mode [ 281.433524][ T7817] team_slave_1: entered promiscuous mode [ 281.444979][ T7820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 281.450815][ T7817] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.469818][ T7817] batman_adv: batadv0: Interface activated: team0 [ 281.476363][ T7817] batman_adv: batadv0: Interface deactivated: team0 [ 281.483029][ T7817] batman_adv: batadv0: Removing interface: team0 [ 281.490007][ T7817] bridge0: port 3(team0) entered blocking state [ 281.496350][ T7817] bridge0: port 3(team0) entered disabled state [ 281.503987][ T7825] netlink: 'syz.3.1361': attribute type 10 has an invalid length. [ 281.504184][ T7817] team0: entered allmulticast mode [ 281.517030][ T7817] team_slave_0: entered allmulticast mode [ 281.522954][ T7817] team_slave_1: entered allmulticast mode [ 281.532868][ T7825] bridge0: port 3(team0) entered disabled state [ 281.559895][ T7825] team0: left allmulticast mode [ 281.561306][ T7828] netlink: 'syz.3.1361': attribute type 10 has an invalid length. [ 281.572753][ T7828] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1361'. [ 281.581924][ T7825] team_slave_0: left allmulticast mode [ 281.587480][ T7825] team_slave_1: left allmulticast mode [ 281.592998][ T7825] team0: left promiscuous mode [ 281.599777][ T7825] team_slave_0: left promiscuous mode [ 281.605326][ T7825] team_slave_1: left promiscuous mode [ 281.611058][ T7825] bridge0: port 3(team0) entered disabled state [ 281.620190][ T7830] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1363'. [ 281.634079][ T7825] batman_adv: batadv0: Adding interface: team0 [ 281.640348][ T7825] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.665616][ T7825] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 281.691036][ T7828] team0: entered promiscuous mode [ 281.707906][ T7828] team_slave_0: entered promiscuous mode [ 281.713731][ T7828] team_slave_1: entered promiscuous mode [ 281.748913][ T7828] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.767082][ T7836] loop4: detected capacity change from 0 to 128 [ 281.777946][ T7828] batman_adv: batadv0: Interface activated: team0 [ 281.784678][ T7828] batman_adv: batadv0: Interface deactivated: team0 [ 281.791331][ T7828] batman_adv: batadv0: Removing interface: team0 [ 281.815046][ T7828] bridge0: port 3(team0) entered blocking state [ 281.821574][ T7828] bridge0: port 3(team0) entered disabled state [ 281.828271][ T7828] team0: entered allmulticast mode [ 281.833503][ T7828] team_slave_0: entered allmulticast mode [ 281.839345][ T7828] team_slave_1: entered allmulticast mode [ 281.846306][ T7828] bridge0: port 3(team0) entered blocking state [ 281.852628][ T7828] bridge0: port 3(team0) entered forwarding state [ 281.937606][ T7841] netlink: 'syz.3.1366': attribute type 10 has an invalid length. [ 281.964456][ T7841] bridge0: port 3(team0) entered disabled state [ 281.972417][ T7841] team0: left allmulticast mode [ 281.995813][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.006457][ T7841] team_slave_0: left allmulticast mode [ 282.012007][ T7841] team_slave_1: left allmulticast mode [ 282.017497][ T7841] team0: left promiscuous mode [ 282.023979][ T7843] loop0: detected capacity change from 0 to 2048 [ 282.041345][ T7843] msdos: Bad value for 'time_offset' [ 282.053028][ T7841] team_slave_0: left promiscuous mode [ 282.054549][ T7845] netlink: 'syz.3.1366': attribute type 10 has an invalid length. [ 282.058535][ T7841] team_slave_1: left promiscuous mode [ 282.066451][ T7845] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1366'. [ 282.071983][ T7841] bridge0: port 3(team0) entered disabled state [ 282.125966][ T7841] batman_adv: batadv0: Adding interface: team0 [ 282.132199][ T7841] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.157481][ T7841] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 282.194725][ T7845] team0: entered promiscuous mode [ 282.199938][ T7845] team_slave_0: entered promiscuous mode [ 282.205730][ T7845] team_slave_1: entered promiscuous mode [ 282.212673][ T7845] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.219994][ T7837] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1362'. [ 282.229872][ T7845] batman_adv: batadv0: Interface activated: team0 [ 282.236400][ T7845] batman_adv: batadv0: Interface deactivated: team0 [ 282.243075][ T7845] batman_adv: batadv0: Removing interface: team0 [ 282.251055][ T7845] bridge0: port 3(team0) entered blocking state [ 282.257447][ T7845] bridge0: port 3(team0) entered disabled state [ 282.259954][ T7854] 9pnet_fd: Insufficient options for proto=fd [ 282.272132][ T7845] team0: entered allmulticast mode [ 282.285139][ T7845] team_slave_0: entered allmulticast mode [ 282.291099][ T7845] team_slave_1: entered allmulticast mode [ 282.301211][ T7845] bridge0: port 3(team0) entered blocking state [ 282.307537][ T7845] bridge0: port 3(team0) entered forwarding state [ 282.404753][ T7857] loop3: detected capacity change from 0 to 2048 [ 282.417962][ T7857] msdos: Bad value for 'time_offset' [ 282.492721][ T7860] loop1: detected capacity change from 0 to 128 [ 282.523121][ T7855] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1367'. [ 282.664391][ T7865] loop1: detected capacity change from 0 to 2048 [ 282.671409][ T7865] msdos: Bad value for 'time_offset' [ 282.977213][ T7871] loop4: detected capacity change from 0 to 512 [ 282.984317][ T7871] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 282.995615][ T7871] EXT4-fs (loop4): 1 truncate cleaned up [ 283.005871][ T7871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.437587][ T7879] loop2: detected capacity change from 0 to 128 [ 283.959357][ T7882] loop2: detected capacity change from 0 to 2048 [ 283.996340][ T7882] msdos: Bad value for 'time_offset' [ 284.018655][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.209511][ T7892] pim6reg1: entered promiscuous mode [ 284.214901][ T7892] pim6reg1: entered allmulticast mode [ 284.936485][ T7900] netlink: 'syz.2.1386': attribute type 10 has an invalid length. [ 285.001974][ T7900] team0: left allmulticast mode [ 285.013234][ T7900] team_slave_0: left allmulticast mode [ 285.014950][ T7903] netlink: 'syz.2.1386': attribute type 10 has an invalid length. [ 285.018769][ T7900] team_slave_1: left allmulticast mode [ 285.026631][ T7903] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1386'. [ 285.032120][ T7900] team0: left promiscuous mode [ 285.051821][ T7900] team_slave_0: left promiscuous mode [ 285.057435][ T7900] team_slave_1: left promiscuous mode [ 285.063166][ T7900] bridge0: port 3(team0) entered disabled state [ 285.128375][ T7900] batman_adv: batadv0: Adding interface: team0 [ 285.134620][ T7900] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.159974][ T7900] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 285.175633][ T7912] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1388'. [ 285.187498][ T7903] team0: entered promiscuous mode [ 285.192877][ T7903] team_slave_0: entered promiscuous mode [ 285.198883][ T7903] team_slave_1: entered promiscuous mode [ 285.205107][ T7903] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.213492][ T7903] batman_adv: batadv0: Interface activated: team0 [ 285.220060][ T7903] batman_adv: batadv0: Interface deactivated: team0 [ 285.226702][ T7903] batman_adv: batadv0: Removing interface: team0 [ 285.241480][ T7903] bridge0: port 3(team0) entered blocking state [ 285.247844][ T7903] bridge0: port 3(team0) entered disabled state [ 285.254560][ T7903] team0: entered allmulticast mode [ 285.261040][ T7903] team_slave_0: entered allmulticast mode [ 285.266882][ T7903] team_slave_1: entered allmulticast mode [ 285.278387][ T7911] bridge0: port 3(team0) entered disabled state [ 285.288454][ T7911] team0: left allmulticast mode [ 285.294715][ T7913] loop4: detected capacity change from 0 to 128 [ 285.297589][ T7911] team_slave_0: left allmulticast mode [ 285.306624][ T7911] team_slave_1: left allmulticast mode [ 285.307298][ T7913] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 285.312183][ T7911] team0: left promiscuous mode [ 285.340795][ T7911] team_slave_0: left promiscuous mode [ 285.341217][ T7913] ext4 filesystem being mounted at /309/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 285.346260][ T7911] team_slave_1: left promiscuous mode [ 285.362243][ T7911] bridge0: port 3(team0) entered disabled state [ 285.375025][ T7911] batman_adv: batadv0: Adding interface: team0 [ 285.381291][ T7911] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.406566][ T7911] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 285.483770][ T7914] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1384'. [ 285.539130][ T29] audit: type=1400 audit(1749725808.943:2976): avc: denied { read } for pid=7918 comm="syz.1.1390" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 285.562416][ T29] audit: type=1400 audit(1749725808.943:2977): avc: denied { open } for pid=7918 comm="syz.1.1390" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 285.587519][ T29] audit: type=1400 audit(1749725808.943:2978): avc: denied { create } for pid=7918 comm="syz.1.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 285.799679][ T29] audit: type=1400 audit(1749725809.222:2979): avc: denied { name_bind } for pid=7922 comm="syz.3.1392" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 285.821447][ T29] audit: type=1107 audit(1749725809.222:2980): pid=7922 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 285.834861][ T29] audit: type=1400 audit(1749725809.222:2981): avc: denied { read write } for pid=7922 comm="syz.3.1392" name="usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 285.858795][ T29] audit: type=1400 audit(1749725809.222:2982): avc: denied { open } for pid=7922 comm="syz.3.1392" path="/dev/usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 285.920349][ T7930] loop1: detected capacity change from 0 to 512 [ 285.933906][ T7930] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 285.974673][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 285.996600][ T7934] loop0: detected capacity change from 0 to 2048 [ 286.013534][ T7930] EXT4-fs (loop1): 1 truncate cleaned up [ 286.020101][ T7934] msdos: Bad value for 'time_offset' [ 286.047881][ T29] audit: type=1400 audit(1749725809.362:2983): avc: denied { read } for pid=7927 comm="syz.0.1393" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 286.070629][ T29] audit: type=1400 audit(1749725809.362:2984): avc: denied { open } for pid=7927 comm="syz.0.1393" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 286.217108][ T7930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.851246][ T7957] loop2: detected capacity change from 0 to 164 [ 286.861345][ T7957] Unsupported NM flag settings (8) [ 286.889780][ T7957] Unsupported NM flag settings (8) [ 286.953506][ T7961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1400'. [ 287.011108][ T29] audit: type=1400 audit(1749725810.542:2985): avc: denied { write } for pid=7951 comm="syz.2.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 287.060646][ T7961] syz_tun: entered allmulticast mode [ 287.088557][ T7958] syz_tun: left allmulticast mode [ 287.124468][ T7971] loop2: detected capacity change from 0 to 512 [ 287.156899][ T7971] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1402: casefold flag without casefold feature [ 287.175711][ T7971] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1402: couldn't read orphan inode 15 (err -117) [ 287.200956][ T7971] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.719112][ T7983] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1403'. [ 287.993363][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.090619][ T7989] wg2: left promiscuous mode [ 288.095278][ T7989] wg2: left allmulticast mode [ 288.121646][ T7989] loop4: detected capacity change from 0 to 512 [ 288.137787][ T7989] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 288.161628][ T7989] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1408: invalid indirect mapped block 4294967295 (level 1) [ 288.197839][ T7989] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1408: invalid indirect mapped block 4294967295 (level 1) [ 288.214755][ T7997] loop0: detected capacity change from 0 to 2048 [ 288.234996][ T7997] msdos: Bad value for 'time_offset' [ 288.244081][ T7989] EXT4-fs (loop4): 2 truncates cleaned up [ 288.268110][ T7989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.362901][ T8001] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1411'. [ 288.422489][ T7999] loop2: detected capacity change from 0 to 8192 [ 288.431512][ T7989] EXT4-fs (loop4): shut down requested (2) [ 288.446407][ T7989] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 288.457518][ T4562] loop2: p1 p2 p3 [ 288.465715][ T7999] loop2: p1 p2 p3 [ 288.489220][ T7989] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 288.501351][ T8009] wg2: entered promiscuous mode [ 288.506275][ T8009] wg2: entered allmulticast mode [ 288.545638][ T8008] loop3: detected capacity change from 0 to 2048 [ 288.561662][ T7989] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 288.576719][ T8008] msdos: Bad value for 'time_offset' [ 288.602377][ T3779] udevd[3779]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 288.611724][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 288.614570][ T4562] udevd[4562]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 288.640936][ T3779] udevd[3779]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 288.649608][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 288.654309][ T4562] udevd[4562]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 288.714529][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.739377][ T8015] pim6reg1: entered promiscuous mode [ 288.744883][ T8015] pim6reg1: entered allmulticast mode [ 288.893862][ T8011] xt_hashlimit: max too large, truncated to 1048576 [ 289.039906][ T8022] Falling back ldisc for ttyS3. [ 289.052656][ T8035] FAULT_INJECTION: forcing a failure. [ 289.052656][ T8035] name failslab, interval 1, probability 0, space 0, times 1 [ 289.065582][ T8035] CPU: 0 UID: 0 PID: 8035 Comm: syz.0.1418 Not tainted 6.15.0-syzkaller-02245-gdd3922cf9d4d #0 PREEMPT(voluntary) [ 289.065616][ T8035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 289.065635][ T8035] Call Trace: [ 289.065642][ T8035] [ 289.065650][ T8035] __dump_stack+0x1d/0x30 [ 289.065672][ T8035] dump_stack_lvl+0xe8/0x140 [ 289.065692][ T8035] dump_stack+0x15/0x1b [ 289.065726][ T8035] should_fail_ex+0x265/0x280 [ 289.065759][ T8035] should_failslab+0x8c/0xb0 [ 289.065802][ T8035] __kmalloc_noprof+0xa5/0x3e0 [ 289.065831][ T8035] ? iovec_from_user+0x84/0x210 [ 289.065908][ T8035] iovec_from_user+0x84/0x210 [ 289.065941][ T8035] __import_iovec+0xf3/0x540 [ 289.065963][ T8035] ? mntput_no_expire+0x6f/0x3d0 [ 289.065994][ T8035] import_iovec+0x61/0x80 [ 289.066017][ T8035] ___sys_sendmsg+0x146/0x1d0 [ 289.066160][ T8035] __sys_sendmmsg+0x178/0x300 [ 289.066192][ T8035] __x64_sys_sendmmsg+0x57/0x70 [ 289.066212][ T8035] x64_sys_call+0x2f2f/0x2fb0 [ 289.066239][ T8035] do_syscall_64+0xd2/0x200 [ 289.066335][ T8035] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 289.066428][ T8035] ? clear_bhb_loop+0x40/0x90 [ 289.066455][ T8035] ? clear_bhb_loop+0x40/0x90 [ 289.066531][ T8035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.066552][ T8035] RIP: 0033:0x7f5e35dfe969 [ 289.066571][ T8035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.066589][ T8035] RSP: 002b:00007f5e34446038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 289.066648][ T8035] RAX: ffffffffffffffda RBX: 00007f5e36026080 RCX: 00007f5e35dfe969 [ 289.066660][ T8035] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 289.066672][ T8035] RBP: 00007f5e34446090 R08: 0000000000000000 R09: 0000000000000000 [ 289.066688][ T8035] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.066717][ T8035] R13: 0000000000000000 R14: 00007f5e36026080 R15: 00007ffd66610c58 [ 289.066771][ T8035] [ 289.373867][ T8042] loop4: detected capacity change from 0 to 256 [ 289.445863][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.565624][ T8058] syzkaller0: entered promiscuous mode [ 289.571263][ T8058] syzkaller0: entered allmulticast mode [ 289.789741][ T8063] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 289.849640][ T8064] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1425'. [ 289.931997][ T8067] loop1: detected capacity change from 0 to 2048 [ 289.939007][ T8067] msdos: Bad value for 'time_offset' [ 289.982562][ T8073] loop0: detected capacity change from 0 to 2048 [ 289.989495][ T8073] msdos: Bad value for 'time_offset' [ 290.266293][ T8091] loop3: detected capacity change from 0 to 512 [ 290.275369][ T8091] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 290.284408][ T8092] loop4: detected capacity change from 0 to 512 [ 290.292200][ T8091] EXT4-fs (loop3): orphan cleanup on readonly fs [ 290.300152][ T8092] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 290.309715][ T8091] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1430: bg 0: block 248: padding at end of block bitmap is not set [ 290.316723][ T8092] EXT4-fs (loop4): orphan cleanup on readonly fs [ 290.325335][ T8091] __quota_error: 117 callbacks suppressed [ 290.325352][ T8091] Quota error (device loop3): write_blk: dquota write failed [ 290.332248][ T8092] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1431: bg 0: block 248: padding at end of block bitmap is not set [ 290.336241][ T8091] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 290.347076][ T8092] Quota error (device loop4): write_blk: dquota write failed [ 290.357945][ T8091] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1430: Failed to acquire dquot type 1 [ 290.360553][ T8091] EXT4-fs (loop3): 1 truncate cleaned up [ 290.367885][ T8092] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 290.377518][ T8091] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 290.386646][ T8092] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1431: Failed to acquire dquot type 1 [ 290.426909][ T8092] EXT4-fs (loop4): 1 truncate cleaned up [ 290.433408][ T8092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 290.551397][ T8096] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1432'. [ 290.560470][ T8096] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1432'. [ 290.589376][ T8098] validate_nla: 2 callbacks suppressed [ 290.589394][ T8098] netlink: 'syz.2.1433': attribute type 10 has an invalid length. [ 290.604227][ T8098] team0: left allmulticast mode [ 290.609265][ T8098] team_slave_0: left allmulticast mode [ 290.614877][ T8098] team_slave_1: left allmulticast mode [ 290.620463][ T8098] team0: left promiscuous mode [ 290.625438][ T8098] team_slave_0: left promiscuous mode [ 290.630969][ T8098] team_slave_1: left promiscuous mode [ 290.636608][ T8098] bridge0: port 3(team0) entered disabled state [ 290.638927][ T8099] netlink: 'syz.2.1433': attribute type 10 has an invalid length. [ 290.650784][ T8099] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1433'. [ 290.660533][ T8098] batman_adv: batadv0: Adding interface: team0 [ 290.666821][ T8098] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.692187][ T8098] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 290.702460][ T8099] team0: entered promiscuous mode [ 290.707519][ T8099] team_slave_0: entered promiscuous mode [ 290.713303][ T8099] team_slave_1: entered promiscuous mode [ 290.719561][ T8099] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.726520][ T8099] batman_adv: batadv0: Interface activated: team0 [ 290.733082][ T8099] batman_adv: batadv0: Interface deactivated: team0 [ 290.739875][ T8099] batman_adv: batadv0: Removing interface: team0 [ 290.747733][ T8099] bridge0: port 3(team0) entered blocking state [ 290.754165][ T8099] bridge0: port 3(team0) entered disabled state [ 290.760568][ T8099] team0: entered allmulticast mode [ 290.765753][ T8099] team_slave_0: entered allmulticast mode [ 290.771495][ T8099] team_slave_1: entered allmulticast mode [ 290.814579][ T29] audit: type=1400 audit(1749725814.619:3103): avc: denied { ioctl } for pid=8101 comm="syz.2.1435" path="socket:[29331]" dev="sockfs" ino=29331 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 290.843892][ T29] audit: type=1400 audit(1749725814.651:3104): avc: denied { read write } for pid=8101 comm="syz.2.1435" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 290.868365][ T29] audit: type=1400 audit(1749725814.651:3105): avc: denied { open } for pid=8101 comm="syz.2.1435" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 290.902660][ T8109] bridge0: entered promiscuous mode [ 290.912303][ T8111] netlink: 'syz.2.1437': attribute type 10 has an invalid length. [ 290.925095][ T8109] macvlan2: entered promiscuous mode [ 290.936602][ T8111] team0: left allmulticast mode [ 290.966102][ T8111] team_slave_0: left allmulticast mode [ 290.971872][ T8111] team_slave_1: left allmulticast mode [ 290.977748][ T8111] team0: left promiscuous mode [ 290.988182][ T8111] team_slave_0: left promiscuous mode [ 290.993691][ T8111] team_slave_1: left promiscuous mode [ 290.999344][ T8111] bridge0: port 3(team0) entered disabled state [ 291.017255][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.019676][ T8117] netlink: 'syz.2.1437': attribute type 10 has an invalid length. [ 291.034454][ T8117] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1437'. [ 291.043782][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.057071][ T8111] batman_adv: batadv0: Adding interface: team0 [ 291.063389][ T8111] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.088768][ T8111] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 291.116594][ T8123] loop3: detected capacity change from 0 to 1024 [ 291.130674][ T8117] team0: entered promiscuous mode [ 291.135811][ T8117] team_slave_0: entered promiscuous mode [ 291.141575][ T8117] team_slave_1: entered promiscuous mode [ 291.148374][ T8117] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.156809][ T8117] batman_adv: batadv0: Interface activated: team0 [ 291.163314][ T8117] batman_adv: batadv0: Interface deactivated: team0 [ 291.170037][ T8117] batman_adv: batadv0: Removing interface: team0 [ 291.193988][ T8123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.206737][ T8117] bridge0: port 3(team0) entered blocking state [ 291.213155][ T8117] bridge0: port 3(team0) entered disabled state [ 291.219861][ T8123] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.233014][ T8117] team0: entered allmulticast mode [ 291.238288][ T8117] team_slave_0: entered allmulticast mode [ 291.243537][ T29] audit: type=1400 audit(1749725815.070:3106): avc: denied { create } for pid=8120 comm="syz.3.1440" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 291.244076][ T8117] team_slave_1: entered allmulticast mode [ 291.271346][ T8118] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1439'. [ 291.284022][ T8126] pim6reg1: entered promiscuous mode [ 291.289415][ T8126] pim6reg1: entered allmulticast mode [ 291.299837][ T29] audit: type=1400 audit(1749725815.134:3107): avc: denied { lock } for pid=8120 comm="syz.3.1440" path="/256/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 291.323060][ T29] audit: type=1400 audit(1749725815.134:3108): avc: denied { setattr } for pid=8120 comm="syz.3.1440" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 291.422071][ T8139] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8139 comm=syz.2.1443 [ 291.442403][ T8139] loop2: detected capacity change from 0 to 1764 [ 291.457390][ T8139] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 291.485296][ T8112] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1434'. [ 291.505173][ T8142] loop2: detected capacity change from 0 to 2048 [ 291.512115][ T8142] msdos: Bad value for 'time_offset' [ 291.862260][ T8154] loop1: detected capacity change from 0 to 1024 [ 291.885600][ T8154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.901965][ T8154] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1449: bg 0: block 88: padding at end of block bitmap is not set [ 291.916596][ T8154] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 291.941498][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.962828][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1450'. [ 291.971883][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1450'. [ 291.980989][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1450'. [ 291.991087][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.054651][ T8161] loop1: detected capacity change from 0 to 1024 [ 292.068182][ T8168] loop3: detected capacity change from 0 to 512 [ 292.075749][ T8168] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 292.087504][ T8161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.111934][ T8168] EXT4-fs (loop3): orphan cleanup on readonly fs [ 292.119643][ T8168] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1451: bg 0: block 248: padding at end of block bitmap is not set [ 292.134717][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.135904][ T8168] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1451: Failed to acquire dquot type 1 [ 292.156943][ T8168] EXT4-fs (loop3): 1 truncate cleaned up [ 292.165568][ T8168] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 292.797639][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.054494][ T8206] loop1: detected capacity change from 0 to 2048 [ 293.061266][ T8206] msdos: Bad value for 'time_offset' [ 293.097586][ T8208] netlink: 'syz.4.1465': attribute type 10 has an invalid length. [ 293.164298][ T8215] loop2: detected capacity change from 0 to 256 [ 293.188130][ T8215] FAT-fs (loop2): count of clusters too big (178174) [ 293.194896][ T8215] FAT-fs (loop2): Can't find a valid FAT filesystem [ 293.243082][ T8221] pim6reg1: entered promiscuous mode [ 293.248492][ T8221] pim6reg1: entered allmulticast mode [ 293.335048][ T8223] loop4: detected capacity change from 0 to 128 [ 293.589187][ T8242] Falling back ldisc for ttyS3. [ 293.713813][ T8271] FAULT_INJECTION: forcing a failure. [ 293.713813][ T8271] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 293.727217][ T8271] CPU: 0 UID: 0 PID: 8271 Comm: syz.2.1484 Not tainted 6.15.0-syzkaller-02245-gdd3922cf9d4d #0 PREEMPT(voluntary) [ 293.727290][ T8271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 293.727303][ T8271] Call Trace: [ 293.727315][ T8271] [ 293.727325][ T8271] __dump_stack+0x1d/0x30 [ 293.727352][ T8271] dump_stack_lvl+0xe8/0x140 [ 293.727373][ T8271] dump_stack+0x15/0x1b [ 293.727402][ T8271] should_fail_ex+0x265/0x280 [ 293.727431][ T8271] should_fail_alloc_page+0xf2/0x100 [ 293.727467][ T8271] __alloc_frozen_pages_noprof+0xff/0x360 [ 293.727574][ T8271] alloc_pages_mpol+0xb3/0x250 [ 293.727601][ T8271] vma_alloc_folio_noprof+0x1aa/0x300 [ 293.727630][ T8271] handle_mm_fault+0xe9f/0x2c00 [ 293.727668][ T8271] ? __rcu_read_unlock+0x4f/0x70 [ 293.727720][ T8271] do_user_addr_fault+0x3fe/0x1090 [ 293.727759][ T8271] ? kstrtouint_from_user+0x9f/0xf0 [ 293.727788][ T8271] exc_page_fault+0x62/0xa0 [ 293.727872][ T8271] asm_exc_page_fault+0x26/0x30 [ 293.727954][ T8271] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 293.727986][ T8271] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd eb 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 293.728017][ T8271] RSP: 0018:ffffc90011e07e48 EFLAGS: 00050212 [ 293.728033][ T8271] RAX: 00000000684ab279 RBX: 0000000000000010 RCX: 0000000000000010 [ 293.728046][ T8271] RDX: 0000000000000000 RSI: ffffc90011e07e80 RDI: 0000200000000340 [ 293.728059][ T8271] RBP: 0000000000000000 R08: 0000000000000371 R09: 0000000000000000 [ 293.728071][ T8271] R10: 0001c90011e07e80 R11: 0001c90011e07e8f R12: 0000200000000350 [ 293.728083][ T8271] R13: 00007ffffffff000 R14: 0000200000000340 R15: ffffc90011e07e80 [ 293.728103][ T8271] _copy_to_user+0x7c/0xa0 [ 293.728163][ T8271] put_timespec64+0x63/0xb0 [ 293.728184][ T8271] __x64_sys_clock_gettime+0x13d/0x180 [ 293.728221][ T8271] x64_sys_call+0x687/0x2fb0 [ 293.728244][ T8271] do_syscall_64+0xd2/0x200 [ 293.728276][ T8271] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 293.728393][ T8271] ? clear_bhb_loop+0x40/0x90 [ 293.728419][ T8271] ? clear_bhb_loop+0x40/0x90 [ 293.728441][ T8271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.728481][ T8271] RIP: 0033:0x7f88b977e969 [ 293.728496][ T8271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.728520][ T8271] RSP: 002b:00007f88b7de7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 293.728537][ T8271] RAX: ffffffffffffffda RBX: 00007f88b99a5fa0 RCX: 00007f88b977e969 [ 293.728550][ T8271] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000000 [ 293.728562][ T8271] RBP: 00007f88b7de7090 R08: 0000000000000000 R09: 0000000000000000 [ 293.728574][ T8271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.728586][ T8271] R13: 0000000000000001 R14: 00007f88b99a5fa0 R15: 00007ffc0d5ce888 [ 293.728653][ T8271] [ 294.286719][ T8311] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=249 sclass=netlink_route_socket pid=8311 comm=syz.4.1493 [ 294.306150][ T8304] Falling back ldisc for ttyS3. [ 294.330571][ T8316] wg2: left promiscuous mode [ 294.335307][ T8316] wg2: left allmulticast mode [ 294.535810][ T8350] loop1: detected capacity change from 0 to 128 [ 294.577845][ T8350] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 294.606886][ T8350] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.784266][ T8366] loop4: detected capacity change from 0 to 128 [ 294.793772][ T8366] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 294.807898][ T3324] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 294.821984][ T8366] ext4 filesystem being mounted at /336/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 294.919192][ T8373] bpf: Bad value for 'mode' [ 294.951338][ T8373] SELinux: Context system_u:object_r:mount_exec_t:s0 is not valid (left unmapped). [ 295.000569][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 295.000588][ T29] audit: type=1400 audit(1749725819.104:3360): avc: denied { unmount } for pid=3324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 295.054695][ T29] audit: type=1326 audit(1749725819.157:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz.3.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140d98e969 code=0x7ffc0000 [ 295.078196][ T29] audit: type=1326 audit(1749725819.157:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz.3.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140d98e969 code=0x7ffc0000 [ 295.101753][ T29] audit: type=1326 audit(1749725819.157:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz.3.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f140d98e969 code=0x7ffc0000 [ 295.125444][ T29] audit: type=1326 audit(1749725819.157:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz.3.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140d98e969 code=0x7ffc0000 [ 295.148913][ T29] audit: type=1326 audit(1749725819.157:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz.3.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140d98e969 code=0x7ffc0000 [ 295.172412][ T29] audit: type=1326 audit(1749725819.157:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz.3.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f140d98e969 code=0x7ffc0000 [ 295.195826][ T29] audit: type=1326 audit(1749725819.157:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz.3.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140d98e969 code=0x7ffc0000 [ 295.219289][ T29] audit: type=1326 audit(1749725819.157:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz.3.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140d98e969 code=0x7ffc0000 [ 295.242748][ T29] audit: type=1326 audit(1749725819.157:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz.3.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f140d98e969 code=0x7ffc0000 [ 295.277678][ T8383] loop3: detected capacity change from 0 to 1024 [ 295.330472][ T8383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.387137][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 295.409119][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.543919][ T8390] pim6reg1: entered promiscuous mode [ 295.549448][ T8390] pim6reg1: entered allmulticast mode [ 295.605987][ T8381] __nla_validate_parse: 37 callbacks suppressed [ 295.606001][ T8381] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1509'. [ 295.677463][ T8402] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1514'. [ 295.678393][ T8403] loop3: detected capacity change from 0 to 512 [ 295.704044][ T8403] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1515: casefold flag without casefold feature [ 295.717176][ T8403] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1515: couldn't read orphan inode 15 (err -117) [ 295.735287][ T8403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.864149][ T8414] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1517'. [ 295.912875][ T8416] loop1: detected capacity change from 0 to 2048 [ 295.937225][ T8416] loop1: p1 < > p4 [ 295.944425][ T8416] loop1: p4 size 8388608 extends beyond EOD, truncated [ 295.953321][ T8423] sctp: [Deprecated]: syz.3.1515 (pid 8423) Use of struct sctp_assoc_value in delayed_ack socket option. [ 295.953321][ T8423] Use struct sctp_sack_info instead [ 296.018512][ T3008] loop1: p1 < > p4 [ 296.028498][ T3008] loop1: p4 size 8388608 extends beyond EOD, truncated [ 296.192563][ T4562] udevd[4562]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 296.290105][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1524'. [ 296.299165][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1524'. [ 296.308243][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1524'. [ 296.325358][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1524'. [ 296.334417][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1524'. [ 296.343810][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1524'. [ 296.373610][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1524'. [ 296.461461][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.695190][ T8486] loop0: detected capacity change from 0 to 1024 [ 296.712772][ T8486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.771238][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.295764][ T8521] loop2: detected capacity change from 0 to 512 [ 297.317667][ T8521] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1540: casefold flag without casefold feature [ 297.333510][ T8517] pim6reg1: entered promiscuous mode [ 297.338901][ T8517] pim6reg1: entered allmulticast mode [ 297.363512][ T8521] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1540: couldn't read orphan inode 15 (err -117) [ 297.394611][ T8521] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.450712][ T8529] loop1: detected capacity change from 0 to 512 [ 297.504132][ T8529] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1541: casefold flag without casefold feature [ 297.517419][ T8529] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1541: couldn't read orphan inode 15 (err -117) [ 297.531762][ T8529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.565463][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.592137][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.643654][ T8550] capability: warning: `syz.4.1549' uses deprecated v2 capabilities in a way that may be insecure [ 297.794922][ T8569] pim6reg1: entered promiscuous mode [ 297.800329][ T8569] pim6reg1: entered allmulticast mode [ 297.863866][ T8584] loop3: detected capacity change from 0 to 512 [ 297.873518][ T8584] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1556: casefold flag without casefold feature [ 297.899178][ T8576] loop0: detected capacity change from 0 to 128 [ 297.909198][ T8584] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1556: couldn't read orphan inode 15 (err -117) [ 297.927866][ T8576] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 297.944931][ T8584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.957968][ T8576] ext4 filesystem being mounted at /323/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 297.972139][ T8588] loop1: detected capacity change from 0 to 512 [ 298.004223][ T8588] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1557: casefold flag without casefold feature [ 298.025180][ T8588] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1557: couldn't read orphan inode 15 (err -117) [ 298.043834][ T8588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.094341][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.119531][ T8571] loop4: detected capacity change from 0 to 1024 [ 298.161183][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.187599][ T8571] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.246473][ T8571] mmap: syz.4.1553 (8571) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 298.292593][ T8607] loop3: detected capacity change from 0 to 256 [ 298.306505][ T8609] pim6reg1: entered promiscuous mode [ 298.311899][ T8609] pim6reg1: entered allmulticast mode [ 298.343004][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.392095][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 298.432962][ T8619] loop0: detected capacity change from 0 to 1024 [ 298.446949][ T8619] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm +}[@: Failed to acquire dquot type 0 [ 298.475618][ T8619] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 298.496183][ T8619] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 298.510812][ T8627] loop1: detected capacity change from 0 to 128 [ 298.517373][ T8619] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #13: comm +}[@: mark_inode_dirty error [ 298.529222][ T8619] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 298.559399][ T8619] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm +}[@: mark_inode_dirty error [ 298.577049][ T8619] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 298.590428][ T8619] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 298.599298][ T8619] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 298.612227][ T8619] EXT4-fs error (device loop0): ext4_truncate:4255: inode #13: comm +}[@: mark_inode_dirty error [ 298.634641][ T8619] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 298.647909][ T8619] EXT4-fs (loop0): 1 truncate cleaned up [ 298.654402][ T8619] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.676646][ T8635] loop2: detected capacity change from 0 to 512 [ 298.677729][ T8619] ext4: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 298.706642][ T8635] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1573: casefold flag without casefold feature [ 298.720969][ T8635] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1573: couldn't read orphan inode 15 (err -117) [ 298.745853][ T8635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.772979][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.788058][ T8639] loop3: detected capacity change from 0 to 512 [ 298.798235][ T8639] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 298.833321][ T8639] EXT4-fs (loop3): 1 truncate cleaned up [ 298.853060][ T8643] loop1: detected capacity change from 0 to 256 [ 298.907301][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.960986][ T8639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.029475][ T8648] loop2: detected capacity change from 0 to 1024 [ 299.234302][ T8648] pim6reg: entered allmulticast mode [ 299.280762][ T8648] pim6reg: left allmulticast mode [ 299.552804][ T8688] Falling back ldisc for ttyS3. [ 299.582080][ T8686] infiniband syz2: set down [ 299.586683][ T8686] infiniband syz2: added veth0_to_bond [ 299.610116][ T8686] RDS/IB: syz2: added [ 299.614176][ T8686] smc: adding ib device syz2 with port count 1 [ 299.630768][ T8686] smc: ib device syz2 port 1 has pnetid [ 299.674704][ T8713] loop2: detected capacity change from 0 to 2048 [ 299.709562][ T8713] msdos: Bad value for 'time_offset' [ 299.812637][ T29] kauditd_printk_skb: 513 callbacks suppressed [ 299.812656][ T29] audit: type=1400 audit(1749725824.264:3881): avc: denied { tracepoint } for pid=8711 comm="syz.2.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 299.883656][ T29] audit: type=1400 audit(1749725824.350:3882): avc: denied { ioctl } for pid=8732 comm="syz.1.1595" path="socket:[31179]" dev="sockfs" ino=31179 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 299.984345][ T29] audit: type=1400 audit(1749725824.457:3883): avc: denied { read } for pid=8736 comm="syz.1.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 300.032402][ T29] audit: type=1400 audit(1749725824.511:3884): avc: denied { mounton } for pid=8736 comm="syz.1.1597" path="/311/file0" dev="tmpfs" ino=1709 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 300.085191][ T29] audit: type=1400 audit(1749725824.511:3885): avc: denied { mount } for pid=8736 comm="syz.1.1597" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 300.107320][ T29] audit: type=1326 audit(1749725824.522:3886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.4.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f91ae969 code=0x7ffc0000 [ 300.130901][ T29] audit: type=1326 audit(1749725824.522:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.4.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f91ae969 code=0x7ffc0000 [ 300.154804][ T29] audit: type=1400 audit(1749725824.533:3888): avc: denied { write } for pid=8736 comm="syz.1.1597" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 300.175816][ T29] audit: type=1400 audit(1749725824.533:3889): avc: denied { open } for pid=8736 comm="syz.1.1597" path="/311/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 300.225793][ T8742] 9pnet_fd: Insufficient options for proto=fd [ 300.233168][ T8742] loop4: detected capacity change from 0 to 128 [ 300.239573][ T29] audit: type=1400 audit(1749725824.715:3890): avc: denied { create } for pid=8741 comm="syz.4.1599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 300.266679][ T8742] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 300.287715][ T8742] ext4 filesystem being mounted at /349/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.300194][ T8742] FAULT_INJECTION: forcing a failure. [ 300.300194][ T8742] name failslab, interval 1, probability 0, space 0, times 0 [ 300.313003][ T8742] CPU: 0 UID: 0 PID: 8742 Comm: syz.4.1599 Not tainted 6.15.0-syzkaller-02245-gdd3922cf9d4d #0 PREEMPT(voluntary) [ 300.313030][ T8742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 300.313117][ T8742] Call Trace: [ 300.313126][ T8742] [ 300.313180][ T8742] __dump_stack+0x1d/0x30 [ 300.313208][ T8742] dump_stack_lvl+0xe8/0x140 [ 300.313229][ T8742] dump_stack+0x15/0x1b [ 300.313247][ T8742] should_fail_ex+0x265/0x280 [ 300.313274][ T8742] should_failslab+0x8c/0xb0 [ 300.313453][ T8742] kmem_cache_alloc_noprof+0x50/0x310 [ 300.313481][ T8742] ? getname_kernel+0x3c/0x1f0 [ 300.313502][ T8742] getname_kernel+0x3c/0x1f0 [ 300.313585][ T8742] vfs_path_lookup+0x4e/0x170 [ 300.313610][ T8742] mntns_install+0x17c/0x260 [ 300.313633][ T8742] __se_sys_setns+0xa44/0xf20 [ 300.313678][ T8742] __x64_sys_setns+0x31/0x40 [ 300.313812][ T8742] x64_sys_call+0x2e95/0x2fb0 [ 300.313843][ T8742] do_syscall_64+0xd2/0x200 [ 300.313872][ T8742] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 300.313904][ T8742] ? clear_bhb_loop+0x40/0x90 [ 300.313934][ T8742] ? clear_bhb_loop+0x40/0x90 [ 300.313963][ T8742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.313988][ T8742] RIP: 0033:0x7fc2f91ae969 [ 300.314080][ T8742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.314104][ T8742] RSP: 002b:00007fc2f7817038 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 300.314127][ T8742] RAX: ffffffffffffffda RBX: 00007fc2f93d5fa0 RCX: 00007fc2f91ae969 [ 300.314142][ T8742] RDX: 0000000000000000 RSI: 0000000024020000 RDI: 0000000000000008 [ 300.314178][ T8742] RBP: 00007fc2f7817090 R08: 0000000000000000 R09: 0000000000000000 [ 300.314203][ T8742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.314219][ T8742] R13: 0000000000000000 R14: 00007fc2f93d5fa0 R15: 00007ffc2b929948 [ 300.314243][ T8742] [ 300.314910][ T8742] EXT4-fs (loop4): shut down requested (1) [ 300.536419][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 300.605408][ T8752] __nla_validate_parse: 70 callbacks suppressed [ 300.605444][ T8752] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1602'. [ 300.638226][ T8754] loop4: detected capacity change from 0 to 512 [ 300.659795][ T8754] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1603: casefold flag without casefold feature [ 300.674197][ T8754] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1603: couldn't read orphan inode 15 (err -117) [ 300.687102][ T8754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.739362][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.820811][ T8766] pim6reg1: entered promiscuous mode [ 300.826207][ T8766] pim6reg1: entered allmulticast mode [ 300.928646][ T8776] loop0: detected capacity change from 0 to 512 [ 300.944248][ T8776] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 300.970961][ T8776] EXT4-fs (loop0): orphan cleanup on readonly fs [ 300.979997][ T8776] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1612: bg 0: block 248: padding at end of block bitmap is not set [ 301.007373][ T8776] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.1612: Failed to acquire dquot type 1 [ 301.032434][ T8776] EXT4-fs (loop0): 1 truncate cleaned up [ 301.046149][ T8776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 301.180927][ T8787] loop1: detected capacity change from 0 to 2048 [ 301.189098][ T8787] msdos: Bad value for 'time_offset' [ 301.497208][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.498313][ T8792] netlink: 'syz.2.1619': attribute type 10 has an invalid length. [ 301.514149][ T8792] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1619'. [ 301.535239][ T8794] netlink: 'syz.3.1618': attribute type 2 has an invalid length. [ 301.543236][ T8794] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1618'. [ 301.594367][ T8794] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 301.673812][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.746640][ T8811] loop0: detected capacity change from 0 to 1024 [ 301.811814][ T8811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.835767][ T8817] loop4: detected capacity change from 0 to 1024 [ 301.909188][ T8811] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1624: bg 0: block 88: padding at end of block bitmap is not set [ 301.951581][ T8817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.974848][ T8817] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1625: bg 0: block 88: padding at end of block bitmap is not set [ 301.992276][ T8835] loop3: detected capacity change from 0 to 256 [ 301.999769][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.013484][ T8835] FAT-fs (loop3): count of clusters too big (178174) [ 302.020305][ T8835] FAT-fs (loop3): Can't find a valid FAT filesystem [ 302.061585][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.110632][ T8849] pim6reg1: entered promiscuous mode [ 302.116161][ T8849] pim6reg1: entered allmulticast mode [ 302.165555][ T8853] netlink: 'syz.0.1630': attribute type 10 has an invalid length. [ 302.173510][ T8853] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1630'. [ 302.244093][ T8860] loop0: detected capacity change from 0 to 256 [ 302.248238][ T8862] loop1: detected capacity change from 0 to 256 [ 302.265688][ T8860] vfat: Unknown parameter '00000000000000000000' [ 302.295837][ T8862] vfat: Unknown parameter '00000000000000000000' [ 302.324619][ T8864] loop4: detected capacity change from 0 to 512 [ 302.712881][ T8864] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 302.755491][ T8878] loop0: detected capacity change from 0 to 512 [ 302.806315][ T8880] loop2: detected capacity change from 0 to 512 [ 302.856811][ T8878] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.1636: casefold flag without casefold feature [ 302.972445][ T8864] EXT4-fs (loop4): 1 truncate cleaned up [ 302.983745][ T8880] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1637: casefold flag without casefold feature [ 303.006073][ T8878] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1636: couldn't read orphan inode 15 (err -117) [ 303.019999][ T8880] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1637: couldn't read orphan inode 15 (err -117) [ 303.027447][ T8864] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.047056][ T8878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.084873][ T8880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.122976][ T8890] loop3: detected capacity change from 0 to 1024 [ 303.140921][ T8890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.228192][ T8890] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1638: bg 0: block 88: padding at end of block bitmap is not set [ 303.243478][ T8901] sctp: [Deprecated]: syz.0.1636 (pid 8901) Use of struct sctp_assoc_value in delayed_ack socket option. [ 303.243478][ T8901] Use struct sctp_sack_info instead [ 303.271647][ T8880] sctp: [Deprecated]: syz.2.1637 (pid 8880) Use of struct sctp_assoc_value in delayed_ack socket option. [ 303.271647][ T8880] Use struct sctp_sack_info instead [ 303.314426][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.441946][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1640'. [ 303.451118][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1640'. [ 303.460308][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1640'. [ 303.482821][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1640'. [ 303.491764][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1640'. [ 303.513954][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1640'. [ 303.589176][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.602556][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.653668][ T8931] netlink: 'syz.0.1642': attribute type 10 has an invalid length. [ 303.727079][ T8941] loop1: detected capacity change from 0 to 256 [ 303.753271][ T8941] FAT-fs (loop1): count of clusters too big (178174) [ 303.760122][ T8941] FAT-fs (loop1): Can't find a valid FAT filesystem [ 304.042162][ T8960] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 304.059777][ T8963] loop1: detected capacity change from 0 to 2048 [ 304.075651][ T8963] msdos: Bad value for 'time_offset' [ 304.639884][ T29] kauditd_printk_skb: 265 callbacks suppressed [ 304.639902][ T29] audit: type=1107 audit(1749725829.446:4154): pid=8968 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 304.765980][ T8979] netlink: 'syz.3.1658': attribute type 10 has an invalid length. [ 304.977396][ T29] audit: type=1326 audit(1749725829.811:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9003 comm="syz.0.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e35dfe969 code=0x7ffc0000 [ 305.000905][ T29] audit: type=1326 audit(1749725829.811:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9003 comm="syz.0.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e35dfe969 code=0x7ffc0000 [ 305.024317][ T29] audit: type=1326 audit(1749725829.811:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9003 comm="syz.0.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f5e35dfe969 code=0x7ffc0000 [ 305.047889][ T29] audit: type=1326 audit(1749725829.811:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9003 comm="syz.0.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e35dfe969 code=0x7ffc0000 [ 305.081196][ T9002] wg2: left promiscuous mode [ 305.085866][ T9002] wg2: left allmulticast mode [ 305.100362][ T9007] pim6reg1: entered promiscuous mode [ 305.105704][ T9007] pim6reg1: entered allmulticast mode [ 305.123093][ T29] audit: type=1107 audit(1749725829.972:4159): pid=9016 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 305.154485][ T9000] Falling back ldisc for ttyS3. [ 305.326327][ T29] audit: type=1326 audit(1749725830.187:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9033 comm="syz.0.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e35dfe969 code=0x7ffc0000 [ 305.367218][ T9041] loop3: detected capacity change from 0 to 256 [ 305.375745][ T9041] FAT-fs (loop3): count of clusters too big (178174) [ 305.382860][ T9041] FAT-fs (loop3): Can't find a valid FAT filesystem [ 305.418483][ T9034] loop0: detected capacity change from 0 to 256 [ 305.439676][ T29] audit: type=1326 audit(1749725830.187:4161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9033 comm="syz.0.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5e35dfe969 code=0x7ffc0000 [ 305.450784][ T9045] __nla_validate_parse: 14 callbacks suppressed [ 305.450836][ T9045] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1668'. [ 305.463329][ T29] audit: type=1326 audit(1749725830.230:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9033 comm="syz.0.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e35dfe969 code=0x7ffc0000 [ 305.501950][ T29] audit: type=1326 audit(1749725830.251:4163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9033 comm="syz.0.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e35dfe969 code=0x7ffc0000 [ 305.630980][ T9048] pim6reg1: entered promiscuous mode [ 305.636432][ T9048] pim6reg1: entered allmulticast mode [ 305.711472][ T9052] loop0: detected capacity change from 0 to 256 [ 305.718640][ T4562] ================================================================== [ 305.726757][ T4562] BUG: KCSAN: data-race in set_nlink / set_nlink [ 305.733138][ T4562] [ 305.735479][ T4562] read to 0xffff88810063a518 of 4 bytes by task 3008 on cpu 0: [ 305.743137][ T4562] set_nlink+0x29/0xb0 [ 305.747269][ T4562] kernfs_iop_permission+0x1e2/0x220 [ 305.752598][ T4562] inode_permission+0x1ca/0x310 [ 305.757475][ T4562] link_path_walk+0x162/0x900 [ 305.762159][ T4562] path_lookupat+0x63/0x2a0 [ 305.766689][ T4562] filename_lookup+0x147/0x340 [ 305.771477][ T4562] vfs_statx+0x9d/0x390 [ 305.775652][ T4562] vfs_fstatat+0x115/0x170 [ 305.780082][ T4562] __se_sys_newfstatat+0x55/0x260 [ 305.785123][ T4562] __x64_sys_newfstatat+0x55/0x70 [ 305.790173][ T4562] x64_sys_call+0x2c22/0x2fb0 [ 305.794880][ T4562] do_syscall_64+0xd2/0x200 [ 305.799417][ T4562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.805336][ T4562] [ 305.807674][ T4562] write to 0xffff88810063a518 of 4 bytes by task 4562 on cpu 1: [ 305.815324][ T4562] set_nlink+0x99/0xb0 [ 305.819461][ T4562] kernfs_iop_permission+0x1e2/0x220 [ 305.824775][ T4562] inode_permission+0x1ca/0x310 [ 305.829638][ T4562] link_path_walk+0x162/0x900 [ 305.834346][ T4562] path_openat+0x1de/0x2170 [ 305.838877][ T4562] do_filp_open+0x109/0x230 [ 305.843396][ T4562] do_sys_openat2+0xa6/0x110 [ 305.848004][ T4562] __x64_sys_openat+0xf2/0x120 [ 305.852779][ T4562] x64_sys_call+0x1af/0x2fb0 [ 305.857379][ T4562] do_syscall_64+0xd2/0x200 [ 305.861893][ T4562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.867795][ T4562] [ 305.870124][ T4562] value changed: 0x00000008 -> 0x00000009 [ 305.875929][ T4562] [ 305.878259][ T4562] Reported by Kernel Concurrency Sanitizer on: [ 305.884413][ T4562] CPU: 1 UID: 0 PID: 4562 Comm: udevd Not tainted 6.15.0-syzkaller-02245-gdd3922cf9d4d #0 PREEMPT(voluntary) [ 305.896074][ T4562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 305.906134][ T4562] ================================================================== [ 306.227413][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.