last executing test programs: 9.28358933s ago: executing program 2 (id=2117): accept4$unix(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x180000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select(0x40, &(0x7f0000000000)={0xa, 0x3, 0x1, 0x9, 0x100000000, 0x11000, 0x6}, 0x0, 0x0, 0x0) 8.092793989s ago: executing program 2 (id=2124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)={0x34, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 7.728154845s ago: executing program 2 (id=2126): ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40086610, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0), 0x2, 0x51a, &(0x7f0000001200)="$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") 6.641232903s ago: executing program 4 (id=2134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x68, 0x75, 0x40, 0xeb1, 0x7007, 0x210, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x55, 0x15, 0xe}}]}}]}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a3000000000140007800800124000050000080008400000000012000300686173683a6e65742c706f7274000000050005000a040000050004"], 0x60}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x9, 0x3202, @vifc_lcl_ifindex, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) socket$inet(0x2, 0x2, 0x0) unshare(0x26060400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) chown(&(0x7f0000000340)='./file0\x00', 0xee00, 0xee00) syz_emit_ethernet(0x86, &(0x7f0000000140)={@random="5b1a033f2511", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @empty=0xe0000001}, {0x0, 0x4e20, 0xfffffffffffffd2a, 0x0, @wg=@response={0x2, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afcee67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) 4.079323154s ago: executing program 3 (id=2150): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081) 4.016082825s ago: executing program 3 (id=2151): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x52, 0x4007, @fd=r5, 0x6, 0x0, 0x0, 0x2, 0x1}) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000040)={0x5, 0x432, 0xa00, 0x8, 0xd, "a4c42ba02a0b3b4335931f2d038553da933b3a"}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x380, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x1f8, 0x218, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x687c, 0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e0) 3.940405976s ago: executing program 1 (id=2153): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x26, 0x0, 0x0, 0xfffffffe}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="680200000005010400000000000000000100000a54020100030000000e0000004e430180cd0b240073797a3000000000000000000000000000000000000000000000000000000000e88b35f30b13f3a224496f95d0f31f2ecca2202a0d10f74ae9f0f9972ab6a4cb1af6e9e80d7a734dd9b42ce4c10df37977acc8d37fe68c0211a10f25d7785e3440007f00020000000a0000000a00040002000000fd0b0000ffff040001000000040000000600404d02000000fc0600000900f9ff020000000200000092007f00010000000500000009003c86030000000400000009000000030000000500000002000f0003000000050000000002020003000000d0000000ff030300030000000b000000a1f70900020000006707000002000100020000000500000040000f0003000000ff0f00000500180002000000ff7f00000800090001000000020000000700ffff00000000080000000600090000000000040000000900070000000000050000000700090003000000faffffff05000800000000000000000000c007000100000003000000db06070002000000010000000700002201000000a6518e4105000000020000000300000009006500030000001b0600000100030000000000020000006000000003000000090000000104020003000000cb0000000000d6050100000005000000ff07020003000000fcffffffde8b01040000000008000000ff07c3000000000001010000ffff030001000000010000000200010001000000000000000400050001000000f93400000104080003000000000000000100fb00010000000e000000070006000100000000000000b10007000300000003000000"], 0x268}, 0x1, 0x0, 0x0, 0x14}, 0x40044) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x57e4, &(0x7f00000003c0)={0x0, 0xfefffbfe, 0x10100, 0x5, 0x1000303}, &(0x7f0000000540), &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}, {@stripe={'stripe', 0x3d, 0x2}}, {@jqfmt_vfsold}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_emit_ethernet(0xfffffdf8, 0x0, 0x0) syz_io_uring_setup(0x111, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0xe) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000140)) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000000)={0x0, 0x2, [0x77, 0x3, 0x8, 0x5, 0x2, 0x3ff]}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket(0x10, 0x80003, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 3.578478332s ago: executing program 4 (id=2154): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x5, 0x432, 0xa00, 0x8, 0xd, "a4c42ba02a0b3b4335931f2d038553da933b3a"}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x380, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x1f8, 0x218, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x687c, 0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e0) 3.159377778s ago: executing program 4 (id=2155): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 3.156873539s ago: executing program 3 (id=2156): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) 2.188395824s ago: executing program 4 (id=2159): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000a00), &(0x7f0000000a40)=r1}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$igmp6(0xa, 0x3, 0x2) recvmmsg(r4, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}, 0xfffffe00}], 0x1, 0x141, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000200)=ANY=[]) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00'}, 0x10) r5 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) socket$kcm(0x2, 0xa, 0x2) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a80016000900014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x4, 0x303, 0x100}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000300)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @void}}}]}) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r8, 0x10e, 0x5, &(0x7f0000000d00)=""/4096, &(0x7f00000001c0)=0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.137795365s ago: executing program 3 (id=2160): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$dupfd(r1, 0x0, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) r3 = fsopen(&(0x7f0000000100)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x10000a0) getdents(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003540)=[{{&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000880)=[{&(0x7f0000002400)="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", 0x26b}], 0x1}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000780)="e4", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000000), 0x4) io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x7608, 0x0, 0x0, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000200001002abd7000fcdbdf250a80100000000001120001000800180008000000140001000000000000000000000000000000000108000f00ffffffff1400020000000000000000000000ffff0a010102080017"], 0x5c}}, 0x4) 1.776118901s ago: executing program 1 (id=2161): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x14, 0x2, 0x6, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1.766751221s ago: executing program 4 (id=2162): r0 = request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)=',$:\x00', 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r0, &(0x7f00000000c0)='.dead\x00', &(0x7f0000000100)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb\r+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\xbe\n\xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd8s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|y\xc6\f\x1e\x8fJw\xdc\r\xa7\n}Uc\x05<\xe9\x9f\x87\v\xbcLWk\fcC\xf5\x02z\x1e\xb2a\x18\xaaJ\x14=\bP\xc5e\x9d\xaf;\x8f\x87\xbe\x7f\x84\xdf\x05I:\xe66\x1c:\xe2\xe3\v\x8e\x04\xda\xc5U\xd4\x96\xf2\xc3x\x17\xd2\x98uMB0x0, &(0x7f0000000300)=0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file0\x00'}) io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000600"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) 1.539592855s ago: executing program 0 (id=2163): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1.156692461s ago: executing program 3 (id=2164): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r7, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$tipc(r5, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@jqfmt_vfsv1}]}, 0x1, 0x604, &(0x7f0000000c00)="$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") r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_LINK_NETNSID={0x8}]}, 0x3c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 1.125502182s ago: executing program 1 (id=2165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3c}}, 0x20008000) 1.056418533s ago: executing program 1 (id=2166): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, 0x0, &(0x7f0000000400)=""/198}, 0x20) 1.047699713s ago: executing program 0 (id=2167): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000096d132478102268d00", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 999.975573ms ago: executing program 4 (id=2168): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r6, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@jqfmt_vfsv1}]}, 0x1, 0x604, &(0x7f0000000c00)="$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") r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00'}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_LINK_NETNSID={0x8}]}, 0x3c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 973.114884ms ago: executing program 1 (id=2169): bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r0}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 971.504294ms ago: executing program 2 (id=2170): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 902.638565ms ago: executing program 0 (id=2171): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf2501000000", @ANYRES32=r4, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) 546.144941ms ago: executing program 0 (id=2172): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x26, 0x0, 0x0, 0xfffffffe}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x14}, 0x40044) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x57e4, &(0x7f00000003c0)={0x0, 0xfefffbfe, 0x10100, 0x5, 0x1000303}, &(0x7f0000000540), &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}, {@stripe={'stripe', 0x3d, 0x2}}, {@jqfmt_vfsold}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_emit_ethernet(0xfffffdf8, 0x0, 0x0) syz_io_uring_setup(0x111, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0xe) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000140)) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000000)={0x0, 0x2, [0x77, 0x3, 0x8, 0x5, 0x2, 0x3ff]}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket(0x10, 0x80003, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 545.809411ms ago: executing program 1 (id=2173): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = eventfd2(0x0, 0x0) iopl(0x3) read$eventfd(r3, &(0x7f0000000040), 0x8) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000021c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffd91, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x8}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1f}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000580)=0x14) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x81) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x1, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0xfc, 0x53e, &(0x7f0000000940)="$eJzs3UFvI1cdAPD/eO3d7G62SYEDVGoptGi3grWThrYRh1IkBKdKiMJ5CYkTRXHiKHbaTVRB9hMgIQRInODCBYkPgIRW4sKxQqoEZ5CKQIhuQYIDdJDtcRKcceKsnHjX+f2kybz3xjP/9xy/8YznaSaAC+vZiHgtIj5M0/SFiJjKygvZFHudqfW6Dx68vdiakkjTN/6eRJKVdbeVZPPr2WoTEfH1r0Z8Ozkat7Gzu7ZQqxW7+UpzfbPS2Nm9vbq+sFJdqW7Mzc2+PP/K/EvzM0Np542IePXLf/7h937+lVd//bm3/nTnr7e+06rWZLb8cDtOqXjcwk7TS1cmelbYeshgj6JWe0rdzNXB1rl3hvUBAKC/1jH+RyLi0xHxQkzFpeMPZwEAAIDHUPrFyfhPEpHmu9ynHAAAAHiMFNpjYJNCORsLMBmFQrncGcP7sbhWqNUbzc8u17c3ljpjZaejVFherVVnsrHC01FKWvnZdvog/2JPfi4inoyIH0xdbefLi/Xa0qh//AAAAIAL4nrP+f8/pzrn/wAAAMCYmT5+8dR51QMAAAA4Oyec/wMAAABjwPk/AAAAjLWvvf56a0q7z79eenNne63+5u2lamOtvL69WF6sb22WV+r1lfY9+9ZP2l6tXt/8fGxs3600q41mpbGze2e9vr3RvLMaE+fSIAAAAOCIJz95/w9JROx94Wp7ark86koB56K4n0qyeU7v/+MTnfl751Qp4FxcGuA1713JL3ecAI+3Ym9Bn74OjJ/SqCsAjFxywvKewTvX9lPvZPNPDb9OAADAcN38RP71/5OvC+wVzqF6wBnSieHi6vmeTz3rBy6O9vX/QQfyOFiAsVIaaAQgMM5Oef3/wDuDRkjTU1UIAAAYusn2lBTK2c97k1EolMsRN9qPBSgly6u16kxEPBERv58qXWnlZ9trJieeMwAAAAAAAAAAAAAAAAAAAAAAAAAAHWmaRAoAAACMtYjCX5LfdO7lf3Pq+cne3wcuJ/9uPxL4ckS89ZM3fnR3odncmm2Vv79f3vxxVv7iKH7BAAAAAHp1z9Pb83+NujYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjJsPHry92J0GePnVYcX925ciYjovfjEm2vOJKEXEtX8kUTy0XhIRl4YQf+9eRHw8L37SqtZ+yLz4w3gTTogf09m7kBf/+hDiw0V2v7X/eS2v/xXi2fY8v/8VI/4v/7D67/9if/93qU//vzFgjKfe/WWlb/x7EU8V8/c/3fhJn/jPDRj/W9/Y3e23LP1pxM3u9097j3c4wkGq0lzfrDR2dm+vri+sVFeqG3Nzsy/PvzL/0vxMZXm1Vs3+5sb4/tO/+vC49l/L/f5Lstr0b//zOdvL+07677t3H3y0m9k7Gv/Wcznxf/uz7BVH4xeyOJ/J0kn2XrXTe53387BnfvG7Z45r/9JB+0un+f/f6rfRXkc6ytODfnQAgDPQ2NldW6jVqltjm2idpT8C1bjoiW++/wh+2L471A2maZq2+lTOovsRMch2khhySwv59TlI9P2njHrPBAAADNvBQf+oawIAAAAAAAAAAAAAAAAAAAAX13ncZa035sEtkJNh3EIbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAo/hcAAP//A/7SsQ==") mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x4000) io_submit(0x0, 0x1ffffff0, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="96", 0xffffff20}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}]) fchdir(0xffffffffffffffff) 345.633164ms ago: executing program 0 (id=2174): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000050000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) gettid() syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") 58.785879ms ago: executing program 2 (id=2175): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) gettid() iopl(0x3) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000580)=0x14) 35.526339ms ago: executing program 0 (id=2176): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r1}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2004}, 0x80) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb1, 0x6070}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000880)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 27.155369ms ago: executing program 3 (id=2177): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 0s ago: executing program 2 (id=2178): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r6, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@jqfmt_vfsv1}]}, 0x1, 0x604, &(0x7f0000000c00)="$eJzs3c9rHFUcAPDvzCYxaWPTiogtigEPLUjTpBarXmzrwR4KFuxBxENDk9TQ7Q+aFGwtmIIHBQURryK9+A94l969iaDePAtVpKKg0pXZnW02yW4a0+xOmvl8YLPvvZnd9747eZk3M3k7AZTWaPYjjdgdcfd0EjHSsmw4GgtH8/Xu/H79TPZIolZ747ckBvKy5vpJ/rw9zwxGxHfHIh6rrKx37uq1c5PVWsP7EQfmz186MHf12v7Z85Nnp89OX5g4+OKhw+MvTRya2JA4t+fPx0+8/tQnH7zzwsz31f1JHIlT/e9NxbI4NspojMbdPMTW8r6IOJwl2nwuD5v7hLCjV+1gfSr572N/RDwRI1Gp5xpGYvbjQhsHdFWtElEDSirR/6GkmuOA5rH92o6DT3V5VNI7t482DoBWxt/XODcSg/Vjo213kpYjo8a5jZ0bUH9Wx7/X93yRPWLJeYi/7m2dvg2op5OFGxHxZLv4k3rbdtYjzeJPl7QjiYjxiPo5oKz81QdoQ9KS7sZ5mNWsN/40Io7kz1n5sXXWP7os3+v4ASinW0fzHflCllvc/2Vjj+b4J9qMf4bb7LvWo+j9X+fxX3N/P1g/R54ujsMGm6892f4t+5cX/PzR8c861d86/sseWf3NsWAv3L4RsWdZ/B9mwebjnyzcpM32z1Y5fWRtdbz2w6/HOy0rOv7azYi9bY9/FkelWWqV65MHZmar0+ONn23r+Obbt7/qVH/R8Wfbf1uH+Fu2f7r8ddlncmmNdXx98ub5TsuGV8SfJBGt8ae/DCSN482BvOTdyfn5yxMRA8mJfJWW8oOrt6W5TvM9svj3Pdu+/y/5/b+x9H2Gmn8y1+DSm+fudFq2nu3fcjH5bm2Nbegki3/q/tt/Rf/Pyj5dYx1/vnXl6U7LVot/6EECAwAAAAAAgBJK69dgk3TsXjpNx8Ya82Ufj21p9eLc/HMzF69cmIrYV/9/yP60eaV7pJFPsvxE/v+wzfzBZfnnI2JXRHxeGarnx85crE4VHTwAAAAAAAAAAAAAAAAAAABsEtvz+f/N+1T/UWnM/wdKops3mAM2N/0fyqve/1fc4gkoA/t/KC/9H8pL/4fy0v+hvPR/KC/9H8pL/4fy0v8BAAAAYEva9cytn5KIWHh5qP7IDOTLzAiCra2/6AYAhakU3QCgMPcu/RvsQ+msafz/d/7lgN1vDlCApF1hfXBQW73z32r7SgAAAAAAAAAAAACgC/bu7jz/39xg2NpM+4PyeoD5/746AB5yvvofyssxPnC/WfyDnRaY/w8AAAAAAAAAAAAAPTNcfyTpWD4XeDjSdGws4tGI2Bn9ycxsdXo8InZExI+V/key/ETRjQYAAAAAAAAAAAAAAAAAAIAtZu7qtXOT1er05dbEPytKtnaieRfUHtT1SvzPV0XS+49lKCIK3yhdS/S1lCQRC9mW3xQNuzwXm6MZ9UTBf5gAAAAAAAAAAAAAAAAAAKCEWuYet7fnyx63CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB6b/H+/91LFB0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBw+i8AAP//B/w98Q==") r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00'}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_LINK_NETNSID={0x8}]}, 0x3c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) kernel console output (not intermixed with test programs): EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.539385][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.789655][ T5014] loop4: detected capacity change from 0 to 1024 [ 145.894549][ T5014] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.761502][ T5012] wg2: left promiscuous mode [ 147.012421][ T5026] serio: Serial port ptm0 [ 147.438524][ T5028] serio: Serial port ptm1 [ 147.498322][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.724239][ T5034] wg2: left promiscuous mode [ 147.728971][ T5034] wg2: left allmulticast mode [ 147.841450][ T5034] wg2: entered promiscuous mode [ 147.846486][ T5034] wg2: entered allmulticast mode [ 148.232780][ T5056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.261982][ T5056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.271405][ T5056] wg2: entered promiscuous mode [ 148.409614][ T5064] loop1: detected capacity change from 0 to 1024 [ 148.416575][ T5064] EXT4-fs: Ignoring removed nobh option [ 148.422332][ T5064] EXT4-fs: Ignoring removed bh option [ 148.489203][ T5064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.446901][ T5105] loop3: detected capacity change from 0 to 512 [ 149.638367][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.680710][ T5105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.789240][ T5105] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.982165][ T5112] pim6reg1: entered promiscuous mode [ 150.228775][ T5118] loop1: detected capacity change from 0 to 512 [ 150.349007][ T5118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.381869][ T5118] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.823038][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.884528][ T5122] serio: Serial port ptm0 [ 154.268715][ T5129] loop3: detected capacity change from 0 to 512 [ 154.275743][ T5129] EXT4-fs: Ignoring removed orlov option [ 154.282988][ T5129] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 155.162857][ T5129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.488'. [ 155.564417][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.898492][ T5146] serio: Serial port ptm0 [ 157.609851][ T5172] loop1: detected capacity change from 0 to 1024 [ 157.670758][ T5172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.688328][ T5172] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 157.700753][ T5172] EXT4-fs (loop1): This should not happen!! Data will be lost [ 157.700753][ T5172] [ 157.710536][ T5172] EXT4-fs (loop1): Total free blocks count 0 [ 157.716604][ T5172] EXT4-fs (loop1): Free/Dirty block details [ 157.722596][ T5172] EXT4-fs (loop1): free_blocks=0 [ 157.727696][ T5172] EXT4-fs (loop1): dirty_blocks=0 [ 157.732845][ T5172] EXT4-fs (loop1): Block reservation details [ 157.738932][ T5172] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 157.803747][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.424319][ T5201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.551773][ T5201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.594139][ T5201] wg2: left promiscuous mode [ 158.598889][ T5201] wg2: left allmulticast mode [ 158.614446][ T5201] wg2: entered promiscuous mode [ 158.619376][ T5201] wg2: entered allmulticast mode [ 158.778823][ T5208] loop3: detected capacity change from 0 to 1024 [ 159.174958][ T5208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.287895][ T5208] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 159.300362][ T5208] EXT4-fs (loop3): This should not happen!! Data will be lost [ 159.300362][ T5208] [ 159.310120][ T5208] EXT4-fs (loop3): Total free blocks count 0 [ 159.316236][ T5208] EXT4-fs (loop3): Free/Dirty block details [ 159.322223][ T5208] EXT4-fs (loop3): free_blocks=0 [ 159.327188][ T5208] EXT4-fs (loop3): dirty_blocks=0 [ 159.332312][ T5208] EXT4-fs (loop3): Block reservation details [ 159.338386][ T5208] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 159.743006][ T5220] loop4: detected capacity change from 0 to 1024 [ 159.750372][ T5220] EXT4-fs: Ignoring removed nobh option [ 159.755998][ T5220] EXT4-fs: Ignoring removed bh option [ 159.960360][ T5220] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.976768][ T5220] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.952848][ T5251] tipc: Enabled bearer , priority 10 [ 161.994423][ T5252] tipc: Enabling of bearer rejected, already enabled [ 162.549080][ T5260] loop0: detected capacity change from 0 to 1024 [ 162.676739][ T5260] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.307886][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.422300][ T5276] loop1: detected capacity change from 0 to 1024 [ 164.451226][ T5276] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.477249][ T5276] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 164.489599][ T5276] EXT4-fs (loop1): This should not happen!! Data will be lost [ 164.489599][ T5276] [ 164.499268][ T5276] EXT4-fs (loop1): Total free blocks count 0 [ 164.505367][ T5276] EXT4-fs (loop1): Free/Dirty block details [ 164.511271][ T5276] EXT4-fs (loop1): free_blocks=0 [ 164.516250][ T5276] EXT4-fs (loop1): dirty_blocks=0 [ 164.521313][ T5276] EXT4-fs (loop1): Block reservation details [ 164.527425][ T5276] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 166.244160][ T5296] loop0: detected capacity change from 0 to 1024 [ 166.247969][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.473875][ T5296] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.719901][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.525729][ T5316] tipc: Enabling of bearer rejected, already enabled [ 169.550792][ T5316] tipc: Enabling of bearer rejected, already enabled [ 169.745349][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.850215][ T5322] GPL: port 1(erspan0) entered blocking state [ 169.857715][ T5322] GPL: port 1(erspan0) entered disabled state [ 169.872335][ T5322] erspan0: entered allmulticast mode [ 169.896762][ T5322] erspan0: entered promiscuous mode [ 170.521117][ T5339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.624845][ T5339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.743875][ T5339] wg2: left promiscuous mode [ 170.748549][ T5339] wg2: left allmulticast mode [ 170.855882][ T5340] wg2: entered promiscuous mode [ 170.860817][ T5340] wg2: entered allmulticast mode [ 171.749071][ T5354] loop1: detected capacity change from 0 to 512 [ 171.778125][ T5354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.812951][ T5354] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 172.080276][ T5360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.112223][ T5360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.080062][ T5366] loop3: detected capacity change from 0 to 1024 [ 173.230666][ T5366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.347147][ T5380] loop4: detected capacity change from 0 to 256 [ 174.379365][ T5380] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000000' [ 174.643626][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.487797][ T5396] netlink: 104 bytes leftover after parsing attributes in process `syz.4.568'. [ 175.505376][ T29] audit: type=1400 audit(1752770841.061:157): avc: denied { write } for pid=5395 comm="syz.4.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 175.525447][ T29] audit: type=1400 audit(1752770841.061:158): avc: denied { nlmsg_write } for pid=5395 comm="syz.4.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 175.546014][ T29] audit: type=1400 audit(1752770841.061:159): avc: denied { nlmsg_read } for pid=5395 comm="syz.4.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 175.676301][ T5397] tipc: Enabling of bearer rejected, already enabled [ 175.899541][ T5402] ÿÿÿÿÿÿ: renamed from vlan1 [ 176.136426][ T5409] serio: Serial port ptm0 [ 176.736973][ T5415] loop4: detected capacity change from 0 to 512 [ 176.899895][ T5415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.912572][ T5415] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.220893][ T5421] loop0: detected capacity change from 0 to 512 [ 177.437482][ T5421] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.615937][ T5421] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 178.342453][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.305900][ T5438] loop4: detected capacity change from 0 to 1024 [ 180.884057][ T5438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.114137][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.276689][ T5449] GPL: port 1(erspan0) entered blocking state [ 181.282897][ T5449] GPL: port 1(erspan0) entered disabled state [ 181.331798][ T5449] erspan0: entered allmulticast mode [ 181.355019][ T5449] erspan0: entered promiscuous mode [ 181.373425][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.601800][ T5455] loop1: detected capacity change from 0 to 512 [ 181.666462][ T5455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.709926][ T5455] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 183.474852][ T29] audit: type=1400 audit(1752770849.051:160): avc: denied { write } for pid=5483 comm="syz.4.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 186.649404][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.485779][ T5523] loop3: detected capacity change from 0 to 256 [ 187.515447][ T5523] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000000' [ 189.346188][ T5542] loop4: detected capacity change from 0 to 1024 [ 189.353139][ T5542] EXT4-fs: Ignoring removed nobh option [ 189.358888][ T5542] EXT4-fs: Ignoring removed bh option [ 189.380959][ T5542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.415085][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.440755][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.816133][ T5553] loop1: detected capacity change from 0 to 1024 [ 189.879218][ T5553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.907062][ T5568] netlink: 104 bytes leftover after parsing attributes in process `syz.3.614'. [ 191.635340][ T5576] loop3: detected capacity change from 0 to 512 [ 191.642232][ T5576] EXT4-fs: Ignoring removed orlov option [ 191.655109][ T5576] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 192.527533][ T5576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.616'. [ 192.737891][ T5576] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 192.747311][ T5576] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 193.050440][ T5579] GPL: port 1(erspan0) entered blocking state [ 193.056768][ T5579] GPL: port 1(erspan0) entered disabled state [ 193.161888][ T5579] erspan0: entered allmulticast mode [ 193.212191][ T5579] erspan0: entered promiscuous mode [ 195.549696][ T5606] loop3: detected capacity change from 0 to 1024 [ 195.556608][ T5606] EXT4-fs: Ignoring removed nobh option [ 195.562325][ T5606] EXT4-fs: Ignoring removed bh option [ 195.615362][ T5606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.944821][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.209983][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.229702][ T29] audit: type=1400 audit(1752770863.791:161): avc: denied { bind } for pid=5641 comm="syz.1.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 198.248879][ T29] audit: type=1400 audit(1752770863.791:162): avc: denied { write } for pid=5641 comm="syz.1.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 198.340039][ T5643] loop3: detected capacity change from 0 to 128 [ 198.354391][ T5643] EXT4-fs: test_dummy_encryption option not supported [ 199.200543][ T5654] netlink: 36 bytes leftover after parsing attributes in process `syz.3.641'. [ 199.352803][ T5659] veth0_vlan: left promiscuous mode [ 199.387413][ T5659] veth0_vlan: entered promiscuous mode [ 199.435629][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811973da00: rx timeout, send abort [ 199.447069][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811973dc00: rx timeout, send abort [ 199.457104][ T29] audit: type=1400 audit(1752770865.031:163): avc: denied { read } for pid=2977 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 199.457137][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811973da00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 199.479050][ T29] audit: type=1400 audit(1752770865.031:164): avc: denied { search } for pid=2977 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.479099][ T29] audit: type=1400 audit(1752770865.031:165): avc: denied { search } for pid=2977 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.479129][ T29] audit: type=1400 audit(1752770865.031:166): avc: denied { add_name } for pid=2977 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.479157][ T29] audit: type=1400 audit(1752770865.031:167): avc: denied { create } for pid=2977 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 199.479232][ T29] audit: type=1400 audit(1752770865.031:168): avc: denied { append open } for pid=2977 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 199.479264][ T29] audit: type=1400 audit(1752770865.031:169): avc: denied { getattr } for pid=2977 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 199.629525][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811973dc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 199.766965][ T5666] loop3: detected capacity change from 0 to 256 [ 199.783560][ T5668] serio: Serial port ptm0 [ 199.793271][ T29] audit: type=1400 audit(1752770865.361:170): avc: denied { create } for pid=5667 comm="syz.4.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 199.813165][ T5666] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000000' [ 201.185141][ T5692] tipc: Enabling of bearer rejected, already enabled [ 203.454560][ T5714] loop1: detected capacity change from 0 to 1024 [ 203.689589][ T5718] loop0: detected capacity change from 0 to 1024 [ 203.696751][ T5718] EXT4-fs: Ignoring removed nobh option [ 203.702366][ T5718] EXT4-fs: Ignoring removed bh option [ 205.311016][ T5731] loop3: detected capacity change from 0 to 1024 [ 205.318228][ T5731] EXT4-fs: Ignoring removed nobh option [ 205.323917][ T5731] EXT4-fs: Ignoring removed bh option [ 205.442528][ T5718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.483139][ T5731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.903328][ T5714] EXT4-fs warning (device loop1): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop1. [ 205.915432][ T5718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.978373][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.293310][ T5745] tipc: Enabling of bearer rejected, already enabled [ 206.322333][ T5745] tipc: Enabling of bearer rejected, already enabled [ 206.435701][ T5750] loop1: detected capacity change from 0 to 1024 [ 206.543960][ T5750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.571320][ T5750] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 206.583703][ T5750] EXT4-fs (loop1): This should not happen!! Data will be lost [ 206.583703][ T5750] [ 206.593392][ T5750] EXT4-fs (loop1): Total free blocks count 0 [ 206.599397][ T5750] EXT4-fs (loop1): Free/Dirty block details [ 206.605431][ T5750] EXT4-fs (loop1): free_blocks=0 [ 206.610385][ T5750] EXT4-fs (loop1): dirty_blocks=0 [ 206.615529][ T5750] EXT4-fs (loop1): Block reservation details [ 206.621532][ T5750] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 207.812144][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.833390][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 207.833406][ T29] audit: type=1400 audit(1752770873.401:175): avc: denied { name_bind } for pid=5754 comm="syz.4.668" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 207.860724][ T29] audit: type=1400 audit(1752770873.401:176): avc: denied { node_bind } for pid=5754 comm="syz.4.668" saddr=::1 src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 207.883162][ T5757] serio: Serial port ptm0 [ 208.143691][ T5773] loop4: detected capacity change from 0 to 1024 [ 208.283798][ T5773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.315118][ T5773] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 208.327477][ T5773] EXT4-fs (loop4): This should not happen!! Data will be lost [ 208.327477][ T5773] [ 208.337222][ T5773] EXT4-fs (loop4): Total free blocks count 0 [ 208.343248][ T5773] EXT4-fs (loop4): Free/Dirty block details [ 208.349171][ T5773] EXT4-fs (loop4): free_blocks=0 [ 208.354218][ T5773] EXT4-fs (loop4): dirty_blocks=0 [ 208.359272][ T5773] EXT4-fs (loop4): Block reservation details [ 208.365339][ T5773] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 209.547336][ T5784] tipc: Enabling of bearer rejected, already enabled [ 209.878324][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.541471][ T5821] veth0_vlan: left promiscuous mode [ 211.566590][ T5821] veth0_vlan: entered promiscuous mode [ 213.623947][ T5848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.685814][ T5848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.715403][ T5848] wg2: left promiscuous mode [ 213.720177][ T5848] wg2: left allmulticast mode [ 213.735731][ T5848] wg2: entered promiscuous mode [ 213.740649][ T5848] wg2: entered allmulticast mode [ 215.005384][ T5876] tipc: Enabling of bearer rejected, already enabled [ 215.029674][ T5876] tipc: Enabling of bearer rejected, already enabled [ 215.181249][ T5882] serio: Serial port ptm0 [ 215.997747][ T29] audit: type=1400 audit(1752770881.571:177): avc: denied { create } for pid=5891 comm="syz.2.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 216.025576][ T5892] xt_CT: No such helper "snmp" [ 216.058767][ T29] audit: type=1400 audit(1752770881.571:178): avc: denied { setopt } for pid=5891 comm="syz.2.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 216.129886][ T5899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.138982][ T5899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.149108][ T5899] wg2: left promiscuous mode [ 216.153838][ T5899] wg2: left allmulticast mode [ 216.167705][ T5899] wg2: entered promiscuous mode [ 216.172698][ T5899] wg2: entered allmulticast mode [ 216.317848][ T5908] netlink: 36 bytes leftover after parsing attributes in process `syz.3.716'. [ 216.383056][ T5908] netlink: 36 bytes leftover after parsing attributes in process `syz.3.716'. [ 216.503921][ T5913] serio: Serial port ptm0 [ 216.670838][ T5917] loop1: detected capacity change from 0 to 1024 [ 216.689081][ T5917] EXT4-fs: Ignoring removed nobh option [ 216.694829][ T5917] EXT4-fs: Ignoring removed bh option [ 216.804411][ T29] audit: type=1400 audit(1752770882.381:179): avc: denied { name_bind } for pid=5919 comm="syz.0.721" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 217.251523][ T5917] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.889273][ T5935] loop3: detected capacity change from 0 to 512 [ 218.020271][ T5935] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.255014][ T5942] 9pnet_fd: Insufficient options for proto=fd [ 218.281759][ T5935] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 218.398144][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.249950][ T5960] wg2: left allmulticast mode [ 219.274120][ T5960] wg2: entered promiscuous mode [ 219.279152][ T5960] wg2: entered allmulticast mode [ 219.736875][ T5971] loop1: detected capacity change from 0 to 512 [ 219.934928][ T5971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 219.951925][ T5971] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.211216][ T5984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.739'. [ 220.255125][ T5986] 9pnet_fd: Insufficient options for proto=fd [ 220.272336][ T5984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.739'. [ 220.286841][ T5987] loop0: detected capacity change from 0 to 1024 [ 220.329976][ T5987] EXT4-fs: Ignoring removed nobh option [ 220.335657][ T5987] EXT4-fs: Ignoring removed bh option [ 220.385890][ T5987] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.405424][ T5996] serio: Serial port ptm0 [ 221.475728][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.663626][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.703009][ T6021] xt_CT: No such helper "snmp" [ 223.031468][ T6030] 9pnet_fd: Insufficient options for proto=fd [ 223.393509][ T6033] xt_CT: No such helper "snmp" [ 223.670495][ T6043] serio: Serial port ptm0 [ 223.708624][ T29] audit: type=1400 audit(1752770889.281:180): avc: denied { create } for pid=6044 comm="syz.4.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 223.765950][ T29] audit: type=1400 audit(1752770889.311:181): avc: denied { write } for pid=6044 comm="syz.4.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 223.879496][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 223.914544][ T6058] pimreg: entered allmulticast mode [ 224.157252][ T6065] loop0: detected capacity change from 0 to 1024 [ 224.164335][ T6065] EXT4-fs: Ignoring removed nobh option [ 224.169936][ T6065] EXT4-fs: Ignoring removed bh option [ 224.335136][ T6065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.692887][ T6078] tipc: Enabling of bearer rejected, already enabled [ 224.816566][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.995182][ T6084] serio: Serial port ptm0 [ 225.935949][ T6101] loop4: detected capacity change from 0 to 512 [ 226.033410][ T6101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 226.102894][ T6101] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.648610][ T6123] loop1: detected capacity change from 0 to 1024 [ 226.655489][ T6123] EXT4-fs: Ignoring removed nobh option [ 226.661083][ T6123] EXT4-fs: Ignoring removed bh option [ 226.684279][ T6123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.745280][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.979957][ T6144] loop1: detected capacity change from 0 to 512 [ 227.986903][ T6144] EXT4-fs: Ignoring removed orlov option [ 227.995077][ T6144] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 228.617535][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.790'. [ 229.033388][ T6148] tipc: Enabling of bearer rejected, already enabled [ 230.300792][ T6166] loop0: detected capacity change from 0 to 512 [ 230.617511][ T6166] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.664614][ T6166] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 231.167502][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 231.271047][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.827973][ T6211] xt_CT: No such helper "snmp" [ 233.125622][ T6223] tipc: Enabling of bearer rejected, already enabled [ 233.378307][ T6227] loop1: detected capacity change from 0 to 1024 [ 233.415471][ T6227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.439620][ T6227] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 233.452001][ T6227] EXT4-fs (loop1): This should not happen!! Data will be lost [ 233.452001][ T6227] [ 233.461693][ T6227] EXT4-fs (loop1): Total free blocks count 0 [ 233.467716][ T6227] EXT4-fs (loop1): Free/Dirty block details [ 233.473746][ T6227] EXT4-fs (loop1): free_blocks=0 [ 233.478695][ T6227] EXT4-fs (loop1): dirty_blocks=0 [ 233.483764][ T6227] EXT4-fs (loop1): Block reservation details [ 233.489768][ T6227] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 234.021922][ T6235] serio: Serial port ptm0 [ 234.485289][ T6243] loop0: detected capacity change from 0 to 512 [ 234.492193][ T6243] EXT4-fs: Ignoring removed orlov option [ 234.753436][ T6243] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 234.768586][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.820'. [ 235.410749][ T6245] pimreg: entered allmulticast mode [ 236.035095][ T6249] loop4: detected capacity change from 0 to 1024 [ 236.119252][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.163877][ T6249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.187878][ T6249] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 236.200279][ T6249] EXT4-fs (loop4): This should not happen!! Data will be lost [ 236.200279][ T6249] [ 236.209967][ T6249] EXT4-fs (loop4): Total free blocks count 0 [ 236.216123][ T6249] EXT4-fs (loop4): Free/Dirty block details [ 236.222075][ T6249] EXT4-fs (loop4): free_blocks=0 [ 236.227140][ T6249] EXT4-fs (loop4): dirty_blocks=0 [ 236.232281][ T6249] EXT4-fs (loop4): Block reservation details [ 236.238307][ T6249] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 236.971397][ T6263] loop0: detected capacity change from 0 to 512 [ 237.095743][ T6263] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.234085][ T6263] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 237.406567][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.914536][ T6280] xt_CT: No such helper "snmp" [ 238.201703][ T6284] GPL: port 1(erspan0) entered blocking state [ 238.207996][ T6284] GPL: port 1(erspan0) entered disabled state [ 238.239652][ T6284] erspan0: entered allmulticast mode [ 238.262636][ T6284] erspan0: entered promiscuous mode [ 239.571863][ T29] audit: type=1400 audit(1752770905.141:182): avc: denied { name_bind } for pid=6292 comm="syz.1.836" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 240.229217][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119bc3200: rx timeout, send abort [ 240.237526][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119bc2400: rx timeout, send abort [ 240.251642][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119bc3200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 240.266016][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119bc2400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 240.969525][ T6316] netlink: 60 bytes leftover after parsing attributes in process `syz.1.843'. [ 240.983079][ T6310] loop4: detected capacity change from 0 to 128 [ 240.989806][ T6310] EXT4-fs: test_dummy_encryption option not supported [ 241.706935][ T6327] loop4: detected capacity change from 0 to 512 [ 241.713920][ T6327] EXT4-fs: Ignoring removed orlov option [ 241.741061][ T6327] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 241.753198][ T6327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.846'. [ 243.744397][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.277623][ T6346] loop3: detected capacity change from 0 to 1024 [ 244.426811][ T6346] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.505149][ T6346] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 244.517528][ T6346] EXT4-fs (loop3): This should not happen!! Data will be lost [ 244.517528][ T6346] [ 244.527268][ T6346] EXT4-fs (loop3): Total free blocks count 0 [ 244.533320][ T6346] EXT4-fs (loop3): Free/Dirty block details [ 244.539257][ T6346] EXT4-fs (loop3): free_blocks=0 [ 244.544255][ T6346] EXT4-fs (loop3): dirty_blocks=0 [ 244.549316][ T6346] EXT4-fs (loop3): Block reservation details [ 244.555358][ T6346] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 245.228444][ T6356] xt_CT: No such helper "snmp" [ 245.990967][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.204947][ T6378] loop4: detected capacity change from 0 to 512 [ 246.399424][ T6378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.530926][ T6378] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 247.789834][ T6411] loop1: detected capacity change from 0 to 512 [ 247.800590][ T6410] netlink: 60 bytes leftover after parsing attributes in process `syz.0.872'. [ 247.855900][ T6411] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.881810][ T6411] ext4 filesystem being mounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 247.951197][ T6419] netlink: 28 bytes leftover after parsing attributes in process `syz.0.875'. [ 247.960276][ T6419] netlink: 28 bytes leftover after parsing attributes in process `syz.0.875'. [ 248.062887][ T6419] syz_tun: entered promiscuous mode [ 248.122872][ T6419] syz_tun: left promiscuous mode [ 248.762724][ T6426] loop0: detected capacity change from 0 to 1024 [ 248.769803][ T6426] EXT4-fs: Ignoring removed nobh option [ 248.775547][ T6426] EXT4-fs: Ignoring removed bh option [ 249.034059][ T6426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.422282][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.105285][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.084162][ T29] audit: type=1400 audit(1752770917.661:183): avc: denied { ioctl } for pid=6459 comm="syz.4.885" path="socket:[13719]" dev="sockfs" ino=13719 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 252.333884][ T6471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.888'. [ 252.444402][ T6474] loop4: detected capacity change from 0 to 1024 [ 253.336452][ T6474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.360258][ T6474] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 253.372783][ T6474] EXT4-fs (loop4): This should not happen!! Data will be lost [ 253.372783][ T6474] [ 253.382561][ T6474] EXT4-fs (loop4): Total free blocks count 0 [ 253.389035][ T6474] EXT4-fs (loop4): Free/Dirty block details [ 253.394989][ T6474] EXT4-fs (loop4): free_blocks=0 [ 253.399937][ T6474] EXT4-fs (loop4): dirty_blocks=0 [ 253.405179][ T6474] EXT4-fs (loop4): Block reservation details [ 253.411246][ T6474] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 253.709720][ T6484] xt_CT: No such helper "snmp" [ 253.794641][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.896671][ T6491] serio: Serial port ptm0 [ 254.015136][ T6495] netlink: 28 bytes leftover after parsing attributes in process `syz.3.895'. [ 254.024100][ T6495] netlink: 28 bytes leftover after parsing attributes in process `syz.3.895'. [ 254.113219][ T6495] syz_tun: entered promiscuous mode [ 254.126778][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.147887][ T6495] syz_tun: left promiscuous mode [ 254.436299][ T6519] loop1: detected capacity change from 0 to 1024 [ 255.065125][ T6519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.110234][ T6519] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 255.122585][ T6519] EXT4-fs (loop1): This should not happen!! Data will be lost [ 255.122585][ T6519] [ 255.132255][ T6519] EXT4-fs (loop1): Total free blocks count 0 [ 255.138285][ T6519] EXT4-fs (loop1): Free/Dirty block details [ 255.144219][ T6519] EXT4-fs (loop1): free_blocks=0 [ 255.149248][ T6519] EXT4-fs (loop1): dirty_blocks=0 [ 255.154344][ T6519] EXT4-fs (loop1): Block reservation details [ 255.160369][ T6519] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 256.407127][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.553273][ T6530] serio: Serial port ptm0 [ 256.635459][ T29] audit: type=1400 audit(1752770922.211:184): avc: denied { ioctl } for pid=6539 comm="syz.4.908" path="socket:[13834]" dev="sockfs" ino=13834 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 256.697175][ T29] audit: type=1400 audit(1752770922.211:185): avc: denied { connect } for pid=6539 comm="syz.4.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 257.369922][ T29] audit: type=1400 audit(1752770922.941:186): avc: denied { write } for pid=6558 comm="syz.4.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 257.583898][ T6567] loop4: detected capacity change from 0 to 1024 [ 257.590825][ T6567] EXT4-fs: Ignoring removed nobh option [ 257.596489][ T6567] EXT4-fs: Ignoring removed bh option [ 257.657943][ T6577] loop1: detected capacity change from 0 to 512 [ 257.772833][ T6567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.788527][ T6577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.801120][ T6577] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 258.065734][ T6584] netlink: 28 bytes leftover after parsing attributes in process `syz.2.923'. [ 258.074756][ T6584] netlink: 28 bytes leftover after parsing attributes in process `syz.2.923'. [ 258.315777][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.823060][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.393690][ T6606] xt_CT: No such helper "snmp" [ 261.219776][ T6636] netlink: 16 bytes leftover after parsing attributes in process `syz.4.939'. [ 262.137100][ T6662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.203802][ T6662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.312640][ T6662] wg2: left promiscuous mode [ 262.317393][ T6662] wg2: left allmulticast mode [ 262.402016][ T6669] wg2: entered promiscuous mode [ 262.406939][ T6669] wg2: entered allmulticast mode [ 262.580402][ T6672] xt_CT: No such helper "snmp" [ 263.057891][ T6694] serio: Serial port ptm0 [ 263.086592][ T6699] netlink: 16 bytes leftover after parsing attributes in process `syz.1.958'. [ 263.132262][ T6701] netlink: 16 bytes leftover after parsing attributes in process `syz.4.962'. [ 264.053709][ T6733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.068026][ T6733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.078695][ T6736] serio: Serial port ptm0 [ 264.149018][ T6741] netlink: 16 bytes leftover after parsing attributes in process `syz.1.975'. [ 264.162722][ T6733] wg2: left promiscuous mode [ 264.167363][ T6733] wg2: left allmulticast mode [ 264.197372][ T6740] wg2: entered promiscuous mode [ 264.202412][ T6740] wg2: entered allmulticast mode [ 265.445648][ T6766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.982'. [ 265.454651][ T6766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.982'. [ 265.702182][ T6766] syz_tun: entered promiscuous mode [ 265.708746][ T6766] syz_tun: left promiscuous mode [ 265.870436][ T6777] netlink: 16 bytes leftover after parsing attributes in process `syz.1.987'. [ 265.945164][ T6786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.954113][ T6786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.981666][ T6788] netlink: 16 bytes leftover after parsing attributes in process `syz.3.992'. [ 266.059830][ T6786] wg2: left promiscuous mode [ 266.064522][ T6786] wg2: left allmulticast mode [ 266.070219][ T6791] wg2: entered promiscuous mode [ 266.075232][ T6791] wg2: entered allmulticast mode [ 266.331231][ T6796] loop3: detected capacity change from 0 to 1024 [ 266.472958][ T6796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.500815][ T6796] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 266.513279][ T6796] EXT4-fs (loop3): This should not happen!! Data will be lost [ 266.513279][ T6796] [ 266.522952][ T6796] EXT4-fs (loop3): Total free blocks count 0 [ 266.528960][ T6796] EXT4-fs (loop3): Free/Dirty block details [ 266.534906][ T6796] EXT4-fs (loop3): free_blocks=0 [ 266.539912][ T6796] EXT4-fs (loop3): dirty_blocks=0 [ 266.545016][ T6796] EXT4-fs (loop3): Block reservation details [ 266.551037][ T6796] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 267.361141][ T6823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1004'. [ 267.370456][ T6823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1004'. [ 267.417110][ T6823] syz_tun: entered promiscuous mode [ 267.424658][ T6823] syz_tun: left promiscuous mode [ 267.748325][ T6835] serio: Serial port ptm0 [ 267.888176][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.709891][ T6859] netlink: 'syz.1.1016': attribute type 13 has an invalid length. [ 268.787800][ T29] audit: type=1400 audit(1752770934.361:187): avc: denied { setopt } for pid=6858 comm="syz.1.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 268.837833][ T6859] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.845142][ T6859] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.866432][ T6859] tipc: Resetting bearer [ 268.919458][ T6859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.929930][ T6859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.965511][ T6859] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.974552][ T6859] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.983487][ T6859] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.992395][ T6859] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.628639][ T6874] loop1: detected capacity change from 0 to 256 [ 269.759277][ T6874] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000000' [ 270.496531][ T6893] netlink: 'syz.4.1027': attribute type 13 has an invalid length. [ 270.781132][ T6893] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.788409][ T6893] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.802553][ T6898] 9pnet_fd: Insufficient options for proto=fd [ 270.956158][ T6893] tipc: Resetting bearer [ 271.244483][ T6893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.290939][ T6893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.405404][ T6893] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.414494][ T6893] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.423445][ T6893] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.432360][ T6893] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.830933][ T6920] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1034'. [ 271.840059][ T6920] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1034'. [ 271.913220][ T6920] syz_tun: entered promiscuous mode [ 271.933192][ T6920] syz_tun: left promiscuous mode [ 272.817502][ T6928] syz.0.1038 uses obsolete (PF_INET,SOCK_PACKET) [ 272.849140][ T29] audit: type=1400 audit(1752770938.421:188): avc: denied { ioctl } for pid=6927 comm="syz.0.1038" path="socket:[15480]" dev="sockfs" ino=15480 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 273.373025][ T6947] 9pnet_fd: Insufficient options for proto=fd [ 274.345789][ T6950] tipc: Enabled bearer , priority 10 [ 274.428452][ T6950] tipc: Enabling of bearer rejected, already enabled [ 275.081505][ T6983] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1056'. [ 275.090672][ T6983] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1056'. [ 275.102863][ T6983] syz_tun: entered promiscuous mode [ 275.109306][ T6983] syz_tun: left promiscuous mode [ 275.424727][ T7005] 9pnet_fd: Insufficient options for proto=fd [ 275.708750][ T7017] loop0: detected capacity change from 0 to 1024 [ 275.715909][ T7017] EXT4-fs: Ignoring removed nobh option [ 275.721513][ T7017] EXT4-fs: Ignoring removed bh option [ 275.926488][ T7017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.205569][ T7022] netlink: 'syz.2.1066': attribute type 13 has an invalid length. [ 276.330684][ T7022] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.337999][ T7022] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.397268][ T7022] tipc: Resetting bearer [ 276.425315][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.466707][ T7022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.478201][ T7022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.527622][ T7031] loop1: detected capacity change from 0 to 512 [ 276.674886][ T7031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.687587][ T7031] ext4 filesystem being mounted at /209/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 276.867397][ T7022] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.876500][ T7022] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.885457][ T7022] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.894366][ T7022] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.324764][ T7077] loop4: detected capacity change from 0 to 1024 [ 278.332018][ T7077] EXT4-fs: Ignoring removed nobh option [ 278.337610][ T7077] EXT4-fs: Ignoring removed bh option [ 278.347669][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.867643][ T7082] 9pnet_fd: Insufficient options for proto=fd [ 278.881497][ T7077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.117707][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.859348][ T7119] netlink: 'syz.1.1098': attribute type 13 has an invalid length. [ 280.404717][ T7127] 9pnet_fd: Insufficient options for proto=fd [ 281.377857][ T7147] pim6reg: entered allmulticast mode [ 281.401812][ T7146] pim6reg: left allmulticast mode [ 281.439144][ T7149] veth0_vlan: left promiscuous mode [ 281.456054][ T7149] veth0_vlan: entered promiscuous mode [ 281.672111][ T7161] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1112'. [ 281.779322][ T7158] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1112'. [ 281.818584][ T7165] 9pnet_fd: Insufficient options for proto=fd [ 281.848212][ T29] audit: type=1400 audit(1752770947.421:189): avc: denied { name_connect } for pid=7166 comm="syz.2.1115" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 281.904851][ T29] audit: type=1400 audit(1752770947.451:190): avc: denied { listen } for pid=7166 comm="syz.2.1115" lport=56583 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 281.929283][ T7173] serio: Serial port ptm0 [ 281.963713][ T29] audit: type=1400 audit(1752770947.521:191): avc: denied { accept } for pid=7166 comm="syz.2.1115" lport=56583 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 282.019288][ T7184] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 282.263881][ T7201] loop3: detected capacity change from 0 to 512 [ 282.435581][ T7201] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.448265][ T7201] ext4 filesystem being mounted at /216/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 283.748912][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.474821][ T7223] netlink: 'syz.2.1132': attribute type 13 has an invalid length. [ 284.549965][ T7225] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1133'. [ 286.525731][ T7255] loop4: detected capacity change from 0 to 1024 [ 286.570146][ T7255] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.804672][ T7261] netlink: 'syz.3.1143': attribute type 1 has an invalid length. [ 287.255625][ T7262] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 287.368239][ T7269] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1145'. [ 287.701534][ T7278] 9pnet_fd: Insufficient options for proto=fd [ 288.105795][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.741068][ T7293] tipc: Started in network mode [ 288.746132][ T7293] tipc: Node identity 7f000001, cluster identity 4711 [ 288.780231][ T7293] tipc: Enabled bearer , priority 10 [ 288.856150][ T7293] tipc: Enabled bearer , priority 0 [ 289.045467][ T7307] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1158'. [ 289.806061][ T29] audit: type=1400 audit(1752770955.371:192): avc: denied { read } for pid=7329 comm="syz.0.1169" lport=45468 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 289.851628][ T1041] tipc: Node number set to 2130706433 [ 289.870444][ T29] audit: type=1400 audit(1752770955.431:193): avc: denied { setopt } for pid=7329 comm="syz.0.1169" lport=45468 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 290.070965][ T7341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.080724][ T7341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.127806][ T7339] veth0_vlan: left promiscuous mode [ 290.140211][ T7339] veth0_vlan: entered promiscuous mode [ 290.170355][ T7341] wg2: left promiscuous mode [ 290.175294][ T7341] wg2: left allmulticast mode [ 290.225256][ T7343] wg2: entered promiscuous mode [ 290.230238][ T7343] wg2: entered allmulticast mode [ 290.773533][ T7365] loop1: detected capacity change from 0 to 1024 [ 290.780853][ T7365] EXT4-fs: Ignoring removed nobh option [ 290.786499][ T7365] EXT4-fs: Ignoring removed bh option [ 290.818433][ T7365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.449448][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.545410][ T7392] 9pnet_fd: Insufficient options for proto=fd [ 292.553213][ T7423] loop0: detected capacity change from 0 to 1024 [ 292.560365][ T7423] EXT4-fs: Ignoring removed nobh option [ 292.566045][ T7423] EXT4-fs: Ignoring removed bh option [ 292.640477][ T7423] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.127461][ T7429] loop1: detected capacity change from 0 to 1024 [ 293.134687][ T7429] EXT4-fs: Ignoring removed nobh option [ 293.140414][ T7429] EXT4-fs: Ignoring removed bh option [ 293.266118][ T7429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.288187][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.521997][ T7444] netlink: 'syz.3.1207': attribute type 1 has an invalid length. [ 293.703119][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.971457][ T7454] 9pnet_fd: Insufficient options for proto=fd [ 294.900101][ T7495] loop4: detected capacity change from 0 to 512 [ 294.986179][ T7495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.999100][ T7495] ext4 filesystem being mounted at /258/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 295.685320][ T7495] syz.4.1226 (7495) used greatest stack depth: 10000 bytes left [ 296.499713][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.353661][ T7546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1242'. [ 297.362726][ T7546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1242'. [ 297.523889][ T7549] serio: Serial port ptm0 [ 297.959418][ T7562] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1249'. [ 298.021259][ T7566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36352 sclass=netlink_route_socket pid=7566 comm=syz.4.1251 [ 298.233261][ T7575] serio: Serial port ptm0 [ 299.231106][ T7615] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1269'. [ 299.612251][ T7625] loop3: detected capacity change from 0 to 1024 [ 299.619581][ T7625] EXT4-fs: Ignoring removed nobh option [ 299.625308][ T7625] EXT4-fs: Ignoring removed bh option [ 299.779806][ T7625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.179633][ T7639] loop1: detected capacity change from 0 to 512 [ 300.261724][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.475217][ T7639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.621683][ T7639] ext4 filesystem being mounted at /252/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 300.732385][ T7654] 9pnet_fd: Insufficient options for proto=fd [ 301.212086][ T7662] netlink: 'syz.4.1283': attribute type 1 has an invalid length. [ 301.707084][ T7669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1285'. [ 302.607897][ T7703] loop3: detected capacity change from 0 to 1024 [ 302.615266][ T7703] EXT4-fs: Ignoring removed nobh option [ 302.620918][ T7703] EXT4-fs: Ignoring removed bh option [ 302.670882][ T7703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.825741][ T7708] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1298'. [ 303.131677][ T7714] netlink: 'syz.0.1301': attribute type 13 has an invalid length. [ 303.266228][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.335444][ T7714] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.342720][ T7714] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.413506][ T7714] tipc: Resetting bearer [ 303.476552][ T7714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.579378][ T7714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.753005][ T7714] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.762221][ T7714] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.771417][ T7714] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.780445][ T7714] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.073112][ T7723] tipc: Enabling of bearer rejected, already enabled [ 304.098269][ T7726] tipc: Enabling of bearer rejected, already enabled [ 304.364283][ T7738] loop0: detected capacity change from 0 to 512 [ 304.371130][ T7738] EXT4-fs: Ignoring removed orlov option [ 305.258329][ T7738] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 305.271730][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1305'. [ 306.057963][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.168689][ T7761] loop0: detected capacity change from 0 to 1024 [ 306.175871][ T7761] EXT4-fs: Ignoring removed nobh option [ 306.181521][ T7761] EXT4-fs: Ignoring removed bh option [ 306.255010][ T7761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.457069][ T7767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1315'. [ 306.846896][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.071973][ T29] audit: type=1400 audit(1752770972.651:194): avc: denied { bind } for pid=7781 comm="syz.2.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 307.136938][ T7782] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1321'. [ 307.148056][ T7780] tipc: Enabling of bearer rejected, already enabled [ 307.160124][ T29] audit: type=1400 audit(1752770972.711:195): avc: denied { setopt } for pid=7781 comm="syz.2.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 307.192910][ T7780] tipc: Enabling of bearer rejected, already enabled [ 307.465931][ T7789] loop0: detected capacity change from 0 to 512 [ 307.472872][ T7789] EXT4-fs: Ignoring removed orlov option [ 307.480126][ T7789] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 308.058043][ T7793] veth0_vlan: left promiscuous mode [ 308.222486][ T7793] veth0_vlan: entered promiscuous mode [ 308.358487][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1323'. [ 309.263721][ T7814] loop0: detected capacity change from 0 to 512 [ 309.328461][ T7814] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.394952][ T7814] ext4 filesystem being mounted at /250/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 309.567022][ T7823] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1334'. [ 309.836147][ T7836] loop1: detected capacity change from 0 to 1024 [ 309.843389][ T7836] EXT4-fs: Ignoring removed nobh option [ 309.848989][ T7836] EXT4-fs: Ignoring removed bh option [ 309.923922][ T7836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.309786][ T7846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1340'. [ 310.568134][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.877728][ T7861] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1347'. [ 311.936729][ T7862] ÿÿÿÿÿÿ: renamed from vlan1 [ 312.003574][ T7866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1349'. [ 312.073607][ T7870] netlink: 'syz.3.1350': attribute type 13 has an invalid length. [ 312.147001][ T7870] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.154355][ T7870] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.185837][ T7870] tipc: Resetting bearer [ 312.258150][ T7870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.284627][ T7870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.363702][ T7870] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.372814][ T7870] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.381753][ T7870] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.390659][ T7870] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.478606][ T7876] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1353'. [ 313.484945][ T7904] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1362'. [ 314.177102][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.341469][ T7936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1373'. [ 314.350709][ T7936] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1373'. [ 314.767644][ T7950] loop0: detected capacity change from 0 to 1024 [ 314.774858][ T7950] EXT4-fs: Ignoring removed nobh option [ 314.780479][ T7950] EXT4-fs: Ignoring removed bh option [ 314.913928][ T7950] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.443394][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.542264][ T7965] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1383'. [ 315.758992][ T7983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.831820][ T7983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.878445][ T7983] wg2: left promiscuous mode [ 315.883310][ T7983] wg2: left allmulticast mode [ 316.071765][ T7983] wg2: entered promiscuous mode [ 316.076703][ T7983] wg2: entered allmulticast mode [ 316.540166][ T7994] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1393'. [ 316.898535][ T8004] loop0: detected capacity change from 0 to 1024 [ 316.905831][ T8004] EXT4-fs: Ignoring removed nobh option [ 316.911461][ T8004] EXT4-fs: Ignoring removed bh option [ 316.995462][ T8004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.187104][ T8009] veth0_vlan: left promiscuous mode [ 317.248971][ T8009] veth0_vlan: entered promiscuous mode [ 317.362108][ T8024] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1405'. [ 317.566512][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.712131][ T8033] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 317.719498][ T8033] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 317.919898][ T8046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1414'. [ 317.965318][ T8047] tipc: Enabling of bearer rejected, already enabled [ 318.035770][ T8053] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1417'. [ 318.459077][ T8076] serio: Serial port ptm0 [ 320.501266][ T8138] tipc: Enabling of bearer rejected, already enabled [ 320.780265][ T8140] 9pnet_fd: Insufficient options for proto=fd [ 321.477974][ T29] audit: type=1400 audit(1752770987.051:196): avc: denied { write } for pid=8141 comm="syz.2.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 321.497406][ T29] audit: type=1400 audit(1752770987.051:197): avc: denied { shutdown } for pid=8141 comm="syz.2.1447" lport=57583 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 321.530514][ T8142] sctp: [Deprecated]: syz.2.1447 (pid 8142) Use of int in maxseg socket option. [ 321.530514][ T8142] Use struct sctp_assoc_value instead [ 322.524241][ T8171] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1458'. [ 322.575712][ T8175] netlink: 'syz.3.1459': attribute type 13 has an invalid length. [ 322.687935][ T8180] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1460'. [ 323.444745][ T8200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1468'. [ 323.453982][ T8200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1468'. [ 323.805420][ T8206] loop3: detected capacity change from 0 to 1024 [ 323.812378][ T8206] EXT4-fs: Ignoring removed nobh option [ 323.817975][ T8206] EXT4-fs: Ignoring removed bh option [ 323.912120][ T8206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.438917][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.881649][ T8255] serio: Serial port ptm0 [ 325.051434][ T8261] loop0: detected capacity change from 0 to 1024 [ 325.058659][ T8261] EXT4-fs: Ignoring removed nobh option [ 325.064358][ T8261] EXT4-fs: Ignoring removed bh option [ 325.364419][ T8261] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.413232][ T8266] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1488'. [ 325.422813][ T8266] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1488'. [ 325.601293][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.665096][ T8275] loop4: detected capacity change from 0 to 1024 [ 325.672468][ T8275] EXT4-fs: Ignoring removed nobh option [ 325.678065][ T8275] EXT4-fs: Ignoring removed bh option [ 326.019393][ T8275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.023159][ T8287] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 326.061024][ T8287] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 326.336076][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.739207][ T8322] tipc: Enabling of bearer rejected, already enabled [ 327.302583][ T8343] loop3: detected capacity change from 0 to 1024 [ 327.309787][ T8343] EXT4-fs: Ignoring removed nobh option [ 327.315408][ T8343] EXT4-fs: Ignoring removed bh option [ 327.374371][ T8343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.712478][ T8349] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1514'. [ 327.721506][ T8349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1514'. [ 328.021130][ T8360] loop4: detected capacity change from 0 to 1024 [ 328.028361][ T8360] EXT4-fs: Ignoring removed nobh option [ 328.034104][ T8360] EXT4-fs: Ignoring removed bh option [ 328.095330][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.165709][ T8360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.755007][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.878280][ T8386] loop0: detected capacity change from 0 to 1024 [ 328.885590][ T8386] EXT4-fs: Ignoring removed nobh option [ 328.891248][ T8386] EXT4-fs: Ignoring removed bh option [ 329.092970][ T8386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.364109][ T8398] loop1: detected capacity change from 0 to 512 [ 329.407005][ T8398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.419834][ T8398] ext4 filesystem being mounted at /283/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 329.561322][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.581006][ T8396] netlink: 'syz.3.1529': attribute type 13 has an invalid length. [ 330.345467][ T8422] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1539'. [ 330.437227][ T8424] loop3: detected capacity change from 0 to 512 [ 330.494393][ T8428] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1541'. [ 331.354435][ T8424] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.487574][ T8424] ext4 filesystem being mounted at /324/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 331.618662][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1546'. [ 331.690878][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1546'. [ 331.773946][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.843614][ T8447] serio: Serial port ptm0 [ 332.536488][ T8466] loop4: detected capacity change from 0 to 1024 [ 332.544041][ T8466] EXT4-fs: Ignoring removed nobh option [ 332.549637][ T8466] EXT4-fs: Ignoring removed bh option [ 332.631274][ T8466] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.190806][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.856706][ T8499] serio: Serial port ptm0 [ 336.627889][ T8516] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1571'. [ 336.755548][ T8521] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1572'. [ 336.764769][ T8521] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1572'. [ 336.784662][ T8521] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1572'. [ 336.923606][ T29] audit: type=1400 audit(1752771002.481:198): avc: denied { map } for pid=8524 comm="syz.4.1573" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 336.947924][ T29] audit: type=1400 audit(1752771002.481:199): avc: denied { read write } for pid=8524 comm="syz.4.1573" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 337.171890][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1576'. [ 337.180842][ T8531] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1576'. [ 337.191115][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1576'. [ 337.336576][ T8541] serio: Serial port ptm0 [ 338.073308][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.352383][ T8560] loop3: detected capacity change from 0 to 1024 [ 338.359462][ T8560] EXT4-fs: Ignoring removed nobh option [ 338.365117][ T8560] EXT4-fs: Ignoring removed bh option [ 338.464224][ T8560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.696945][ T29] audit: type=1400 audit(1752771004.111:200): avc: denied { connect } for pid=8564 comm="syz.4.1587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 338.717052][ T29] audit: type=1400 audit(1752771004.121:201): avc: denied { bind } for pid=8564 comm="syz.4.1587" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 338.737303][ T29] audit: type=1400 audit(1752771004.121:202): avc: denied { name_bind } for pid=8564 comm="syz.4.1587" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 338.759083][ T29] audit: type=1400 audit(1752771004.121:203): avc: denied { node_bind } for pid=8564 comm="syz.4.1587" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 339.109484][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.207984][ T29] audit: type=1400 audit(1752771004.411:204): avc: denied { read } for pid=8564 comm="syz.4.1587" dev="sockfs" ino=21199 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 339.445445][ T8584] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1594'. [ 339.454596][ T8584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1594'. [ 339.485777][ T8585] loop3: detected capacity change from 0 to 1024 [ 339.492916][ T8585] EXT4-fs: Ignoring removed nobh option [ 339.498524][ T8585] EXT4-fs: Ignoring removed bh option [ 339.520117][ T8586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.561399][ T8586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.600910][ T8585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.686042][ T8586] wg2: left promiscuous mode [ 339.690862][ T8586] wg2: left allmulticast mode [ 339.964444][ T8598] loop4: detected capacity change from 0 to 512 [ 340.015493][ T8598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.065439][ T8598] ext4 filesystem being mounted at /337/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 340.150623][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.294295][ T29] audit: type=1400 audit(1752771006.861:205): avc: denied { connect } for pid=8625 comm="syz.3.1606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 341.399749][ T8633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.410170][ T8634] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1603'. [ 341.451863][ T8633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.541395][ T8633] wg2: left promiscuous mode [ 341.546139][ T8633] wg2: left allmulticast mode [ 341.741993][ T8641] loop0: detected capacity change from 0 to 1024 [ 341.748978][ T8641] EXT4-fs: Ignoring removed nobh option [ 341.754652][ T8641] EXT4-fs: Ignoring removed bh option [ 342.078476][ T8643] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1612'. [ 342.087542][ T8643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1612'. [ 342.165792][ T8641] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.347800][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.462616][ T8666] tmpfs: Bad value for 'mpol' [ 342.580337][ T8672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.612844][ T8672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.649334][ T8672] wg2: left allmulticast mode [ 343.793690][ T8685] GPL: port 1(erspan0) entered blocking state [ 343.800449][ T8685] GPL: port 1(erspan0) entered disabled state [ 343.862558][ T8685] erspan0: entered allmulticast mode [ 343.893638][ T8685] erspan0: entered promiscuous mode [ 344.066158][ T8710] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1634'. [ 344.131606][ T8713] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1635'. [ 344.140623][ T8713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1635'. [ 344.167229][ T8715] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1636'. [ 345.393952][ T8741] tmpfs: Bad value for 'mpol' [ 345.532049][ T8748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.551930][ T8748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.811546][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1651'. [ 345.820594][ T8757] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1651'. [ 345.937986][ T8760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1652'. [ 346.358754][ T8780] wg2: left promiscuous mode [ 346.363558][ T8780] wg2: left allmulticast mode [ 346.383996][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.715036][ T8785] loop4: detected capacity change from 0 to 512 [ 346.759804][ T8785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.772517][ T8785] ext4 filesystem being mounted at /338/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 347.497991][ T8803] loop0: detected capacity change from 0 to 1024 [ 347.505422][ T8803] EXT4-fs: Ignoring removed nobh option [ 347.511114][ T8803] EXT4-fs: Ignoring removed bh option [ 348.057683][ T8803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.253790][ T8811] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1667'. [ 348.292704][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.074621][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.195700][ T8824] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1672'. [ 349.342196][ T8831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.377169][ T8831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.526292][ T8835] serio: Serial port ptm0 [ 349.729798][ T8848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36352 sclass=netlink_route_socket pid=8848 comm=syz.3.1681 [ 349.996061][ T8854] loop3: detected capacity change from 0 to 512 [ 350.058295][ T8854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.116856][ T8854] ext4 filesystem being mounted at /349/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 350.900840][ T8862] netlink: 'syz.2.1686': attribute type 13 has an invalid length. [ 352.196097][ T8876] loop1: detected capacity change from 0 to 512 [ 352.441722][ T8882] loop4: detected capacity change from 0 to 1024 [ 352.448891][ T8882] EXT4-fs: Ignoring removed nobh option [ 352.454516][ T8882] EXT4-fs: Ignoring removed bh option [ 353.038048][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.228551][ T8882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.249974][ T8876] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 353.275222][ T8876] ext4 filesystem being mounted at /312/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.498253][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.179976][ T8897] tipc: Enabling of bearer rejected, already enabled [ 355.201995][ T8921] loop3: detected capacity change from 0 to 1024 [ 355.209203][ T8921] EXT4-fs: Ignoring removed nobh option [ 355.214851][ T8921] EXT4-fs: Ignoring removed bh option [ 355.326268][ T8921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.501145][ T8927] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 355.874895][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.925510][ T8944] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8944 comm=syz.2.1709 [ 356.304879][ T8962] Cannot find add_set index 0 as target [ 356.866395][ T8966] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1718'. [ 357.241958][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 357.268323][ T8983] serio: Serial port ptm0 [ 357.451834][ T8993] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1728'. [ 357.587186][ T8999] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1731'. [ 357.666774][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1733'. [ 357.675946][ T9003] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1733'. [ 357.685752][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1733'. [ 358.069353][ T9023] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1741'. [ 358.576046][ T9036] loop0: detected capacity change from 0 to 1024 [ 358.583280][ T9036] EXT4-fs: Ignoring removed nobh option [ 358.588875][ T9036] EXT4-fs: Ignoring removed bh option [ 358.821780][ T9036] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.904528][ T9041] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1746'. [ 359.331980][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.507554][ T9065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1756'. [ 359.516513][ T9065] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1756'. [ 360.163306][ T9091] loop1: detected capacity change from 0 to 1024 [ 360.170560][ T9091] EXT4-fs: Ignoring removed nobh option [ 360.176185][ T9091] EXT4-fs: Ignoring removed bh option [ 360.556662][ T9091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.837204][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.260452][ T9133] Driver unsupported XDP return value 0 on prog (id 1069) dev N/A, expect packet loss! [ 361.878466][ T9147] loop1: detected capacity change from 0 to 1024 [ 361.885714][ T9147] EXT4-fs: Ignoring removed nobh option [ 361.891439][ T9147] EXT4-fs: Ignoring removed bh option [ 361.991178][ T9147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.241321][ T9151] __nla_validate_parse: 8 callbacks suppressed [ 362.241341][ T9151] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1789'. [ 362.256587][ T9151] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1789'. [ 362.265502][ T9151] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1789'. [ 362.274549][ T9151] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1789'. [ 362.559179][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.691228][ T9178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1799'. [ 362.866152][ T9197] loop1: detected capacity change from 0 to 512 [ 362.884771][ T9197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.897456][ T9197] ext4 filesystem being mounted at /336/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 362.953338][ T9195] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1809'. [ 364.181207][ T9208] loop0: detected capacity change from 0 to 512 [ 364.223199][ T9208] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 364.303726][ T9235] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1822'. [ 364.328555][ T9208] ext4 filesystem being mounted at /350/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.535396][ T9239] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9239 comm=syz.3.1823 [ 364.710242][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 364.741907][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.507292][ T9278] loop1: detected capacity change from 0 to 512 [ 365.532447][ T9278] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.545081][ T9278] ext4 filesystem being mounted at /339/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 365.601426][ T9282] tipc: Enabling of bearer rejected, already enabled [ 366.614557][ T9287] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9287 comm=syz.2.1840 [ 367.519696][ T9305] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1847'. [ 367.618515][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.639028][ T9272] loop0: detected capacity change from 0 to 512 [ 367.797733][ T9272] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 367.901047][ T9272] ext4 filesystem being mounted at /354/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.952363][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 369.254201][ T9354] loop0: detected capacity change from 0 to 1024 [ 369.261319][ T9354] EXT4-fs: Ignoring removed nobh option [ 369.267042][ T9354] EXT4-fs: Ignoring removed bh option [ 369.378425][ T9354] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.884608][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.944009][ T9362] tipc: Enabling of bearer rejected, already enabled [ 371.070685][ T9388] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1874'. [ 371.085616][ T9378] loop0: detected capacity change from 0 to 512 [ 371.303371][ T9378] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 371.338452][ T9378] ext4 filesystem being mounted at /359/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.373414][ T9397] loop1: detected capacity change from 0 to 512 [ 371.426465][ T29] audit: type=1400 audit(1752771037.001:206): avc: denied { mount } for pid=9395 comm="syz.1.1876" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 371.451693][ T9397] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 371.464193][ T9404] loop4: detected capacity change from 0 to 512 [ 371.508375][ T9404] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 371.555566][ T29] audit: type=1400 audit(1752771037.111:207): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 371.593465][ T9407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1878'. [ 371.602603][ T9407] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1878'. [ 371.686093][ T29] audit: type=1400 audit(1752771037.261:208): avc: denied { write } for pid=9412 comm="syz.4.1884" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 371.967054][ T9439] loop4: detected capacity change from 0 to 512 [ 372.551662][ T9450] 9pnet_fd: Insufficient options for proto=fd [ 373.390806][ T29] audit: type=1400 audit(1752771038.961:209): avc: denied { setopt } for pid=9473 comm="syz.4.1906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 373.456549][ T9477] netlink: 'syz.4.1907': attribute type 13 has an invalid length. [ 373.602160][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 375.131448][ T9525] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1924'. [ 375.140698][ T9525] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1924'. [ 375.151519][ T9527] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1918'. [ 375.231806][ T9532] tipc: Enabling of bearer rejected, already enabled [ 375.448308][ T9537] Cannot find add_set index 0 as target [ 376.106166][ T9552] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1932'. [ 376.388002][ T9560] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1935'. [ 376.494437][ T9564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1937'. [ 376.645841][ T9564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1937'. [ 376.781203][ T9571] loop4: detected capacity change from 0 to 512 [ 376.788035][ T9571] EXT4-fs: Ignoring removed orlov option [ 376.889949][ T9571] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 377.069225][ T9564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1937'. [ 378.378311][ T9596] netlink: 'syz.0.1947': attribute type 1 has an invalid length. [ 378.386317][ T9596] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1947'. [ 378.469037][ T9598] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1950'. [ 378.671499][ T29] audit: type=1400 audit(1752771044.241:210): avc: denied { mounton } for pid=9609 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 378.904934][ T58] bond0: (slave netdevsim1): Releasing backup interface [ 379.030124][ T29] audit: type=1400 audit(1752771044.601:211): avc: denied { create } for pid=9627 comm="syz.0.1959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 379.070286][ T29] audit: type=1400 audit(1752771044.641:212): avc: denied { ioctl } for pid=9627 comm="syz.0.1959" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 379.185920][ T9637] netlink: 'syz.4.1962': attribute type 1 has an invalid length. [ 379.266110][ T9609] chnl_net:caif_netlink_parms(): no params data found [ 379.326320][ T29] audit: type=1400 audit(1752771044.901:213): avc: denied { execmem } for pid=9641 comm="syz.1.1964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 379.463369][ T58] vlan2: left promiscuous mode [ 379.468406][ T58] bridge0: port 3(vlan2) entered disabled state [ 379.480018][ T58] bridge_slave_1: left allmulticast mode [ 379.485777][ T58] bridge_slave_1: left promiscuous mode [ 379.491461][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.502329][ T58] bridge_slave_0: left promiscuous mode [ 379.508168][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.746902][ T58] erspan0: left allmulticast mode [ 379.752037][ T58] erspan0: left promiscuous mode [ 379.757126][ T58] GPL: port 1(erspan0) entered disabled state [ 380.337564][ T9654] loop4: detected capacity change from 0 to 1024 [ 380.344620][ T9654] EXT4-fs: Ignoring removed nobh option [ 380.350281][ T9654] EXT4-fs: Ignoring removed bh option [ 380.470026][ T9657] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9657 comm=syz.1.1968 [ 380.491378][ T9654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.541252][ T58] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 380.563979][ T9661] netlink: 'syz.1.1969': attribute type 1 has an invalid length. [ 380.713458][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.747002][ T9670] __nla_validate_parse: 5 callbacks suppressed [ 380.747131][ T9670] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1972'. [ 380.803237][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.816250][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.827071][ T58] bond0 (unregistering): Released all slaves [ 380.835818][ T58] bond1 (unregistering): Released all slaves [ 380.854108][ T58] bond2 (unregistering): Released all slaves [ 380.867009][ T9663] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1970'. [ 380.972598][ T58] tipc: Disabling bearer [ 380.978142][ T58] tipc: Left network mode [ 380.988572][ T9609] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.995868][ T9609] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.054552][ T9609] bridge_slave_0: entered allmulticast mode [ 381.076674][ T9609] bridge_slave_0: entered promiscuous mode [ 381.096956][ T58] hsr_slave_0: left promiscuous mode [ 381.103005][ T58] hsr_slave_1: left promiscuous mode [ 381.108916][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.122605][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.176658][ T58] team0 (unregistering): Port device team_slave_1 removed [ 381.189432][ T58] team0 (unregistering): Port device team_slave_0 removed [ 381.229776][ T9609] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.236980][ T9609] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.265693][ T9609] bridge_slave_1: entered allmulticast mode [ 381.275048][ T9609] bridge_slave_1: entered promiscuous mode [ 381.442863][ T9609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.529118][ T9609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.751698][ T9609] team0: Port device team_slave_0 added [ 382.001783][ T9609] team0: Port device team_slave_1 added [ 382.044285][ T9609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.051281][ T9609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.077314][ T9609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.139368][ T9609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.146398][ T9609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.172567][ T9609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.278024][ T9609] hsr_slave_0: entered promiscuous mode [ 382.278424][ T9702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.292332][ T9609] hsr_slave_1: entered promiscuous mode [ 382.292376][ T9702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.303388][ T9609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.329073][ T9609] Cannot create hsr debugfs directory [ 382.474686][ T9704] pimreg3: entered allmulticast mode [ 383.163986][ T9714] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1987'. [ 383.360015][ T9715] mmap: syz.1.1986 (9715) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 383.448470][ T29] audit: type=1400 audit(1752771049.021:214): avc: denied { create } for pid=9721 comm="syz.2.1990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 383.529502][ T9725] loop4: detected capacity change from 0 to 1024 [ 383.705293][ T9712] netlink: 'syz.1.1986': attribute type 10 has an invalid length. [ 383.841480][ T9712] team0: Port device dummy0 added [ 383.870883][ T9725] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.883157][ T9725] ext4 filesystem being mounted at /412/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.952954][ T29] audit: type=1400 audit(1752771049.531:215): avc: denied { write } for pid=9716 comm="syz.4.1988" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 383.962257][ T9724] netlink: 'syz.2.1991': attribute type 10 has an invalid length. [ 383.976405][ T29] audit: type=1400 audit(1752771049.531:216): avc: denied { open } for pid=9716 comm="syz.4.1988" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 384.030560][ T9609] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 384.057526][ T9609] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 384.070694][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.086405][ T9724] team0: Port device dummy0 added [ 384.108336][ T9609] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 384.131764][ T9609] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 384.180815][ T9741] netlink: 'syz.4.1994': attribute type 1 has an invalid length. [ 384.200013][ T9609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.213874][ T9741] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1994'. [ 384.236001][ T9609] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.253977][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.261266][ T3502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.288135][ T9609] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 384.298649][ T9609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 384.315149][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.322357][ T3502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.444697][ T9609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.694908][ T9609] veth0_vlan: entered promiscuous mode [ 384.707947][ T9609] veth1_vlan: entered promiscuous mode [ 384.717547][ T9767] netlink: 'syz.2.2000': attribute type 21 has an invalid length. [ 384.725709][ T9767] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2000'. [ 384.759504][ T9609] veth0_macvtap: entered promiscuous mode [ 384.767431][ T9609] veth1_macvtap: entered promiscuous mode [ 384.778395][ T9609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.788325][ T9609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.797070][ T9609] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.805960][ T9609] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.814750][ T9609] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.823595][ T9609] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.855577][ T29] audit: type=1400 audit(1752771050.421:217): avc: denied { mount } for pid=9609 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 384.877833][ T29] audit: type=1400 audit(1752771050.431:218): avc: denied { mounton } for pid=9609 comm="syz-executor" path="/root/syzkaller.LanZmi/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 385.697799][ T9789] loop4: detected capacity change from 0 to 1024 [ 385.705006][ T9789] EXT4-fs: Ignoring removed nobh option [ 385.710588][ T9789] EXT4-fs: Ignoring removed bh option [ 385.959990][ T9789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.664427][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.807935][ T9811] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2014'. [ 387.930456][ T9834] loop0: detected capacity change from 0 to 1024 [ 387.937352][ T9834] EXT4-fs: Ignoring removed nobh option [ 387.943060][ T9834] EXT4-fs: Ignoring removed bh option [ 387.958148][ T9834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.133709][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.204621][ T9849] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2026'. [ 388.733120][ T9868] netlink: 'syz.1.2031': attribute type 10 has an invalid length. [ 388.838620][ T9877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2036'. [ 388.941317][ T9881] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2038'. [ 389.121314][ T29] audit: type=1400 audit(1752771054.691:219): avc: denied { bind } for pid=9897 comm="syz.0.2045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 389.203769][ T9900] loop0: detected capacity change from 0 to 1024 [ 389.212674][ T9900] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 389.213440][ T29] audit: type=1400 audit(1752771054.781:220): avc: denied { mounton } for pid=9897 comm="syz.0.2045" path="/385/file0" dev="tmpfs" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 389.226636][ T9900] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 389.281869][ T9900] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 389.310110][ T9900] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.2045: lblock 2 mapped to illegal pblock 2 (length 1) [ 389.328714][ T9900] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 389.337084][ T9900] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 48: comm syz.0.2045: lblock 0 mapped to illegal pblock 48 (length 1) [ 389.352368][ T9900] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 389.361335][ T9900] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2045: Failed to acquire dquot type 0 [ 389.365529][ T9910] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2049'. [ 389.386548][ T9900] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 389.398757][ T9912] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2050'. [ 389.408615][ T9900] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.2045: mark_inode_dirty error [ 389.420058][ T9900] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 389.452074][ T9900] EXT4-fs (loop0): 1 orphan inode deleted [ 389.458380][ T9900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.473058][ T2571] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 389.511266][ T2571] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 389.519871][ T2571] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 389.542434][ T9900] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.552029][ T9900] EXT4-fs error (device loop0): __ext4_get_inode_loc:4792: comm syz.0.2045: Invalid inode table block 1 in block_group 0 [ 389.623070][ T9900] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 389.633898][ T9900] EXT4-fs error (device loop0): ext4_quota_off:7217: inode #3: comm syz.0.2045: mark_inode_dirty error [ 390.136145][ T9941] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2062'. [ 390.180034][ T9916] netlink: 'syz.3.2052': attribute type 10 has an invalid length. [ 390.202507][ T9916] team0: Port device dummy0 added [ 390.222634][ T9948] netlink: 'syz.4.2064': attribute type 1 has an invalid length. [ 390.230437][ T9948] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2064'. [ 390.341491][ T9956] loop3: detected capacity change from 0 to 1024 [ 390.350774][ T9956] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 390.366482][ T9956] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 390.428112][ T9956] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 390.445455][ T9956] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.2069: lblock 2 mapped to illegal pblock 2 (length 1) [ 390.605721][ T9956] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 390.629450][ T9956] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 48: comm syz.3.2069: lblock 0 mapped to illegal pblock 48 (length 1) [ 390.756777][ T9956] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 390.765851][ T9956] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2069: Failed to acquire dquot type 0 [ 390.884975][ T9956] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 390.902824][ T9956] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.2069: mark_inode_dirty error [ 390.922036][ T9956] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 390.941715][ T9956] EXT4-fs (loop3): 1 orphan inode deleted [ 390.947988][ T9956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.961656][ T2571] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 391.001600][ T2571] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 391.010095][ T2571] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 391.044267][ T9609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.053948][ T9609] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 391.071803][ T9609] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 391.096422][ T9609] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 392.346869][ T29] audit: type=1400 audit(1752771057.921:221): avc: denied { write } for pid=10006 comm="syz.4.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 392.395463][T10010] loop3: detected capacity change from 0 to 1024 [ 392.406527][T10010] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 392.415771][T10010] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 392.426762][T10010] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 392.459469][T10010] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.2089: lblock 2 mapped to illegal pblock 2 (length 1) [ 392.517460][T10010] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 392.581311][T10010] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 48: comm syz.3.2089: lblock 0 mapped to illegal pblock 48 (length 1) [ 392.694152][T10010] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2089: Failed to acquire dquot type 0 [ 392.719573][T10010] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 392.729169][T10010] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.2089: mark_inode_dirty error [ 392.741903][T10010] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 392.752221][T10010] EXT4-fs (loop3): 1 orphan inode deleted [ 392.758539][T10010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.812015][ T2571] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 392.838775][T10031] loop0: detected capacity change from 0 to 1024 [ 392.846103][T10031] EXT4-fs: Ignoring removed nobh option [ 392.851727][T10031] EXT4-fs: Ignoring removed bh option [ 392.988102][ T2571] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 393.067706][ T9609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.099229][ T9609] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 393.153502][ T9609] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 393.172610][T10031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.194241][ T9609] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 393.489972][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.241919][T10065] loop0: detected capacity change from 0 to 512 [ 394.248611][T10065] EXT4-fs: Ignoring removed orlov option [ 394.259271][T10065] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 394.736250][T10072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2109'. [ 394.754026][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 394.754107][ T29] audit: type=1400 audit(1752771060.311:222): avc: denied { write } for pid=10071 comm="syz.4.2109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 394.780449][ T29] audit: type=1400 audit(1752771060.311:223): avc: denied { nlmsg_write } for pid=10071 comm="syz.4.2109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 395.018931][T10072] loop4: detected capacity change from 0 to 256 [ 395.114224][T10065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2106'. [ 395.151100][T10072] FAT-fs (loop4): Directory bread(block 64) failed [ 395.210179][T10072] FAT-fs (loop4): Directory bread(block 65) failed [ 395.260971][T10072] FAT-fs (loop4): Directory bread(block 66) failed [ 395.342931][T10072] FAT-fs (loop4): Directory bread(block 67) failed [ 395.361820][T10072] FAT-fs (loop4): Directory bread(block 68) failed [ 395.381458][T10072] FAT-fs (loop4): Directory bread(block 69) failed [ 395.415831][T10072] FAT-fs (loop4): Directory bread(block 70) failed [ 395.436130][T10072] FAT-fs (loop4): Directory bread(block 71) failed [ 395.448475][T10065] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 395.457903][T10065] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 395.471620][T10072] FAT-fs (loop4): Directory bread(block 72) failed [ 395.478183][T10072] FAT-fs (loop4): Directory bread(block 73) failed [ 395.558999][T10076] syzkaller0: entered promiscuous mode [ 395.564603][T10076] syzkaller0: entered allmulticast mode [ 395.802467][T10080] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2110'. [ 396.217011][T10087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2113'. [ 396.276732][T10087] syzkaller0: entered promiscuous mode [ 396.282340][T10087] syzkaller0: entered allmulticast mode [ 396.295481][T10087] loop0: detected capacity change from 0 to 256 [ 396.321916][T10087] FAT-fs (loop0): Directory bread(block 64) failed [ 396.328536][T10087] FAT-fs (loop0): Directory bread(block 65) failed [ 396.342743][T10087] FAT-fs (loop0): Directory bread(block 66) failed [ 396.349420][T10087] FAT-fs (loop0): Directory bread(block 67) failed [ 396.380275][T10092] loop1: detected capacity change from 0 to 1024 [ 396.381631][T10087] FAT-fs (loop0): Directory bread(block 68) failed [ 396.397042][T10092] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 396.401581][T10087] FAT-fs (loop0): Directory bread(block 69) failed [ 396.421199][T10092] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 396.421734][T10087] FAT-fs (loop0): Directory bread(block 70) failed [ 396.450762][T10092] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 396.459556][T10087] FAT-fs (loop0): Directory bread(block 71) failed [ 396.467044][T10092] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.2114: lblock 2 mapped to illegal pblock 2 (length 1) [ 396.490848][T10087] FAT-fs (loop0): Directory bread(block 72) failed [ 396.498538][T10092] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 396.507002][T10087] FAT-fs (loop0): Directory bread(block 73) failed [ 396.531751][T10092] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 48: comm syz.1.2114: lblock 0 mapped to illegal pblock 48 (length 1) [ 396.572817][T10092] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 396.581695][T10092] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2114: Failed to acquire dquot type 0 [ 396.594508][T10092] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 396.604279][T10092] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.2114: mark_inode_dirty error [ 396.617936][T10092] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 396.633994][T10092] EXT4-fs (loop1): 1 orphan inode deleted [ 396.642426][T10092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.691454][ T58] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 396.725869][ T58] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 396.734430][ T58] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 396.867865][T10092] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.877348][T10092] EXT4-fs error (device loop1): __ext4_get_inode_loc:4792: comm syz.1.2114: Invalid inode table block 1 in block_group 0 [ 396.911199][T10092] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 397.080947][T10092] EXT4-fs error (device loop1): ext4_quota_off:7217: inode #3: comm syz.1.2114: mark_inode_dirty error [ 397.588181][T10120] loop4: detected capacity change from 0 to 512 [ 397.595026][T10120] EXT4-fs: Ignoring removed orlov option [ 397.873899][T10120] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 397.888723][T10120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2123'. [ 398.351074][T10127] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2127'. [ 398.730468][T10139] loop3: detected capacity change from 0 to 1024 [ 398.737689][T10139] EXT4-fs: Ignoring removed nobh option [ 398.743303][T10139] EXT4-fs: Ignoring removed bh option [ 399.093146][T10139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.423386][T10153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.432099][T10153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.462553][ T9609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.547239][T10155] pimreg3: entered allmulticast mode [ 399.916579][T10160] Cannot find add_set index 0 as target [ 400.363323][T10166] 9pnet_fd: Insufficient options for proto=fd [ 400.574342][T10172] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2140'. [ 400.574342][T10170] syzkaller0: entered promiscuous mode [ 400.574397][T10170] syzkaller0: entered allmulticast mode [ 401.315487][T10191] loop1: detected capacity change from 0 to 1024 [ 401.327273][T10191] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 401.344700][T10191] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 401.366690][T10191] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 401.375939][T10191] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.2146: lblock 2 mapped to illegal pblock 2 (length 1) [ 401.385680][T10192] GPL: port 1(erspan0) entered blocking state [ 401.390343][T10191] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 401.396092][T10192] GPL: port 1(erspan0) entered disabled state [ 401.411024][T10191] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 48: comm syz.1.2146: lblock 0 mapped to illegal pblock 48 (length 1) [ 401.441109][T10192] erspan0: entered allmulticast mode [ 401.450268][T10191] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 401.459227][T10191] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2146: Failed to acquire dquot type 0 [ 401.479927][T10192] erspan0: entered promiscuous mode [ 401.486808][T10191] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 401.504700][T10191] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.2146: mark_inode_dirty error [ 401.525599][T10191] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 401.547323][T10191] EXT4-fs (loop1): 1 orphan inode deleted [ 401.565005][T10191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.609432][ T3502] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 401.625628][ T3502] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 401.634143][ T3502] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 401.653981][T10191] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.694021][T10191] EXT4-fs error (device loop1): __ext4_get_inode_loc:4792: comm syz.1.2146: Invalid inode table block 1 in block_group 0 [ 401.725491][T10191] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 401.749734][T10191] EXT4-fs error (device loop1): ext4_quota_off:7217: inode #3: comm syz.1.2146: mark_inode_dirty error [ 403.054540][T10208] loop1: detected capacity change from 0 to 512 [ 403.114072][T10208] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 403.132165][T10221] 9pnet_fd: Insufficient options for proto=fd [ 403.386286][T10208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.504951][T10208] ext4 filesystem being mounted at /404/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 403.682300][ T29] audit: type=1400 audit(1752771069.221:224): avc: denied { setattr } for pid=10207 comm="syz.1.2153" path="/404/bus/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 403.825483][T10232] loop0: detected capacity change from 0 to 1024 [ 403.832814][T10232] EXT4-fs: Ignoring removed nobh option [ 403.838423][T10232] EXT4-fs: Ignoring removed bh option [ 404.003422][T10236] netlink: 'syz.4.2159': attribute type 21 has an invalid length. [ 404.011951][T10236] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2159'. [ 404.030312][T10236] tmpfs: Bad value for 'mpol' [ 404.041645][ T29] audit: type=1400 audit(1752771069.581:225): avc: denied { compute_member } for pid=10233 comm="syz.4.2159" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 404.062184][ T29] audit: type=1400 audit(1752771069.601:226): avc: denied { mounton } for pid=10233 comm="syz.4.2159" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 404.251785][T10232] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.286751][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.674632][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.889076][T10243] netlink: 'syz.4.2162': attribute type 10 has an invalid length. [ 404.916596][T10243] team0: Port device dummy0 added [ 404.934733][T10251] loop3: detected capacity change from 0 to 1024 [ 404.945438][T10251] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 404.954145][T10251] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 404.972582][T10251] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 405.015790][T10251] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.2164: lblock 2 mapped to illegal pblock 2 (length 1) [ 405.042680][T10251] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 405.065657][T10251] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 48: comm syz.3.2164: lblock 0 mapped to illegal pblock 48 (length 1) [ 405.095263][T10251] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 405.104202][T10251] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2164: Failed to acquire dquot type 0 [ 405.117297][T10251] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 405.127640][T10251] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.2164: mark_inode_dirty error [ 405.140910][T10251] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 405.151338][T10251] EXT4-fs (loop3): 1 orphan inode deleted [ 405.158504][T10251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.170788][ T3502] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 405.194384][T10268] loop4: detected capacity change from 0 to 1024 [ 405.203036][T10268] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 405.211287][ T3502] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 405.220169][ T3502] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 405.225350][T10269] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2171'. [ 405.242727][T10251] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.252419][T10251] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz.3.2164: Invalid inode table block 1 in block_group 0 [ 405.283967][T10251] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 405.297039][T10251] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz.3.2164: mark_inode_dirty error [ 405.413820][T10268] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 405.426770][T10268] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 405.438055][T10268] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.2168: lblock 2 mapped to illegal pblock 2 (length 1) [ 405.453964][T10268] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 405.518303][T10268] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.2168: lblock 0 mapped to illegal pblock 48 (length 1) [ 405.569090][T10277] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2173'. [ 405.588207][T10268] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2168: Failed to acquire dquot type 0 [ 405.651164][T10268] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 405.670872][T10277] loop1: detected capacity change from 0 to 512 [ 405.704865][T10268] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.2168: mark_inode_dirty error [ 405.730189][T10277] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2173: Failed to acquire dquot type 1 [ 405.743713][T10277] EXT4-fs (loop1): 1 truncate cleaned up [ 405.749572][T10268] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 405.763328][T10277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.776096][T10268] EXT4-fs (loop4): 1 orphan inode deleted [ 405.791659][ T4203] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 405.814841][T10277] ext4 filesystem being mounted at /409/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.827589][ T4203] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 0 [ 405.842918][T10268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.861679][T10282] loop0: detected capacity change from 0 to 512 [ 405.897510][T10268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.909531][T10282] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.924543][T10268] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz.4.2168: Invalid inode table block 1 in block_group 0 [ 405.937496][T10268] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 405.948251][T10282] ext4 filesystem being mounted at /417/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 405.968297][T10268] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz.4.2168: mark_inode_dirty error [ 406.013874][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.046360][ T3312] ================================================================== [ 406.054529][ T3312] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 406.062126][ T3312] [ 406.064466][ T3312] read-write to 0xffff888237c25e68 of 1 bytes by task 10288 on cpu 0: [ 406.072636][ T3312] folio_add_lru+0xa5/0x1f0 [ 406.077250][ T3312] folio_add_lru_vma+0x49/0x70 [ 406.082072][ T3312] do_wp_page+0x132b/0x2400 [ 406.086606][ T3312] handle_mm_fault+0x77d/0x2be0 [ 406.091484][ T3312] do_user_addr_fault+0x636/0x1090 [ 406.096642][ T3312] exc_page_fault+0x62/0xa0 [ 406.101171][ T3312] asm_exc_page_fault+0x26/0x30 [ 406.108221][ T3312] [ 406.110557][ T3312] read to 0xffff888237c25e68 of 1 bytes by task 3312 on cpu 1: [ 406.118114][ T3312] __lru_add_drain_all+0x12b/0x3f0 [ 406.123255][ T3312] lru_add_drain_all+0x10/0x20 [ 406.128048][ T3312] invalidate_bdev+0x47/0x70 [ 406.132668][ T3312] ext4_put_super+0x624/0x7d0 [ 406.137368][ T3312] generic_shutdown_super+0xe6/0x210 [ 406.142674][ T3312] kill_block_super+0x2a/0x70 [ 406.147470][ T3312] ext4_kill_sb+0x42/0x80 [ 406.151812][ T3312] deactivate_locked_super+0x75/0x1c0 [ 406.157215][ T3312] deactivate_super+0x97/0xa0 [ 406.161915][ T3312] cleanup_mnt+0x269/0x2e0 [ 406.166346][ T3312] __cleanup_mnt+0x19/0x20 [ 406.170776][ T3312] task_work_run+0x131/0x1a0 [ 406.175396][ T3312] exit_to_user_mode_loop+0xe4/0x100 [ 406.180700][ T3312] do_syscall_64+0x1d6/0x200 [ 406.185306][ T3312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.191220][ T3312] [ 406.193566][ T3312] value changed: 0x11 -> 0x12 [ 406.198261][ T3312] [ 406.200601][ T3312] Reported by Kernel Concurrency Sanitizer on: [ 406.206781][ T3312] CPU: 1 UID: 0 PID: 3312 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 406.219385][ T3312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 406.229467][ T3312] ================================================================== [ 406.394322][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.