last executing test programs: 12.75963343s ago: executing program 3 (id=81): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) timer_getoverrun(r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbca313a181002c000000000400000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_team\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_batadv\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x128}, 0x1, 0x0, 0x0, 0x40010}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x3ff}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r5, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4000804) 12.53253014s ago: executing program 3 (id=83): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) timer_getoverrun(r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbca313a181002c000000000400000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_team\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_batadv\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x128}, 0x1, 0x0, 0x0, 0x40010}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x3ff}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r5, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4000804) 12.465970703s ago: executing program 3 (id=84): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x4, 0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000180)) r4 = syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0), 0x1, 0x50f, &(0x7f0000001880)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xaf}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000040), &(0x7f0000000100), 0x2, 0x3) fallocate(r5, 0x0, 0x3, 0x800000) symlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 12.275067471s ago: executing program 3 (id=87): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80) socket(0xa, 0x3, 0x3a) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2e6d4dc34a1f59c9140000003a0029934eb73345695bc9c9d46e8c81003f0200000000"], 0x14}}, 0x8000) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000380)={[{@quota}, {@usrquota}, {@inlinecrypt}]}, 0x2, 0x500, &(0x7f0000000500)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x141a42, 0x1c2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x80000, 0x20) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x208]}) r2 = open(&(0x7f0000000180)='./file1\x00', 0xe0142, 0x102) pwritev2(r2, &(0x7f0000001100)=[{&(0x7f0000001080)='\b', 0x1}], 0x6000, 0x7000, 0x0, 0x3) 11.633790158s ago: executing program 3 (id=96): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES64=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={0x0, r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) socket$inet6(0xa, 0xa, 0x10000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d4010000400000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_usbip_server_init(0x4) write$usbip_server(r3, &(0x7f0000000100)=@ret_unlink={{0x4, 0x3ff, 0x0, 0x0, 0xfff}, {0x911d}}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18) nanosleep(0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) 10.90556673s ago: executing program 3 (id=103): r0 = memfd_create(&(0x7f0000000480)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x03\x00\x00\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xcaX\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\xb1\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedP\xff\xff\xff\xff\xff\xff\xff\xef)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xb4Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x9b-\xe3\xe6R\xa2T\x1e\n!\xad$\x93c\xd3\"\xd6\xa1\xd6\xfc\v\x81\x9e\xc1\xb3T\n\xd9\xff\x18 \xf8\xc4\xef\xd2\xb0\xf8\x80\xb8\x1e\xb7fo\x1c\a\xc9\x1a!D\xde\xc6\xf1\x13\xc2F\xc44A\x1d\xb7\xe6\xfbB\xee4\xa1\xdf+\xa5\xb1\xc2\xfb\xc0\t\x15\x7fA{\xe0\xc7\xe0\x96\xc9\xe6\x8fk\xe6\x87;\x03\xff\xb0\x10\x10\x1e\x14\x99\xc7\xd5)\x8d\xc7\xf0\xfd\xe9d\xc9\xce\x85\x88\x88\xcd\xf6\xb2\xbf\xf8E\xe4\xd8\xd0\xe00\xbd\xc2M\xe7\x1b\xac\xc0\v\xb0\xfc\"\x12\x8d\xa5\x96\x10\xf3\x82~2\xa3[\xa4w]\n\xb1+\xac\bR&B\xebW0\xe2\xffBO9y\x8e\xb6\x03\x99\r', 0x3) r1 = dup(r0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000006140)="18", 0x1, 0x0, &(0x7f00000000c0)={0x11, 0xe, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) sendmsg$rds(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, 0x0, 0x0, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="7f454c4606ff78a3050000000000000002003e00cd220000c9030000000000004000000000000000ea02000000000000020001000500380001000600b10600040300000081000000ff000000000000000900000000000000070000000000000009"], 0x178) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a0000000500010007000000050004000300eeda00000100020073797a310000000011000300686173683a6e65742c6e65740000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x440e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x31, 0x7fff, 0x6}, 0x2c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r9, 0x8982, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x275a, 0x0) 10.89595344s ago: executing program 32 (id=103): r0 = memfd_create(&(0x7f0000000480)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x03\x00\x00\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xcaX\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\xb1\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedP\xff\xff\xff\xff\xff\xff\xff\xef)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xb4Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x9b-\xe3\xe6R\xa2T\x1e\n!\xad$\x93c\xd3\"\xd6\xa1\xd6\xfc\v\x81\x9e\xc1\xb3T\n\xd9\xff\x18 \xf8\xc4\xef\xd2\xb0\xf8\x80\xb8\x1e\xb7fo\x1c\a\xc9\x1a!D\xde\xc6\xf1\x13\xc2F\xc44A\x1d\xb7\xe6\xfbB\xee4\xa1\xdf+\xa5\xb1\xc2\xfb\xc0\t\x15\x7fA{\xe0\xc7\xe0\x96\xc9\xe6\x8fk\xe6\x87;\x03\xff\xb0\x10\x10\x1e\x14\x99\xc7\xd5)\x8d\xc7\xf0\xfd\xe9d\xc9\xce\x85\x88\x88\xcd\xf6\xb2\xbf\xf8E\xe4\xd8\xd0\xe00\xbd\xc2M\xe7\x1b\xac\xc0\v\xb0\xfc\"\x12\x8d\xa5\x96\x10\xf3\x82~2\xa3[\xa4w]\n\xb1+\xac\bR&B\xebW0\xe2\xffBO9y\x8e\xb6\x03\x99\r', 0x3) r1 = dup(r0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000006140)="18", 0x1, 0x0, &(0x7f00000000c0)={0x11, 0xe, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) sendmsg$rds(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, 0x0, 0x0, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="7f454c4606ff78a3050000000000000002003e00cd220000c9030000000000004000000000000000ea02000000000000020001000500380001000600b10600040300000081000000ff000000000000000900000000000000070000000000000009"], 0x178) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a0000000500010007000000050004000300eeda00000100020073797a310000000011000300686173683a6e65742c6e65740000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x440e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x31, 0x7fff, 0x6}, 0x2c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r9, 0x8982, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x275a, 0x0) 1.543210243s ago: executing program 5 (id=252): socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) utimensat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={{r3, r4/1000+10000}, {0x0, 0x2710}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xfffffffffffffff7}, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r8, &(0x7f0000000000)={0x0, 0x6e6f, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) fstatfs(r0, &(0x7f0000000040)=""/227) 1.316983693s ago: executing program 1 (id=254): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB='!\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf25010000000000000008410000004c"], 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x48804) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYRES16=r2], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000000200)={0x0, ""/1}, 0x9, 0x1, 0x3000) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0xb1, 0x1, 0x8, 0x7d, 0x400}) msgsnd(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000002c2f28b8e1cba30b3e9756c2fd0cf873fb27f9a47ff02c76bb99f375705b64266e70458055f3374fb1e7e267b1116934022ddd43773d551e70cd827322170bfb6907c426ace6bda588e117cbda3f9edc044eb8c0c891fbb3aa9ec0e3e3b0cb2f2f4ae029b1ffbc2e8f69fdb671f37fd4ce8642e0eb0e09d0aba620e74e2604b9dd6027acbc532b81cd74202f4953b09a6e3fa81a34e683dd1c85d2e93f0b15e1433b93036a5ed5d325a026cf221c01c69ca69e0a8715967963a151ceb0433b8c0865e1a43c5b07ab705a628ae720d455450a7d27871c252316c29b3e22c04f7d4154708eec25590183f65ef393b387258c6544c3be1028baf555dfbada5a855abf244305ee7decdcce912dad9990636ee3c5a9efefe95b1af3b297c1366f4ced528b269724697baece4f9d24b499537a4765a703a243915fc7dc6a6e7dfe54ee012e2f08c644ece83b71c75f34eb375713cfcf638d062235d1000000"], 0xf4, 0x0) 1.255044056s ago: executing program 4 (id=255): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRESHEX, @ANYRES8], 0xfb, 0x1222, &(0x7f0000001840)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040009"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf25020000000800080008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) mq_open(0x0, 0x842, 0x57, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r7 = fspick(r6, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r7, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001500)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x900008, &(0x7f0000000580), 0x5, 0x504, &(0x7f0000002580)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a0000000400"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_clone3(0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setownex(r9, 0xf, &(0x7f0000000040)={0x2, r8}) 1.237375796s ago: executing program 1 (id=256): clock_adjtime(0x0, &(0x7f0000000000)={0x8003ff, 0x0, 0x23e654d4, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffd, 0xc, 0x10, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) 1.216743947s ago: executing program 1 (id=257): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) process_mrelease(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.193699608s ago: executing program 1 (id=258): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES64=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x4000040) socket$inet6(0xa, 0xa, 0x10000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_usbip_server_init(0x4) write$usbip_server(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) nanosleep(0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) 1.185957958s ago: executing program 0 (id=259): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}]}]}, 0x5c}}, 0x0) 1.124015991s ago: executing program 0 (id=260): clock_adjtime(0x0, &(0x7f0000000040)={0xf4f, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x201, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x100, 0x4, 0x1000000000, 0x104}) 1.069175604s ago: executing program 0 (id=262): r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$kcm(r0, &(0x7f0000002800)={&(0x7f0000001680)=@in={0x2, 0x4e20, @remote}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001700)="ebb28f7fab53b914689eb94a220ebd7dfe01c185", 0x14}], 0x1}, 0x24000810) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = inotify_init() r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x4}, {0xfff1, 0xffff}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000250091"], 0xfe33) r4 = creat(&(0x7f0000000340)='./file0\x00', 0xd931d3864d39dcca) r5 = inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x600000bd) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYRES64=r5], 0x69) close(r4) 1.038593565s ago: executing program 2 (id=263): r0 = memfd_secret(0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) r3 = getpgrp(0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) sched_getattr(r3, &(0x7f0000000080)={0x38}, 0x38, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, r1, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x78}, @void, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8, 0x52, r2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="1b000000000000000100"/28], 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x2b, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) 1.022888305s ago: executing program 0 (id=264): socket$inet_icmp(0x2, 0x2, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x82}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0002}]}) rename(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000a00)=r3, 0x4) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=@newsa={0xf0, 0x28, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x8}, {@in=@remote, 0x0, 0x32}, @in=@loopback, {0x4}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 807.516754ms ago: executing program 4 (id=265): r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$kcm(r0, &(0x7f0000002800)={&(0x7f0000001680)=@in={0x2, 0x4e20, @remote}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001700)="ebb28f7fab53b914689eb94a220ebd7dfe01c185", 0x14}], 0x1}, 0x24000810) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = inotify_init() r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x4}, {0xfff1, 0xffff}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000250091"], 0xfe33) r5 = creat(&(0x7f0000000340)='./file0\x00', 0xd931d3864d39dcca) r6 = inotify_add_watch(r3, &(0x7f0000000200)='./file0\x00', 0x600000bd) write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[@ANYRES64=r6], 0x69) close(r5) 785.590096ms ago: executing program 0 (id=266): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB='!\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf25010000000000000008410000004c"], 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x48804) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYRES16=r2], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000000200)={0x0, ""/1}, 0x9, 0x1, 0x3000) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0xb1, 0x1, 0x8, 0x7d, 0x400}) msgsnd(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000002c2f28b8e1cba30b3e9756c2fd0cf873fb27f9a47ff02c76bb99f375705b64266e70458055f3374fb1e7e267b1116934022ddd43773d551e70cd827322170bfb6907c426ace6bda588e117cbda3f9edc044eb8c0c891fbb3aa9ec0e3e3b0cb2f2f4ae029b1ffbc2e8f69fdb671f37fd4ce8642e0eb0e09d0aba620e74e2604b9dd6027acbc532b81cd74202f4953b09a6e3fa81a34e683dd1c85d2e93f0b15e1433b93036a5ed5d325a026cf221c01c69ca69e0a8715967963a151ceb0433b8c0865e1a43c5b07ab705a628ae720d455450a7d27871c252316c29b3e22c04f7d4154708eec25590183f65ef393b387258c6544c3be1028baf555dfbada5a855abf244305ee7decdcce912dad9990636ee3c5a9efefe95b1af3b297c1366f4ced528b269724697baece4f9d24b499537a4765a703a243915fc7dc6a6e7dfe54ee012e2f08c644ece83b71c75f34eb375713cfcf638d062235d1000000"], 0xf4, 0x0) 693.589159ms ago: executing program 0 (id=267): socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) utimensat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={{r3, r4/1000+10000}, {0x0, 0x2710}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xfffffffffffffff7}, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r8, &(0x7f0000000000)={0x0, 0x6e6f, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) fchown(r0, 0x0, 0x0) 641.874432ms ago: executing program 4 (id=268): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r3, &(0x7f0000000240)=""/123, 0x7b) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") clock_adjtime(0x0, &(0x7f0000000000)={0x8003ff, 0x0, 0x23e654d4, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffd, 0xc, 0x10, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) 603.464063ms ago: executing program 5 (id=269): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) process_mrelease(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 472.388469ms ago: executing program 2 (id=270): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008040000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) 471.917319ms ago: executing program 5 (id=271): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x68}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0) r3 = getpgrp(0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) sched_getattr(r3, &(0x7f0000000080)={0x38}, 0x38, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, r1, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x78}, @void, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8, 0x52, r2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="1b000000000000000100"/28], 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x2b, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) 345.372455ms ago: executing program 4 (id=272): clock_adjtime(0x0, &(0x7f0000000040)={0xf4f, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x201, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x100, 0x4, 0x1000000000, 0x104}) 344.951284ms ago: executing program 2 (id=273): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000a00)=r0, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=@newsa={0xf0, 0x28, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x8}, {@in=@remote, 0x0, 0x32}, @in=@loopback, {0x4}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 234.198609ms ago: executing program 2 (id=274): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB='!\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fddbdf25010000000000000008410000004c"], 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x48804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e65746465762644b02a0000"], 0x34}}, 0x6048800) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYRES16=r4], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000000200)={0x0, ""/1}, 0x9, 0x1, 0x3000) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0xb1, 0x1, 0x8, 0x7d, 0x400}) 135.924004ms ago: executing program 2 (id=275): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) timer_getoverrun(0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x3ff}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r4, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c00000000000000000000000800", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4000804) 131.462834ms ago: executing program 5 (id=276): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {0x0, 0x100}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x20000000, 0x0, 0x0, 0x60569add}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2b25}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x3}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x7, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {0xd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x40000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0xfffffffe, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x200, 0xffffffff}, {}, {0x3, 0xfffffffb}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x40000000, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0xa}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x7fff, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x1}, {0x2}, {0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8001}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000, 0xa07, 0x0, 0x2}, {0x0, 0x0, 0x8000}, {0x0, 0x8000, 0x0, 0xe}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {0x4}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 130.098264ms ago: executing program 4 (id=277): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000006c0)=@newtaction={0xa0, 0x30, 0x9, 0xf00, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {0x0, 0x0, 0xfe}, {}, {0x6}, {0x2, 0x3, 0x8, 0x3}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x40040c0) 86.912406ms ago: executing program 2 (id=278): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f00000002c0)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 81.037586ms ago: executing program 4 (id=279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") getpid() r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000940)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) close(r6) 77.143636ms ago: executing program 5 (id=281): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {0x0, 0x100}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x20000000, 0x0, 0x0, 0x60569add}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2b25}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x3}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x7, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {0xd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x40000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0xfffffffe, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x200, 0xffffffff}, {}, {0x3, 0xfffffffb}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x40000000, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0xa}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x7fff, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x1}, {0x2}, {0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8001}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000, 0xa07, 0x0, 0x2}, {0x0, 0x0, 0x8000}, {0x0, 0x8000, 0x0, 0xe}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {0x4}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 21.779139ms ago: executing program 5 (id=282): r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, 0x0, 0x0) 0s ago: executing program 1 (id=283): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r3, &(0x7f0000000240)=""/123, 0x7b) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) clock_adjtime(0x0, &(0x7f0000000000)={0x8003ff, 0x0, 0x23e654d4, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffd, 0xc, 0x10, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.234' (ED25519) to the list of known hosts. [ 34.719902][ T29] audit: type=1400 audit(1764216003.885:62): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.742991][ T29] audit: type=1400 audit(1764216003.905:63): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.743967][ T3304] cgroup: Unknown subsys name 'net' [ 34.770693][ T29] audit: type=1400 audit(1764216003.935:64): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.964273][ T3304] cgroup: Unknown subsys name 'cpuset' [ 34.970578][ T3304] cgroup: Unknown subsys name 'rlimit' [ 35.122928][ T29] audit: type=1400 audit(1764216004.285:65): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.146491][ T29] audit: type=1400 audit(1764216004.295:66): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.166971][ T29] audit: type=1400 audit(1764216004.295:67): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.177965][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 35.187334][ T29] audit: type=1400 audit(1764216004.295:68): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 35.216162][ T29] audit: type=1400 audit(1764216004.295:69): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 35.233553][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.240955][ T29] audit: type=1400 audit(1764216004.295:70): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 35.272980][ T29] audit: type=1400 audit(1764216004.365:71): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 37.434711][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 37.464320][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 37.511225][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 37.578149][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.585300][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.592411][ T3316] bridge_slave_0: entered allmulticast mode [ 37.598948][ T3316] bridge_slave_0: entered promiscuous mode [ 37.605568][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 37.614654][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.621764][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.628919][ T3322] bridge_slave_0: entered allmulticast mode [ 37.635316][ T3322] bridge_slave_0: entered promiscuous mode [ 37.651631][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.658727][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.665925][ T3316] bridge_slave_1: entered allmulticast mode [ 37.672388][ T3316] bridge_slave_1: entered promiscuous mode [ 37.681316][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.688421][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.695632][ T3322] bridge_slave_1: entered allmulticast mode [ 37.702004][ T3322] bridge_slave_1: entered promiscuous mode [ 37.739323][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.746491][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.753634][ T3315] bridge_slave_0: entered allmulticast mode [ 37.760062][ T3315] bridge_slave_0: entered promiscuous mode [ 37.781267][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.791646][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.800922][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.808010][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.815280][ T3315] bridge_slave_1: entered allmulticast mode [ 37.821588][ T3315] bridge_slave_1: entered promiscuous mode [ 37.829272][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.854310][ T3322] team0: Port device team_slave_0 added [ 37.866211][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.878103][ T3322] team0: Port device team_slave_1 added [ 37.903080][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.921780][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 37.936705][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.950957][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.957946][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.983861][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.995246][ T3316] team0: Port device team_slave_0 added [ 38.004480][ T3316] team0: Port device team_slave_1 added [ 38.015134][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.022201][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.029515][ T3320] bridge_slave_0: entered allmulticast mode [ 38.035772][ T3320] bridge_slave_0: entered promiscuous mode [ 38.042366][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.049439][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.075397][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.099835][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.106961][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.114288][ T3320] bridge_slave_1: entered allmulticast mode [ 38.120797][ T3320] bridge_slave_1: entered promiscuous mode [ 38.144293][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.151260][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.177214][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.188531][ T3315] team0: Port device team_slave_0 added [ 38.195201][ T3315] team0: Port device team_slave_1 added [ 38.219421][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.228823][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.235843][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.261754][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.273514][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.280517][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.306945][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.321179][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.338535][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.345603][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.371630][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.414688][ T3320] team0: Port device team_slave_0 added [ 38.421688][ T3320] team0: Port device team_slave_1 added [ 38.429261][ T3322] hsr_slave_0: entered promiscuous mode [ 38.435492][ T3322] hsr_slave_1: entered promiscuous mode [ 38.446460][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.453528][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.460774][ T3314] bridge_slave_0: entered allmulticast mode [ 38.467249][ T3314] bridge_slave_0: entered promiscuous mode [ 38.474971][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.482068][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.489238][ T3314] bridge_slave_1: entered allmulticast mode [ 38.495697][ T3314] bridge_slave_1: entered promiscuous mode [ 38.534086][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.541293][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.567246][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.578565][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.585570][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.611563][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.624633][ T3316] hsr_slave_0: entered promiscuous mode [ 38.630724][ T3316] hsr_slave_1: entered promiscuous mode [ 38.636583][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 38.642319][ T3316] Cannot create hsr debugfs directory [ 38.673636][ T3315] hsr_slave_0: entered promiscuous mode [ 38.679835][ T3315] hsr_slave_1: entered promiscuous mode [ 38.685772][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 38.691506][ T3315] Cannot create hsr debugfs directory [ 38.698236][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.709221][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.755378][ T3320] hsr_slave_0: entered promiscuous mode [ 38.761397][ T3320] hsr_slave_1: entered promiscuous mode [ 38.767393][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 38.773120][ T3320] Cannot create hsr debugfs directory [ 38.781788][ T3314] team0: Port device team_slave_0 added [ 38.790597][ T3314] team0: Port device team_slave_1 added [ 38.829734][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.836734][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.862712][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.888768][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.895847][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.921761][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.009361][ T3314] hsr_slave_0: entered promiscuous mode [ 39.015553][ T3314] hsr_slave_1: entered promiscuous mode [ 39.021396][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 39.027169][ T3314] Cannot create hsr debugfs directory [ 39.085962][ T3322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.099076][ T3322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.110648][ T3322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.124247][ T3322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.164587][ T3316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.173538][ T3316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.188072][ T3316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.196679][ T3316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.225825][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.244290][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.256918][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.266894][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.295889][ T3320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.304886][ T3320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.321743][ T3320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.330828][ T3320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.365578][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.375873][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.390207][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.403927][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.414985][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.422033][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.443862][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.462835][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.470031][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.483232][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.495179][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.502326][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.519284][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.526572][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.548176][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.555371][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.585899][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.597471][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.633052][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.643534][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.657923][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.669301][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.676422][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.693491][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.700645][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.709779][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.716864][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.727399][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.734483][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.752014][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.772448][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.779579][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.797265][ T3315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.807759][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.820080][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.827175][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.858137][ T3320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.868696][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.888085][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.897897][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.975495][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.008550][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.039969][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.118337][ T3316] veth0_vlan: entered promiscuous mode [ 40.130499][ T3322] veth0_vlan: entered promiscuous mode [ 40.146644][ T3322] veth1_vlan: entered promiscuous mode [ 40.159270][ T3315] veth0_vlan: entered promiscuous mode [ 40.166358][ T3316] veth1_vlan: entered promiscuous mode [ 40.178852][ T3315] veth1_vlan: entered promiscuous mode [ 40.191469][ T3322] veth0_macvtap: entered promiscuous mode [ 40.211792][ T3315] veth0_macvtap: entered promiscuous mode [ 40.219486][ T3322] veth1_macvtap: entered promiscuous mode [ 40.235956][ T3315] veth1_macvtap: entered promiscuous mode [ 40.246075][ T3316] veth0_macvtap: entered promiscuous mode [ 40.258621][ T3316] veth1_macvtap: entered promiscuous mode [ 40.266725][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.276495][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.296614][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.305780][ T3314] veth0_vlan: entered promiscuous mode [ 40.321076][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.331739][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.340021][ T124] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.348827][ T124] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.361838][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.372274][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 40.372287][ T29] audit: type=1400 audit(1764216009.535:82): avc: denied { mounton } for pid=3322 comm="syz-executor" path="/root/syzkaller.xGbKZc/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 40.381681][ T3314] veth1_vlan: entered promiscuous mode [ 40.402743][ T29] audit: type=1400 audit(1764216009.535:83): avc: denied { mount } for pid=3322 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.409591][ T124] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.438970][ T29] audit: type=1400 audit(1764216009.535:84): avc: denied { mounton } for pid=3322 comm="syz-executor" path="/root/syzkaller.xGbKZc/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 40.439074][ T29] audit: type=1400 audit(1764216009.535:85): avc: denied { mount } for pid=3322 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 40.439102][ T29] audit: type=1400 audit(1764216009.545:86): avc: denied { mounton } for pid=3322 comm="syz-executor" path="/root/syzkaller.xGbKZc/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 40.512581][ T29] audit: type=1400 audit(1764216009.545:87): avc: denied { mounton } for pid=3322 comm="syz-executor" path="/root/syzkaller.xGbKZc/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 40.539995][ T29] audit: type=1400 audit(1764216009.545:88): avc: denied { unmount } for pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.559689][ T29] audit: type=1400 audit(1764216009.655:89): avc: denied { mounton } for pid=3322 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 40.582461][ T29] audit: type=1400 audit(1764216009.655:90): avc: denied { mount } for pid=3322 comm="syz-executor" name="/" dev="gadgetfs" ino=4042 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 40.608220][ T3322] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.613332][ T124] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.643729][ T29] audit: type=1400 audit(1764216009.805:91): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.697709][ T3320] veth0_vlan: entered promiscuous mode [ 40.709179][ T3314] veth0_macvtap: entered promiscuous mode [ 40.718268][ T124] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.729412][ T3320] veth1_vlan: entered promiscuous mode [ 40.743782][ T3484] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4'. [ 40.757866][ T124] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.773498][ T3320] veth0_macvtap: entered promiscuous mode [ 40.795689][ T3320] veth1_macvtap: entered promiscuous mode [ 40.804312][ T124] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.813090][ T124] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.826869][ T124] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.835975][ T3314] veth1_macvtap: entered promiscuous mode [ 40.842481][ T3389] IPVS: starting estimator thread 0... [ 40.842474][ T3484] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 40.852849][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.862384][ T124] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.880406][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.900548][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.909457][ T124] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.921982][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.943719][ T124] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.963665][ T3494] IPVS: using max 2400 ests per chain, 120000 per kthread [ 40.987481][ T124] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.016415][ T124] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.031839][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.073809][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.082653][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.097691][ T3503] bridge: RTM_NEWNEIGH with invalid ether address [ 41.112272][ T3508] Zero length message leads to an empty skb [ 41.129592][ T3509] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 41.132621][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.136170][ T3509] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 41.136252][ T3509] vhci_hcd vhci_hcd.0: Device attached [ 41.175156][ T3514] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 41.181790][ T3514] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 41.189350][ T3514] vhci_hcd vhci_hcd.0: Device attached [ 41.195118][ T3508] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5'. [ 41.203873][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.203992][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.230003][ T3515] vhci_hcd: cannot find the pending unlink 1023 [ 41.244035][ T3515] vhci_hcd: connection closed [ 41.246761][ T52] vhci_hcd: stop threads [ 41.255844][ T52] vhci_hcd: release socket [ 41.256417][ T3522] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11'. [ 41.260269][ T52] vhci_hcd: disconnect device [ 41.271569][ T3511] vhci_hcd: connection closed [ 41.274058][ T3519] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10'. [ 41.288058][ T52] vhci_hcd: stop threads [ 41.292328][ T52] vhci_hcd: release socket [ 41.296828][ T52] vhci_hcd: disconnect device [ 41.353973][ T3409] vhci_hcd: vhci_device speed not set [ 41.358840][ T3519] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 41.370655][ T23] IPVS: starting estimator thread 0... [ 41.377661][ T23] IPVS: starting estimator thread 0... [ 41.378090][ T3522] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 41.439467][ T3529] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12'. [ 41.456023][ T3529] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 41.463635][ T3524] IPVS: using max 2496 ests per chain, 124800 per kthread [ 41.470771][ T3527] IPVS: using max 2448 ests per chain, 122400 per kthread [ 41.559318][ T3536] netlink: 'syz.4.14': attribute type 39 has an invalid length. [ 41.605487][ T3538] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16'. [ 41.616683][ T3538] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 41.719552][ T3542] loop2: detected capacity change from 0 to 8192 [ 41.728569][ T3542] vfat: Unknown parameter 'ÿ0xffffffffffffffffÿ' [ 41.783103][ T3544] syz.3.18 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 41.794204][ T3542] loop2: detected capacity change from 0 to 512 [ 41.860243][ T3548] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20'. [ 41.873761][ T3544] hub 2-0:1.0: USB hub found [ 41.878768][ T3544] hub 2-0:1.0: 8 ports detected [ 41.962737][ T3557] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23'. [ 42.026096][ T3550] 9pnet_fd: Insufficient options for proto=fd [ 42.048188][ T3423] IPVS: starting estimator thread 0... [ 42.056533][ T3557] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 42.094631][ T3552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 42.122934][ C1] vcan0: j1939_session_tx_dat: 0xffff88811a754600: queue data error: -100 [ 42.143879][ T3563] IPVS: using max 2016 ests per chain, 100800 per kthread [ 42.175800][ T3569] netlink: 32 bytes leftover after parsing attributes in process `syz.0.25'. [ 42.186559][ T3569] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 42.232523][ T3564] mmap: syz.1.20 (3564) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.246128][ T3574] x_tables: duplicate underflow at hook 2 [ 42.308048][ T3574] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 42.414497][ T3572] loop4: detected capacity change from 0 to 1024 [ 42.427769][ T3579] dummy0: entered allmulticast mode [ 42.433391][ T3579] dummy0: left allmulticast mode [ 42.452894][ T3572] EXT4-fs: Ignoring removed orlov option [ 42.583392][ T3548] xt_TPROXY: Can be used only with -p tcp or -p udp [ 42.600310][ T3572] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 42.678240][ T3572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.196986][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.309887][ T3593] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.435244][ T3602] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 43.458681][ T3602] loop4: detected capacity change from 0 to 512 [ 43.476168][ T3602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=3602 comm=syz.4.33 [ 43.511627][ T3602] loop4: detected capacity change from 0 to 1024 [ 43.534854][ T3602] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e042c118, mo2=0002] [ 43.546985][ T3602] System zones: 0-1, 3-36 [ 43.559245][ T3602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.577088][ T3602] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.681168][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.765923][ T3623] netlink: 'syz.2.37': attribute type 39 has an invalid length. [ 43.780431][ T3625] loop4: detected capacity change from 0 to 1024 [ 43.792491][ T3625] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.801211][ T3625] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 43.811650][ T3625] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 43.828511][ T3625] EXT4-fs error (device loop4): ext4_get_journal_inode:5808: comm syz.4.38: inode #1: comm syz.4.38: iget: illegal inode # [ 43.842631][ T3625] EXT4-fs (loop4): no journal found [ 43.847925][ T3625] EXT4-fs (loop4): can't get journal size [ 43.873035][ T3625] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e118, mo2=0002] [ 43.903518][ T3625] EXT4-fs (loop4): failed to initialize system zone (-22) [ 43.924754][ T3625] EXT4-fs (loop4): mount failed [ 43.942726][ T36] IPVS: starting estimator thread 0... [ 43.953429][ T3627] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 44.023981][ T3636] netlink: 'syz.4.42': attribute type 39 has an invalid length. [ 44.033658][ T3634] IPVS: using max 2112 ests per chain, 105600 per kthread [ 44.051069][ T3638] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 44.080877][ T3643] netlink: 'syz.4.43': attribute type 39 has an invalid length. [ 44.162439][ T3651] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 44.170121][ T3650] team0: entered promiscuous mode [ 44.175342][ T3650] team_slave_0: entered promiscuous mode [ 44.181140][ T3650] team_slave_1: entered promiscuous mode [ 44.351189][ T3653] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 44.359548][ T3653] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 44.464099][ T3647] team0: left promiscuous mode [ 44.468941][ T3647] team_slave_0: left promiscuous mode [ 44.474449][ T3647] team_slave_1: left promiscuous mode [ 44.485329][ T3669] netlink: 'syz.4.52': attribute type 39 has an invalid length. [ 44.577602][ T3679] netlink: 'syz.0.58': attribute type 39 has an invalid length. [ 44.589025][ T3671] netlink: 'syz.4.56': attribute type 39 has an invalid length. [ 44.701458][ C0] hrtimer: interrupt took 28342 ns [ 44.766539][ T3681] loop3: detected capacity change from 0 to 512 [ 44.776535][ T3681] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.824329][ T3681] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 44.832417][ T3681] EXT4-fs (loop3): orphan cleanup on readonly fs [ 44.840744][ T3681] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents [ 44.860493][ T3681] EXT4-fs (loop3): Remounting filesystem read-only [ 44.867189][ T3681] EXT4-fs (loop3): 1 truncate cleaned up [ 44.880167][ T3442] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 44.890845][ T3442] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 44.917335][ T3693] tipc: Enabling not permitted [ 44.922880][ T3693] tipc: Enabling of bearer rejected, failed to enable media [ 45.002808][ T3442] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 45.033249][ T3681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.102998][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.238342][ T3708] loop2: detected capacity change from 0 to 512 [ 45.269383][ T3708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.312336][ T3708] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.426431][ T29] kauditd_printk_skb: 802 callbacks suppressed [ 45.426523][ T29] audit: type=1400 audit(1764216014.595:888): avc: denied { write } for pid=3713 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 45.492779][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.524074][ T29] audit: type=1400 audit(1764216014.625:889): avc: denied { add_name } for pid=3703 comm="syz.2.66" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.544665][ T29] audit: type=1400 audit(1764216014.625:890): avc: denied { create } for pid=3703 comm="syz.2.66" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.564959][ T29] audit: type=1400 audit(1764216014.625:891): avc: denied { append } for pid=3703 comm="syz.2.66" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.587264][ T29] audit: type=1400 audit(1764216014.625:892): avc: denied { open } for pid=3703 comm="syz.2.66" path="/16/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.610095][ T29] audit: type=1400 audit(1764216014.635:893): avc: denied { setattr } for pid=3703 comm="syz.2.66" name="" dev="pipefs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 45.631883][ T29] audit: type=1400 audit(1764216014.635:894): avc: denied { create } for pid=3703 comm="syz.2.66" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 45.673893][ T3725] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 45.686821][ T3725] loop0: detected capacity change from 0 to 164 [ 45.696687][ T3724] netlink: 'syz.2.69': attribute type 39 has an invalid length. [ 45.763456][ T3734] __nla_validate_parse: 10 callbacks suppressed [ 45.763475][ T3734] netlink: 32 bytes leftover after parsing attributes in process `syz.2.71'. [ 45.779716][ T3725] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 45.836899][ T3714] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 45.847485][ T29] audit: type=1326 audit(1764216014.865:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3723 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54fe08f749 code=0x7ffc0000 [ 45.854128][ T3714] Symlink component flag not implemented [ 45.870816][ T29] audit: type=1326 audit(1764216014.865:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3723 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54fe08f749 code=0x7ffc0000 [ 45.876332][ T3714] Symlink component flag not implemented [ 45.908597][ T29] audit: type=1326 audit(1764216014.865:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3723 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f54fe08f749 code=0x7ffc0000 [ 45.925617][ T3714] Symlink component flag not implemented (7) [ 45.937852][ T3714] Symlink component flag not implemented (116) [ 46.020594][ T3730] loop3: detected capacity change from 0 to 2048 [ 46.127064][ T3740] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.73'. [ 46.141401][ T2967] IPVS: starting estimator thread 0... [ 46.148006][ T3729] net_ratelimit: 4 callbacks suppressed [ 46.148078][ T3729] IPVS: sh: FWM 3 0x00000003 - no destination available [ 46.176033][ T3596] Alternate GPT is invalid, using primary GPT. [ 46.182517][ T3596] loop3: p2 p3 p7 [ 46.229959][ T3736] IPVS: sh: FWM 3 0x00000003 - no destination available [ 46.237424][ T3741] IPVS: using max 2112 ests per chain, 105600 per kthread [ 46.288617][ T3730] Alternate GPT is invalid, using primary GPT. [ 46.295052][ T3730] loop3: p2 p3 p7 [ 46.299122][ T3744] netlink: 32 bytes leftover after parsing attributes in process `syz.4.74'. [ 46.312954][ T3744] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 46.511820][ T3751] netlink: 'syz.2.77': attribute type 39 has an invalid length. [ 46.524469][ T3753] netlink: 16 bytes leftover after parsing attributes in process `syz.4.78'. [ 46.628433][ T3705] Set syz1 is full, maxelem 65536 reached [ 46.641334][ T12] IPVS: stop unused estimator thread 0... [ 46.649234][ T3756] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.80'. [ 46.709519][ T3758] loop0: detected capacity change from 0 to 512 [ 46.755323][ T3760] netlink: 'syz.3.81': attribute type 39 has an invalid length. [ 46.756585][ T3758] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 46.782452][ T3762] loop2: detected capacity change from 0 to 1024 [ 46.782664][ T3758] EXT4-fs (loop0): orphan cleanup on readonly fs [ 46.793658][ T3762] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.813049][ T3758] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.79: corrupted inode contents [ 46.818639][ T3762] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 46.834591][ T3762] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 46.844935][ T3762] EXT4-fs error (device loop2): ext4_get_journal_inode:5808: comm syz.2.82: inode #1: comm syz.2.82: iget: illegal inode # [ 46.864990][ T3758] EXT4-fs (loop0): Remounting filesystem read-only [ 46.872643][ T3762] EXT4-fs (loop2): no journal found [ 46.877914][ T3762] EXT4-fs (loop2): can't get journal size [ 46.878231][ T3758] EXT4-fs (loop0): 1 truncate cleaned up [ 46.889490][ T37] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 46.900217][ T37] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 46.911227][ T3762] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e118, mo2=0002] [ 46.911606][ T37] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 46.931268][ T3762] EXT4-fs (loop2): failed to initialize system zone (-22) [ 46.939229][ T3762] EXT4-fs (loop2): mount failed [ 46.942948][ T3768] netlink: 'syz.3.83': attribute type 39 has an invalid length. [ 46.984231][ T3758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.997324][ T3753] xt_TPROXY: Can be used only with -p tcp or -p udp [ 47.053074][ T3770] loop3: detected capacity change from 0 to 512 [ 47.075600][ T3772] hub 2-0:1.0: USB hub found [ 47.080836][ T3772] hub 2-0:1.0: 8 ports detected [ 47.094614][ T3770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.117174][ T3770] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.188135][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.205692][ T3758] netlink: 'syz.0.79': attribute type 27 has an invalid length. [ 47.246485][ T3784] loop3: detected capacity change from 0 to 512 [ 47.260677][ T3784] EXT4-fs: inline encryption not supported [ 47.275324][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.298430][ T3788] loop2: detected capacity change from 0 to 512 [ 47.351556][ T3784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 47.365505][ T3788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.379977][ T3784] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.380549][ T3788] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.617512][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.713669][ T3784] loop3: detected capacity change from 512 to 64 [ 47.786929][ T3322] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /14/file0: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=2048 fake=0 [ 47.815931][ T3813] netlink: 'syz.2.95': attribute type 39 has an invalid length. [ 47.836339][ T3806] Set syz1 is full, maxelem 65536 reached [ 47.849936][ T3815] loop0: detected capacity change from 0 to 1024 [ 47.883169][ T3322] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 47.898002][ T3815] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.906683][ T3798] loop4: detected capacity change from 0 to 2048 [ 47.913641][ T3815] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 47.923360][ T3815] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 47.933715][ T3322] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz-executor: mark_inode_dirty error [ 47.945278][ T3815] EXT4-fs error (device loop0): ext4_get_journal_inode:5808: comm syz.0.97: inode #1: comm syz.0.97: iget: illegal inode # [ 47.958977][ T3815] EXT4-fs (loop0): no journal found [ 47.964295][ T3815] EXT4-fs (loop0): can't get journal size [ 47.969230][ T3792] Alternate GPT is invalid, using primary GPT. [ 47.976474][ T3792] loop4: p2 p3 p7 [ 47.980691][ T3815] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e118, mo2=0002] [ 47.997328][ T3815] EXT4-fs (loop0): failed to initialize system zone (-22) [ 48.004702][ T3815] EXT4-fs (loop0): mount failed [ 48.014187][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 48.116985][ T3798] Alternate GPT is invalid, using primary GPT. [ 48.123444][ T3798] loop4: p2 p3 p7 [ 48.229206][ T3822] netlink: 'syz.2.100': attribute type 39 has an invalid length. [ 48.236362][ T3818] loop0: detected capacity change from 0 to 512 [ 48.361978][ T3824] netlink: 32 bytes leftover after parsing attributes in process `syz.4.101'. [ 48.443153][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 48.454619][ T3793] udevd[3793]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 48.466592][ T3596] udevd[3596]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 48.498149][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.507431][ T3824] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 48.513717][ T3818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.525786][ T3826] netlink: 'syz.2.102': attribute type 39 has an invalid length. [ 48.545051][ T3818] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.589101][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.604684][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.659230][ T3824] syz.4.101 (3824) used greatest stack depth: 10232 bytes left [ 48.683450][ T3836] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 48.690008][ T3836] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 48.697535][ T3836] vhci_hcd vhci_hcd.0: Device attached [ 48.703799][ T3843] netlink: 32 bytes leftover after parsing attributes in process `syz.4.108'. [ 48.718188][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.728682][ T3841] vhci_hcd: cannot find the pending unlink 1023 [ 48.737964][ T3841] vhci_hcd: connection closed [ 48.739553][ T3843] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 48.751719][ T124] vhci_hcd: stop threads [ 48.756145][ T124] vhci_hcd: release socket [ 48.760600][ T124] vhci_hcd: disconnect device [ 48.786218][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.798622][ T3846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.109'. [ 48.807849][ T3846] bridge_slave_1: left allmulticast mode [ 48.813587][ T3846] bridge_slave_1: left promiscuous mode [ 48.819293][ T3846] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.830427][ T3846] bridge_slave_0: left allmulticast mode [ 48.836200][ T3846] bridge_slave_0: left promiscuous mode [ 48.842084][ T3846] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.864761][ T3855] loop2: detected capacity change from 0 to 512 [ 48.874128][ T3855] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 48.874286][ T3855] EXT4-fs (loop2): orphan cleanup on readonly fs [ 48.875748][ T3855] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.111: corrupted inode contents [ 48.902016][ T3855] EXT4-fs (loop2): Remounting filesystem read-only [ 48.902145][ T3855] EXT4-fs (loop2): 1 truncate cleaned up [ 48.902596][ T124] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 48.925208][ T124] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 48.927523][ T124] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 48.946621][ T3855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.081114][ T52] bridge_slave_1: left allmulticast mode [ 49.086902][ T52] bridge_slave_1: left promiscuous mode [ 49.092561][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.118885][ T3872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.116'. [ 49.132494][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.142216][ T52] bridge_slave_0: left allmulticast mode [ 49.148065][ T52] bridge_slave_0: left promiscuous mode [ 49.154065][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.231411][ T3886] loop4: detected capacity change from 0 to 512 [ 49.238418][ T3886] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 49.250310][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.264101][ T3887] loop2: detected capacity change from 0 to 128 [ 49.269485][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.271153][ T3887] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.298434][ T52] bond0 (unregistering): Released all slaves [ 49.318325][ T3891] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.120'. [ 49.329781][ T3887] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.406773][ T3872] vlan2: entered allmulticast mode [ 49.412065][ T3872] veth0_to_bond: entered allmulticast mode [ 49.420263][ T52] hsr_slave_0: left promiscuous mode [ 49.436121][ T52] hsr_slave_1: left promiscuous mode [ 49.453560][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.461020][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.469781][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.477409][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.488850][ T52] veth1_macvtap: left promiscuous mode [ 49.494446][ T52] veth0_macvtap: left promiscuous mode [ 49.507774][ T52] veth1_vlan: left promiscuous mode [ 49.514918][ T52] veth0_vlan: left promiscuous mode [ 49.545597][ T3915] loop0: detected capacity change from 0 to 1024 [ 49.579054][ T3915] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.592812][ T3915] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 49.604989][ T3915] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 49.628561][ T3915] EXT4-fs error (device loop0): ext4_get_journal_inode:5808: comm syz.0.127: inode #1: comm syz.0.127: iget: illegal inode # [ 49.673033][ T3915] EXT4-fs (loop0): no journal found [ 49.674463][ T3923] loop2: detected capacity change from 0 to 1024 [ 49.678333][ T3915] EXT4-fs (loop0): can't get journal size [ 49.690697][ T52] team0 (unregistering): Port device team_slave_1 removed [ 49.702519][ T3923] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.711524][ T52] team0 (unregistering): Port device team_slave_0 removed [ 49.731396][ T3923] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 49.749763][ T3915] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e118, mo2=0002] [ 49.757294][ T3923] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 49.768204][ T3923] EXT4-fs error (device loop2): ext4_get_journal_inode:5808: comm syz.2.130: inode #1: comm syz.2.130: iget: illegal inode # [ 49.781585][ T3915] EXT4-fs (loop0): failed to initialize system zone (-22) [ 49.788873][ T3923] EXT4-fs (loop2): no journal found [ 49.790920][ T3915] EXT4-fs (loop0): mount failed [ 49.794227][ T3923] EXT4-fs (loop2): can't get journal size [ 49.807787][ T3923] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e118, mo2=0002] [ 49.816603][ T3923] EXT4-fs (loop2): failed to initialize system zone (-22) [ 49.824517][ T3923] EXT4-fs (loop2): mount failed [ 49.825405][ T3931] FAULT_INJECTION: forcing a failure. [ 49.825405][ T3931] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 49.842507][ T3931] CPU: 0 UID: 0 PID: 3931 Comm: syz.1.134 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.842536][ T3931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 49.842552][ T3931] Call Trace: [ 49.842561][ T3931] [ 49.842570][ T3931] __dump_stack+0x1d/0x30 [ 49.842598][ T3931] dump_stack_lvl+0xe8/0x140 [ 49.842639][ T3931] dump_stack+0x15/0x1b [ 49.842661][ T3931] should_fail_ex+0x265/0x280 [ 49.842683][ T3931] should_fail+0xb/0x20 [ 49.842722][ T3931] should_fail_usercopy+0x1a/0x20 [ 49.842746][ T3931] _copy_to_user+0x20/0xa0 [ 49.842771][ T3931] simple_read_from_buffer+0xb5/0x130 [ 49.842815][ T3931] proc_fail_nth_read+0x10e/0x150 [ 49.842935][ T3931] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 49.842973][ T3931] vfs_read+0x1a8/0x770 [ 49.842999][ T3931] ? __rcu_read_unlock+0x4f/0x70 [ 49.843030][ T3931] ? __fget_files+0x184/0x1c0 [ 49.843141][ T3931] ksys_read+0xda/0x1a0 [ 49.843237][ T3931] __x64_sys_read+0x40/0x50 [ 49.843268][ T3931] x64_sys_call+0x27c0/0x3000 [ 49.843294][ T3931] do_syscall_64+0xd2/0x200 [ 49.843318][ T3931] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 49.843421][ T3931] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 49.843556][ T3931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.843576][ T3931] RIP: 0033:0x7f848950e15c [ 49.843592][ T3931] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 49.843613][ T3931] RSP: 002b:00007f8487f77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 49.843722][ T3931] RAX: ffffffffffffffda RBX: 00007f8489765fa0 RCX: 00007f848950e15c [ 49.843738][ T3931] RDX: 000000000000000f RSI: 00007f8487f770a0 RDI: 0000000000000004 [ 49.843750][ T3931] RBP: 00007f8487f77090 R08: 0000000000000000 R09: 0000000000000000 [ 49.843762][ T3931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.843777][ T3931] R13: 00007f8489766038 R14: 00007f8489765fa0 R15: 00007fff7bfea6d8 [ 49.843882][ T3931] [ 50.092616][ T3830] chnl_net:caif_netlink_parms(): no params data found [ 50.207321][ T3947] netlink: 'syz.4.139': attribute type 1 has an invalid length. [ 50.220247][ T3830] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.227630][ T3830] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.233038][ T3941] 9pnet_fd: Insufficient options for proto=fd [ 50.241961][ T3830] bridge_slave_0: entered allmulticast mode [ 50.249013][ T3830] bridge_slave_0: entered promiscuous mode [ 50.258451][ T3830] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.265604][ T3830] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.273743][ T3830] bridge_slave_1: entered allmulticast mode [ 50.280357][ T3830] bridge_slave_1: entered promiscuous mode [ 50.324764][ T3961] bridge_slave_1: left allmulticast mode [ 50.330506][ T3961] bridge_slave_1: left promiscuous mode [ 50.336251][ T3961] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.355718][ T3961] bridge_slave_0: left allmulticast mode [ 50.361446][ T3961] bridge_slave_0: left promiscuous mode [ 50.367500][ T3961] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.473884][ T3969] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 50.485458][ T3969] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 50.505957][ T3947] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 50.520684][ T3980] bond1: (slave gretap1): making interface the new active one [ 50.537168][ T3980] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 50.548014][ T29] kauditd_printk_skb: 416 callbacks suppressed [ 50.548029][ T29] audit: type=1326 audit(1764216275.708:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f8acf749 code=0x7ffc0000 [ 50.577847][ T29] audit: type=1326 audit(1764216275.708:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f8acf749 code=0x7ffc0000 [ 50.608070][ T3984] macvlan2: entered promiscuous mode [ 50.613533][ T3984] macvlan2: entered allmulticast mode [ 50.619985][ T3984] bond1: entered promiscuous mode [ 50.625122][ T3984] gretap1: entered promiscuous mode [ 50.631017][ T3984] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 50.644042][ T3984] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 50.656038][ T3984] bond1: left promiscuous mode [ 50.658528][ T3988] FAULT_INJECTION: forcing a failure. [ 50.658528][ T3988] name failslab, interval 1, probability 0, space 0, times 1 [ 50.660881][ T3984] gretap1: left promiscuous mode [ 50.673539][ T3988] CPU: 1 UID: 0 PID: 3988 Comm: syz.0.148 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.673571][ T3988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 50.673586][ T3988] Call Trace: [ 50.673592][ T3988] [ 50.673601][ T3988] __dump_stack+0x1d/0x30 [ 50.673632][ T3988] dump_stack_lvl+0xe8/0x140 [ 50.673660][ T3988] dump_stack+0x15/0x1b [ 50.673723][ T3988] should_fail_ex+0x265/0x280 [ 50.673752][ T3988] should_failslab+0x8c/0xb0 [ 50.673791][ T3988] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 50.673928][ T3988] ? __alloc_skb+0x101/0x320 [ 50.673969][ T3988] __alloc_skb+0x101/0x320 [ 50.674049][ T3988] netlink_alloc_large_skb+0xbf/0xf0 [ 50.674092][ T3988] netlink_sendmsg+0x3cf/0x6b0 [ 50.674120][ T3988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.674147][ T3988] __sock_sendmsg+0x145/0x180 [ 50.674259][ T3988] ____sys_sendmsg+0x31e/0x4e0 [ 50.674291][ T3988] ___sys_sendmsg+0x17b/0x1d0 [ 50.674332][ T3988] __x64_sys_sendmsg+0xd4/0x160 [ 50.674372][ T3988] x64_sys_call+0x191e/0x3000 [ 50.674411][ T3988] do_syscall_64+0xd2/0x200 [ 50.674441][ T3988] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 50.674497][ T3988] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 50.674543][ T3988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.674572][ T3988] RIP: 0033:0x7f06f8acf749 [ 50.674594][ T3988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.674617][ T3988] RSP: 002b:00007f06f752f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.674740][ T3988] RAX: ffffffffffffffda RBX: 00007f06f8d25fa0 RCX: 00007f06f8acf749 [ 50.674757][ T3988] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 50.674774][ T3988] RBP: 00007f06f752f090 R08: 0000000000000000 R09: 0000000000000000 [ 50.674791][ T3988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.674806][ T3988] R13: 00007f06f8d26038 R14: 00007f06f8d25fa0 R15: 00007fffa76a84e8 [ 50.674831][ T3988] [ 50.801995][ T29] audit: type=1326 audit(1764216275.949:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3990 comm="syz.0.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f8acf749 code=0x7ffc0000 [ 50.902503][ T29] audit: type=1326 audit(1764216275.949:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3990 comm="syz.0.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06f8acf749 code=0x7ffc0000 [ 50.925929][ T29] audit: type=1326 audit(1764216275.949:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3990 comm="syz.0.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f8acf749 code=0x7ffc0000 [ 50.949287][ T29] audit: type=1326 audit(1764216275.949:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3990 comm="syz.0.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f8acf749 code=0x7ffc0000 [ 50.972716][ T29] audit: type=1326 audit(1764216275.949:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3990 comm="syz.0.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06f8acf749 code=0x7ffc0000 [ 50.996045][ T29] audit: type=1326 audit(1764216275.949:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3990 comm="syz.0.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f8acf749 code=0x7ffc0000 [ 51.019636][ T29] audit: type=1326 audit(1764216275.949:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3990 comm="syz.0.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f8acf749 code=0x7ffc0000 [ 51.032076][ T3980] syz.4.139 (3980) used greatest stack depth: 10056 bytes left [ 51.042986][ T29] audit: type=1326 audit(1764216275.949:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3990 comm="syz.0.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06f8acf749 code=0x7ffc0000 [ 51.081378][ T3830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.091971][ T3986] __nla_validate_parse: 2 callbacks suppressed [ 51.091989][ T3986] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.147'. [ 51.109370][ T3830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.132211][ T3984] syz.4.139 (3984) used greatest stack depth: 9240 bytes left [ 51.149664][ T52] IPVS: stop unused estimator thread 0... [ 51.180824][ T3997] loop4: detected capacity change from 0 to 512 [ 51.194989][ T3830] team0: Port device team_slave_0 added [ 51.201671][ T3830] team0: Port device team_slave_1 added [ 51.242381][ T3995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.255658][ T3997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.255733][ T3995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.278509][ T3997] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.292267][ T3830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.299312][ T3830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.325338][ T3830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.365035][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.411991][ T3830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.419049][ T3830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.445182][ T3830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.465746][ T4017] FAULT_INJECTION: forcing a failure. [ 51.465746][ T4017] name failslab, interval 1, probability 0, space 0, times 0 [ 51.478429][ T4017] CPU: 0 UID: 0 PID: 4017 Comm: syz.4.153 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.478458][ T4017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 51.478473][ T4017] Call Trace: [ 51.478481][ T4017] [ 51.478488][ T4017] __dump_stack+0x1d/0x30 [ 51.478545][ T4017] dump_stack_lvl+0xe8/0x140 [ 51.478565][ T4017] dump_stack+0x15/0x1b [ 51.478599][ T4017] should_fail_ex+0x265/0x280 [ 51.478621][ T4017] should_failslab+0x8c/0xb0 [ 51.478732][ T4017] kmem_cache_alloc_noprof+0x50/0x480 [ 51.478808][ T4017] ? getname_flags+0x80/0x3b0 [ 51.478842][ T4017] getname_flags+0x80/0x3b0 [ 51.478950][ T4017] path_setxattrat+0x223/0x310 [ 51.478997][ T4017] __x64_sys_setxattr+0x6e/0x90 [ 51.479026][ T4017] x64_sys_call+0xad2/0x3000 [ 51.479056][ T4017] do_syscall_64+0xd2/0x200 [ 51.479098][ T4017] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 51.479133][ T4017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.479155][ T4017] RIP: 0033:0x7fe7943ef749 [ 51.479170][ T4017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.479254][ T4017] RSP: 002b:00007fe792e57038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 51.479273][ T4017] RAX: ffffffffffffffda RBX: 00007fe794645fa0 RCX: 00007fe7943ef749 [ 51.479308][ T4017] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000000 [ 51.479320][ T4017] RBP: 00007fe792e57090 R08: 0000000000000000 R09: 0000000000000000 [ 51.479332][ T4017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.479422][ T4017] R13: 00007fe794646038 R14: 00007fe794645fa0 R15: 00007ffddb9f5868 [ 51.479440][ T4017] [ 51.684494][ T3830] hsr_slave_0: entered promiscuous mode [ 51.696255][ T4022] netlink: 32 bytes leftover after parsing attributes in process `syz.4.154'. [ 51.707612][ T4022] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 51.719379][ T3830] hsr_slave_1: entered promiscuous mode [ 51.872729][ T4038] netlink: 96 bytes leftover after parsing attributes in process `syz.1.157'. [ 51.891391][ T4044] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.159'. [ 51.955748][ T3830] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 51.971479][ T3830] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 51.980627][ T3830] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 51.990156][ T3830] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 52.004096][ T4048] loop4: detected capacity change from 0 to 8192 [ 52.045954][ T4048] vfat: Unknown parameter 'ÿ0xffffffffffffffffÿ' [ 52.074188][ T4071] loop0: detected capacity change from 0 to 1024 [ 52.089236][ T3830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.098919][ T4071] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.115595][ T4071] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 52.131072][ T4048] loop4: detected capacity change from 0 to 512 [ 52.138722][ T3830] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.147460][ T4071] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 52.166084][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.173194][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.181916][ T4071] EXT4-fs error (device loop0): ext4_get_journal_inode:5808: comm syz.0.163: inode #1: comm syz.0.163: iget: illegal inode # [ 52.204686][ T4071] EXT4-fs (loop0): no journal found [ 52.207404][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.209933][ T4071] EXT4-fs (loop0): can't get journal size [ 52.217071][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.233326][ T4071] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e118, mo2=0002] [ 52.252787][ T3830] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.263250][ T3830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.289607][ T4071] EXT4-fs (loop0): failed to initialize system zone (-22) [ 52.297772][ T4071] EXT4-fs (loop0): mount failed [ 52.386851][ T3830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.505102][ T4106] loop0: detected capacity change from 0 to 512 [ 52.523663][ T4106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.543024][ T4106] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.577183][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.577427][ T3830] veth0_vlan: entered promiscuous mode [ 52.594857][ T3830] veth1_vlan: entered promiscuous mode [ 52.620366][ T3830] veth0_macvtap: entered promiscuous mode [ 52.625116][ T4121] loop2: detected capacity change from 0 to 1024 [ 52.634428][ T4121] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.635686][ T4122] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 52.643053][ T4121] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 52.649380][ T4122] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 52.649547][ T4122] vhci_hcd vhci_hcd.0: Device attached [ 52.659905][ T4121] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 52.682330][ T4123] vhci_hcd: connection closed [ 52.682753][ T4121] EXT4-fs error (device loop2): ext4_get_journal_inode:5808: comm syz.2.174: inode #1: comm syz.2.174: iget: illegal inode # [ 52.693031][ T3830] veth1_macvtap: entered promiscuous mode [ 52.708409][ T4121] EXT4-fs (loop2): no journal found [ 52.713796][ T4121] EXT4-fs (loop2): can't get journal size [ 52.719637][ T12] vhci_hcd: stop threads [ 52.723929][ T12] vhci_hcd: release socket [ 52.728372][ T12] vhci_hcd: disconnect device [ 52.733437][ T4121] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e118, mo2=0002] [ 52.734393][ T3830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.741872][ T4121] EXT4-fs (loop2): failed to initialize system zone (-22) [ 52.751367][ T3830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.764336][ T4121] EXT4-fs (loop2): mount failed [ 52.769715][ T124] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.779024][ T124] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.817741][ T4127] netlink: 32 bytes leftover after parsing attributes in process `syz.1.175'. [ 52.829474][ T124] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.830475][ T4127] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 52.843324][ T124] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.902030][ T4130] loop2: detected capacity change from 0 to 1024 [ 52.905397][ T4135] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.104'. [ 52.918061][ T4130] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.941935][ T4130] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 52.951997][ T4130] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 52.963799][ T4130] EXT4-fs error (device loop2): ext4_get_journal_inode:5808: comm syz.2.176: inode #1: comm syz.2.176: iget: illegal inode # [ 52.977291][ T4130] EXT4-fs (loop2): no journal found [ 52.980183][ T4138] netlink: 40 bytes leftover after parsing attributes in process `syz.5.178'. [ 52.982572][ T4130] EXT4-fs (loop2): can't get journal size [ 52.988229][ T4130] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e118, mo2=0002] [ 52.991562][ T4138] netlink: 40 bytes leftover after parsing attributes in process `syz.5.178'. [ 52.997273][ T4130] EXT4-fs (loop2): failed to initialize system zone (-22) [ 53.021964][ T4130] EXT4-fs (loop2): mount failed [ 53.029193][ T4138] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 53.110289][ T4138] netlink: 16 bytes leftover after parsing attributes in process `syz.5.178'. [ 53.119299][ T4138] netlink: 4 bytes leftover after parsing attributes in process `syz.5.178'. [ 53.169176][ T4147] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 53.253476][ T4157] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 53.264300][ T3482] IPVS: starting estimator thread 0... [ 53.269864][ T4151] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 53.278205][ T4149] loop4: detected capacity change from 0 to 512 [ 53.280612][ T4157] loop2: detected capacity change from 0 to 164 [ 53.306041][ T4149] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.318700][ T4149] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.368816][ T4157] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 53.369068][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.386314][ T4160] IPVS: using max 2112 ests per chain, 105600 per kthread [ 53.400153][ T4163] loop0: detected capacity change from 0 to 2048 [ 53.412525][ T4157] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 53.439152][ T4167] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 53.445719][ T4167] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 53.450239][ T4157] Symlink component flag not implemented [ 53.453193][ T4167] vhci_hcd vhci_hcd.0: Device attached [ 53.458851][ T4157] Symlink component flag not implemented [ 53.473872][ T4163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.486327][ T4168] vhci_hcd: connection closed [ 53.489606][ T4166] loop1: detected capacity change from 0 to 512 [ 53.492546][ T31] vhci_hcd: stop threads [ 53.504914][ T31] vhci_hcd: release socket [ 53.509413][ T31] vhci_hcd: disconnect device [ 53.527688][ T4157] Symlink component flag not implemented (7) [ 53.533794][ T4157] Symlink component flag not implemented (116) [ 53.540469][ T4163] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.574144][ T4166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.625969][ T4166] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.652832][ T4163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.683617][ T4163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.725455][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.998574][ T4195] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 54.005151][ T4195] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 54.012773][ T4195] vhci_hcd vhci_hcd.0: Device attached [ 54.034750][ T4196] vhci_hcd: connection closed [ 54.035041][ T124] vhci_hcd: stop threads [ 54.044075][ T124] vhci_hcd: release socket [ 54.048508][ T124] vhci_hcd: disconnect device [ 54.204791][ T4201] FAULT_INJECTION: forcing a failure. [ 54.204791][ T4201] name failslab, interval 1, probability 0, space 0, times 0 [ 54.217515][ T4201] CPU: 0 UID: 0 PID: 4201 Comm: syz.5.197 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.217546][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 54.217561][ T4201] Call Trace: [ 54.217569][ T4201] [ 54.217579][ T4201] __dump_stack+0x1d/0x30 [ 54.217603][ T4201] dump_stack_lvl+0xe8/0x140 [ 54.217623][ T4201] dump_stack+0x15/0x1b [ 54.217722][ T4201] should_fail_ex+0x265/0x280 [ 54.217745][ T4201] should_failslab+0x8c/0xb0 [ 54.217780][ T4201] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 54.217911][ T4201] ? dup_task_struct+0x70/0x6b0 [ 54.217992][ T4201] dup_task_struct+0x70/0x6b0 [ 54.218024][ T4201] ? _parse_integer+0x27/0x40 [ 54.218057][ T4201] copy_process+0x399/0x2000 [ 54.218081][ T4201] ? kstrtouint+0x76/0xc0 [ 54.218150][ T4201] ? kstrtouint_from_user+0x9f/0xf0 [ 54.218167][ T4201] ? __rcu_read_unlock+0x4f/0x70 [ 54.218192][ T4201] kernel_clone+0x16c/0x5c0 [ 54.218246][ T4201] ? vfs_write+0x7e8/0x960 [ 54.218269][ T4201] __x64_sys_clone+0xe6/0x120 [ 54.218302][ T4201] x64_sys_call+0x119c/0x3000 [ 54.218321][ T4201] do_syscall_64+0xd2/0x200 [ 54.218375][ T4201] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 54.218473][ T4201] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 54.218549][ T4201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.218637][ T4201] RIP: 0033:0x7fc8a169f749 [ 54.218665][ T4201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.218680][ T4201] RSP: 002b:00007fc8a00ddfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 54.218696][ T4201] RAX: ffffffffffffffda RBX: 00007fc8a18f6090 RCX: 00007fc8a169f749 [ 54.218706][ T4201] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000041aa1000 [ 54.218718][ T4201] RBP: 00007fc8a00de090 R08: 0000000000000000 R09: 0000000000000000 [ 54.218728][ T4201] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 54.218738][ T4201] R13: 00007fc8a18f6128 R14: 00007fc8a18f6090 R15: 00007ffd4c26edc8 [ 54.218755][ T4201] [ 54.642282][ T12] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 54.657277][ T12] EXT4-fs (loop0): Remounting filesystem read-only [ 54.664036][ T4202] mmap: syz.1.198 (4202): VmData 29208576 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 54.712481][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.841601][ T4206] loop2: detected capacity change from 0 to 512 [ 54.872383][ T4206] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.900263][ T4225] loop0: detected capacity change from 0 to 1024 [ 54.904173][ T4206] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.021963][ T4232] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 55.042859][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.052842][ T4225] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.062213][ T4227] dummy0: entered allmulticast mode [ 55.067659][ T4225] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 55.068032][ T4227] dummy0: left allmulticast mode [ 55.077722][ T4225] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 55.093009][ T4232] loop5: detected capacity change from 0 to 512 [ 55.095718][ T4225] EXT4-fs error (device loop0): ext4_get_journal_inode:5808: comm syz.0.206: inode #1: comm syz.0.206: iget: illegal inode # [ 55.118106][ T4225] EXT4-fs (loop0): no journal found [ 55.123495][ T4225] EXT4-fs (loop0): can't get journal size [ 55.138058][ T4232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=4232 comm=syz.5.209 [ 55.177729][ T4232] loop5: detected capacity change from 0 to 1024 [ 55.202661][ T4225] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e118, mo2=0002] [ 55.225520][ T4225] EXT4-fs (loop0): failed to initialize system zone (-22) [ 55.227072][ T4232] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e042c118, mo2=0002] [ 55.243101][ T4232] System zones: 0-1, 3-36 [ 55.248069][ T4232] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.254633][ T4225] EXT4-fs (loop0): mount failed [ 55.306171][ T3830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.327853][ T4241] loop1: detected capacity change from 0 to 8192 [ 55.370424][ T4241] vfat: Unknown parameter 'ÿ0xffffffffffffffffÿ' [ 55.521991][ T4241] loop1: detected capacity change from 0 to 512 [ 55.587532][ T29] kauditd_printk_skb: 384 callbacks suppressed [ 55.587560][ T29] audit: type=1326 audit(1764216280.751:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f848950e3aa code=0x7ffc0000 [ 55.639584][ T4253] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 55.646197][ T4253] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 55.653749][ T4253] vhci_hcd vhci_hcd.0: Device attached [ 55.660369][ T29] audit: type=1326 audit(1764216280.791:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f848950e3aa code=0x7ffc0000 [ 55.683574][ T29] audit: type=1326 audit(1764216280.791:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f848950de97 code=0x7ffc0000 [ 55.706982][ T29] audit: type=1326 audit(1764216280.791:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8489510eea code=0x7ffc0000 [ 55.730409][ T29] audit: type=1326 audit(1764216280.791:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f848950df90 code=0x7ffc0000 [ 55.753802][ T29] audit: type=1326 audit(1764216280.791:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f848950f34b code=0x7ffc0000 [ 55.777189][ T29] audit: type=1326 audit(1764216280.791:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f848950e3aa code=0x7ffc0000 [ 55.800525][ T29] audit: type=1326 audit(1764216280.791:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848950f749 code=0x7ffc0000 [ 55.823907][ T29] audit: type=1326 audit(1764216280.791:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848950f749 code=0x7ffc0000 [ 55.847352][ T29] audit: type=1326 audit(1764216280.791:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f848950f749 code=0x7ffc0000 [ 55.882372][ T4260] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 55.889472][ T4254] vhci_hcd: connection closed [ 55.889747][ T12] vhci_hcd: stop threads [ 55.898721][ T12] vhci_hcd: release socket [ 55.903205][ T12] vhci_hcd: disconnect device [ 55.939372][ T1036] vhci_hcd: vhci_device speed not set [ 56.030350][ T4267] loop2: detected capacity change from 0 to 512 [ 56.103174][ T4267] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.129696][ T4267] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.136545][ T4270] loop0: detected capacity change from 0 to 512 [ 56.171362][ T4270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.189360][ T4270] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.241224][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.294989][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.327121][ T4281] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 56.342946][ T4281] loop0: detected capacity change from 0 to 512 [ 56.359486][ T4281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=4281 comm=syz.0.222 [ 56.387256][ T4281] loop0: detected capacity change from 0 to 1024 [ 56.411949][ T4281] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e042c118, mo2=0002] [ 56.420302][ T4281] System zones: 0-1, 3-36 [ 56.425164][ T4281] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.525535][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.557627][ T4292] __nla_validate_parse: 6 callbacks suppressed [ 56.557645][ T4292] netlink: 32 bytes leftover after parsing attributes in process `syz.0.227'. [ 56.606093][ T4292] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 56.696022][ T3482] IPVS: starting estimator thread 0... [ 56.702490][ T4290] IPVS: sh: FWM 3 0x00000003 - no destination available [ 56.710310][ T4290] IPVS: sh: FWM 3 0x00000003 - no destination available [ 56.722286][ T4295] dummy0: entered allmulticast mode [ 56.727838][ T4295] dummy0: left allmulticast mode [ 56.800959][ T4296] IPVS: using max 2400 ests per chain, 120000 per kthread [ 56.852944][ T12] IPVS: stop unused estimator thread 0... [ 56.886713][ T4310] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 56.893283][ T4310] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 56.900765][ T4310] vhci_hcd vhci_hcd.0: Device attached [ 56.906486][ T4308] loop1: detected capacity change from 0 to 512 [ 56.914394][ T4312] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 56.920938][ T4312] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 56.928534][ T4312] vhci_hcd vhci_hcd.0: Device attached [ 56.936723][ T4315] vhci_hcd: connection closed [ 56.937254][ T12] vhci_hcd: stop threads [ 56.941461][ T4313] vhci_hcd: connection closed [ 56.941994][ T12] vhci_hcd: release socket [ 56.942003][ T12] vhci_hcd: disconnect device [ 56.944111][ T4308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.946802][ T12] vhci_hcd: stop threads [ 56.951271][ T4308] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.955485][ T12] vhci_hcd: release socket [ 56.991778][ T12] vhci_hcd: disconnect device [ 57.002948][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.059256][ T4325] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.237'. [ 57.205420][ T4335] netlink: 32 bytes leftover after parsing attributes in process `syz.4.242'. [ 57.217124][ T4335] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 57.545193][ T4355] tipc: Enabling not permitted [ 57.550765][ T4355] tipc: Enabling of bearer rejected, failed to enable media [ 57.729497][ T4359] netlink: 152 bytes leftover after parsing attributes in process `syz.5.249'. [ 57.765611][ T4361] loop0: detected capacity change from 0 to 8192 [ 57.780191][ T4361] vfat: Unknown parameter 'ÿ0xffffffffffffffffÿ' [ 57.864055][ T4361] loop0: detected capacity change from 0 to 512 [ 57.987367][ T4366] loop0: detected capacity change from 0 to 1024 [ 58.035148][ T4366] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 58.046339][ T4366] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 58.089858][ T4366] JBD2: no valid journal superblock found [ 58.095670][ T4366] EXT4-fs (loop0): Could not load journal inode [ 58.160822][ T4366] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 58.283938][ T4376] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 58.290507][ T4376] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 58.298034][ T4376] vhci_hcd vhci_hcd.0: Device attached [ 58.336536][ T4378] vhci_hcd: connection closed [ 58.336889][ T12] vhci_hcd: stop threads [ 58.345934][ T12] vhci_hcd: release socket [ 58.350478][ T12] vhci_hcd: disconnect device [ 58.389116][ T4389] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.262'. [ 58.399014][ T4382] loop4: detected capacity change from 0 to 8192 [ 58.406286][ T4382] vfat: Unknown parameter 'ÿ0xffffffffffffffffÿ' [ 58.455293][ T4393] netlink: 220 bytes leftover after parsing attributes in process `syz.0.264'. [ 58.545783][ T4382] loop4: detected capacity change from 0 to 512 [ 58.663496][ T4396] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.265'. [ 58.878492][ T4391] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 58.886807][ T4391] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 58.916071][ T4407] loop4: detected capacity change from 0 to 512 [ 58.941905][ T4407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.961661][ T4407] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.018903][ T4415] loop5: detected capacity change from 0 to 1024 [ 59.041093][ T4415] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 59.052143][ T4415] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 59.114254][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.133207][ T4420] netlink: 220 bytes leftover after parsing attributes in process `syz.2.273'. [ 59.154077][ T4415] JBD2: no valid journal superblock found [ 59.159952][ T4415] EXT4-fs (loop5): Could not load journal inode [ 59.237328][ T4415] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 59.278690][ T4418] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 59.287156][ T4418] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 59.376964][ T4432] loop2: detected capacity change from 0 to 512 [ 59.401034][ T4434] loop4: detected capacity change from 0 to 512 [ 59.432155][ T4432] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 59.454324][ T4434] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 59.462860][ T3596] ================================================================== [ 59.470975][ T3596] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 59.477683][ T3596] [ 59.480012][ T3596] write to 0xffff888107340f10 of 8 bytes by task 3004 on cpu 1: [ 59.487652][ T3596] __dentry_kill+0x142/0x4b0 [ 59.492269][ T3596] dput+0x5e/0xd0 [ 59.495919][ T3596] step_into+0x58c/0x7f0 [ 59.500178][ T3596] walk_component+0x162/0x220 [ 59.504876][ T3596] path_lookupat+0xfe/0x2a0 [ 59.509419][ T3596] filename_lookup+0x2d7/0x340 [ 59.514209][ T3596] do_readlinkat+0x7d/0x320 [ 59.518728][ T3596] __x64_sys_readlink+0x47/0x60 [ 59.523596][ T3596] x64_sys_call+0x28de/0x3000 [ 59.528288][ T3596] do_syscall_64+0xd2/0x200 [ 59.532886][ T3596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.538788][ T3596] [ 59.541112][ T3596] read to 0xffff888107340f10 of 8 bytes by task 3596 on cpu 0: [ 59.548658][ T3596] fast_dput+0x5f/0x2c0 [ 59.552831][ T3596] dput+0x24/0xd0 [ 59.556569][ T3596] do_unlinkat+0x259/0x480 [ 59.560997][ T3596] __x64_sys_unlink+0x2e/0x40 [ 59.565682][ T3596] x64_sys_call+0x2dcf/0x3000 [ 59.570464][ T3596] do_syscall_64+0xd2/0x200 [ 59.574980][ T3596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.580883][ T3596] [ 59.583216][ T3596] value changed: 0xffff8882377bf078 -> 0x0000000000000000 [ 59.590320][ T3596] [ 59.592650][ T3596] Reported by Kernel Concurrency Sanitizer on: [ 59.598801][ T3596] CPU: 0 UID: 0 PID: 3596 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.608091][ T3596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 59.618151][ T3596] ================================================================== [ 59.631346][ T4434] EXT4-fs (loop4): orphan cleanup on readonly fs [ 59.637917][ T4432] EXT4-fs (loop2): orphan cleanup on readonly fs [ 59.653880][ T4434] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.279: corrupted inode contents [ 59.666932][ T4432] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.278: corrupted inode contents [ 59.681750][ T4434] EXT4-fs (loop4): Remounting filesystem read-only [ 59.683691][ T4432] EXT4-fs (loop2): Remounting filesystem read-only [ 59.688617][ T4434] EXT4-fs (loop4): 1 truncate cleaned up [ 59.695358][ T4432] EXT4-fs (loop2): 1 truncate cleaned up [ 59.700760][ T52] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 59.716909][ T52] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 59.727835][ T52] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 59.738679][ T52] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 59.749354][ T52] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 59.761102][ T52] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 59.771945][ T4434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.771988][ T4432] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.820970][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.877266][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.