last executing test programs: 17.579373465s ago: executing program 0 (id=167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0, 0x804, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r2, 0x400, 0x1) fremovexattr(r2, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 17.351140327s ago: executing program 0 (id=170): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00034006", 0x39}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='clear_refs\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 16.979433315s ago: executing program 0 (id=174): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00034006", 0x39}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1}, &(0x7f00000005c0), &(0x7f0000000600)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) read(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000180), r3) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01042abd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="04000280"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r6, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000300)='dd\f\x03\xba\x7f\x98\xffqry*G;\xc7,\xcf\x7f\x81\n\x1dm\x9c\xdeE:cb2e\x18,\x16\x17^\xfe\xc6,\tq\x88\x861{(6\x00\x95\x88\x1c|\xd9!\xc2|\xbc<~\x02\x99\xc2\xaf\x99{\x1e\x96`k\x7f\xe1\x9b\x8b\xa9.\f\x14z\x8a\xd9e\xd3H9K\x0eF\xff\xdb%\xfd\x1d\x84\xce\x12\x9dz\x18fF\x1f\'U\xbb|\xeb2\xda\xac\x91\xeb\xd9\x9a\x11\x12\xc3\xec\xbb_\xe8\x16\xe9\xb5\x00\xa6\x98\xbbY_\xcb\xac\xae\xb6\xa9\x87\"$MQ#\xbb\xe3\x1b\xf0\x9b\xef\x01\x10\xb4\xa2\xd0wf\xf8+n\x17]\x03E\x83\xc3Y\x88\xbe\x9a\t]\xca\xf9:w7\nY\xa3\x8as\x9f\xd2W_{\xed\xcf-\xff\xd7d,\xd1\x1fU\xc3\x0f\x9c\xda\b#\xb2]\xb7\xe5\x97\xf2 \xb3\xc7r~!\xa4\xabs:\xffU\tj`\xca[\x8a\x8f\t*\xf1\xdeD\xb8p\xf4\xf0\xa7\x9c\xbd?)\xd2\f\x8d\xb26\v%\xb8\xc2\xacp\xe6x7\xd6\x17\xa4$I\xc4\xfcwIHQ\xe0\xa3<=\x94\x91\xd5b\x01bT\x06\xa7\x16\xd3\xd3\xcb\\\x15\xdc\xd34\r\xa8\x11\xc42h\x1fA|\xe1\x80\xe6]\xca\x87\x93\xab\xe4\xcd\xebe\xe0\xb2Y\x16\x12\\\xe2\xa2\xd2\xdd\xfd\tGu\xbasA\x9c\xc7\x14@\xec\xe1sB\x88\xaeZ9\xc1\xfb\x1bH\xc0\x16\xc2#\xc5:\x87\xf3Z2z;W/\xcc9\xd1\xe4V\xb1') 16.898057703s ago: executing program 0 (id=178): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0900000008000000dd000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000f48604dcb55c2557a151e8bdf1f23a3cef1f9704137d0d41ad048da895bd8c394f4aa4d25dd8bed5d8f8470403ddce16c6af5166fd1352189264befee8f5d9c0f81ccd9f6faa9d2d75294d6c3e6f302ee5332db419c38f1a3e750b41e569af3a61bd27fd517d3f255ac492189f0e4b0edd4b44f385d4114879f05dbe68739781fa422968df"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1b459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x183, 0x800000006}, 0xe0e5, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r5) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001b80)=ANY=[@ANYBLOB="28120000", @ANYRES16=r6, @ANYBLOB="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"], 0x1228}}, 0x804) close(0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x3, 0x9, 0x2, 0x2000, r4, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000640)="382c27d5f7aed172cb0a40dba5d95c3abc0ae41666b695a087a2f242f16f2cd49bfa0e770b0344680a130b7b77a108edba7767ac8384f2583bf44cf318368bcc9a897fffb5ba6d130981594d7c635ccc", &(0x7f0000000500)=""/14, 0x2}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x100, 0x61, 0x11, 0x9c, 0x3}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r8 = gettid() r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r9, r8, 0xde6c8001d5ed5ea6, 0xffffffffffffffff, 0xffffffffffffffff) r10 = getpgid(r8) sched_getparam(r10, &(0x7f0000000540)) r11 = epoll_create(0x3ff) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r12, &(0x7f0000000240)={0xa0000000, 0x1b54c8}) 16.635840039s ago: executing program 0 (id=184): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00034006", 0x39}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='clear_refs\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 16.02388597s ago: executing program 0 (id=195): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) (fail_nth: 8) 15.883925045s ago: executing program 32 (id=195): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) (fail_nth: 8) 3.931916295s ago: executing program 2 (id=372): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x4d6, &(0x7f00000006c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\x00', @ANYRESDEC=0x0, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000000)="b97a3ecf54bb9d2e5fd5f6e7bac6a74ada20d289801d873de29d85753b8e903b1361971388da351cb630e2409a17cfb7fde3d276", &(0x7f00000001c0)=@buf="7124391e12fa9664ff4d4df6c021400e65c6fb15b4ac8b", 0x1}, 0x20) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001500)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) setpgid(0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x3fe00}], 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 3.613451697s ago: executing program 2 (id=376): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") 3.204480958s ago: executing program 2 (id=380): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018", @ANYRESDEC], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x34, r3, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000040)=r1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xa, 0x4, 0x4, 0xa, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f00000004c0), 0x8, r5}, 0x38) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)={0x28, r7, 0x301, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x4}}}}}, 0x28}}, 0x20000004) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, r7, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48014) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) close(r4) 2.247092224s ago: executing program 2 (id=408): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='clear_refs\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1}, &(0x7f00000005c0), &(0x7f0000000600)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) read(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000180), r3) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01042abd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="04000280"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r6, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000300)='dd\f\x03\xba\x7f\x98\xffqry*G;\xc7,\xcf\x7f\x81\n\x1dm\x9c\xdeE:cb2e\x18,\x16\x17^\xfe\xc6,\tq\x88\x861{(6\x00\x95\x88\x1c|\xd9!\xc2|\xbc<~\x02\x99\xc2\xaf\x99{\x1e\x96`k\x7f\xe1\x9b\x8b\xa9.\f\x14z\x8a\xd9e\xd3H9K\x0eF\xff\xdb%\xfd\x1d\x84\xce\x12\x9dz\x18fF\x1f\'U\xbb|\xeb2\xda\xac\x91\xeb\xd9\x9a\x11\x12\xc3\xec\xbb_\xe8\x16\xe9\xb5\x00\xa6\x98\xbbY_\xcb\xac\xae\xb6\xa9\x87\"$MQ#\xbb\xe3\x1b\xf0\x9b\xef\x01\x10\xb4\xa2\xd0wf\xf8+n\x17]\x03E\x83\xc3Y\x88\xbe\x9a\t]\xca\xf9:w7\nY\xa3\x8as\x9f\xd2W_{\xed\xcf-\xff\xd7d,\xd1\x1fU\xc3\x0f\x9c\xda\b#\xb2]\xb7\xe5\x97\xf2 \xb3\xc7r~!\xa4\xabs:\xffU\tj`\xca[\x8a\x8f\t*\xf1\xdeD\xb8p\xf4\xf0\xa7\x9c\xbd?)\xd2\f\x8d\xb26\v%\xb8\xc2\xacp\xe6x7\xd6\x17\xa4$I\xc4\xfcwIHQ\xe0\xa3<=\x94\x91\xd5b\x01bT\x06\xa7\x16\xd3\xd3\xcb\\\x15\xdc\xd34\r\xa8\x11\xc42h\x1fA|\xe1\x80\xe6]\xca\x87\x93\xab\xe4\xcd\xebe\xe0\xb2Y\x16\x12\\\xe2\xa2\xd2\xdd\xfd\tGu\xbasA\x9c\xc7\x14@\xec\xe1sB\x88\xaeZ9\xc1\xfb\x1bH\xc0\x16\xc2#\xc5:\x87\xf3Z2z;W/\xcc9\xd1\xe4V\xb1') 2.178697781s ago: executing program 2 (id=410): bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES16=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp']) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000001480)=""/65, 0x41}], 0x2}, 0x2}], 0x1, 0x10000, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fbdbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000004e22000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@empty, @in6=@loopback, 0xfffd, 0x1, 0x0, 0x0, 0xa}, {0x2, 0x6, 0x6, 0x0, 0x7, 0x4, 0x1}, {0x4000000005c, 0x7, 0xfffffffffffffff9, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d6, 0x32}, 0xa, @in6=@mcast2, 0xffffffde, 0x0, 0x2, 0x7f, 0x7}}, 0xe8) sendmmsg$inet6(r5, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x40040d4) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r6, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r7, 0x89f9, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@empty, @local, 0x1a, 0x6}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r8, 0x0, &(0x7f0000000b00)=""/151}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.69018135s ago: executing program 4 (id=431): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) tee(r5, 0xffffffffffffffff, 0x4e, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x10, 0x3, 0x0) connect$netlink(r7, &(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdffc}, 0xc) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.211140758s ago: executing program 2 (id=438): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mkdir(0x0, 0xfffffffffffffffe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x1, 0x644, &(0x7f00000006c0)="$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") syslog(0x3, &(0x7f0000000080)=""/41, 0x29) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xc5) open_tree(0xffffffffffffff9c, 0x0, 0x89901) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@sysvgroups}]}, 0x1, 0x437, &(0x7f0000000900)="$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") bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 1.081175161s ago: executing program 5 (id=440): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) io_destroy(0x0) 1.064202653s ago: executing program 3 (id=441): socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 1.044158325s ago: executing program 1 (id=442): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05629b0080a109c963dcdb101314f4ff03003c1e42d6d58d21dd000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) prctl$PR_MCE_KILL(0x23, 0xa, 0x7fffffffeffe) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r4 = socket$caif_stream(0x25, 0x1, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6}, {0x1000}, {0x1}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {0x0, 0x0, 0x20000000}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x7}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x1000000}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x10000000}, {0x0, 0x1, 0x0, 0x0, 0x2, 0x2}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0xc000000}, {}, {0x0, 0x80000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x23}, {0x0, 0x0, 0x0, 0x404}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x0, 0x0, 0x9f, 0x0, 0x0, 0x1}, {0x20000, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x401}, {}, {0x0, 0x78}, {0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x2}], [{0x2}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}]}}]}, {0xfffffffffffffc72}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004640)=[{{&(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {{&(0x7f0000003a80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000003b00)="1eccf6acf51ce3f5059f6a100437c8698454b978d6d49e68ce6a894b75fea009038992f1b9c6b41dddfcfeac38a9c4ae6eeb556dd443c01341d2daa8aa96cbd106125248ffc55e6b9e1e9d47afb5844df9d311857ae42fdea74455e2be4dcddc2ae21ee3781364be669b977bad952ef6e9b35bdc3248e45834903c5dcb7d6f374efc", 0x82}, {&(0x7f0000003bc0)="49df1aa6bf043b3f6d7a600956af9c3cef9deb7996382895432205749842846110770733c425108089ee8b1350cda7425ecd403c4f971aa0e421913ab2bbbdd8e0e9550e98f773ca9f2fdc865df02384cd3bd200c7b482c96687ef6f6bccd3da27505661055d253f261527f1d13b030580f3dc6228790193ee4b4fbeb7c596b1aa2ceb4ee0bacd63e4d0b7ee485aba04f467fe9c676eb90bfa02458ce025eafead2fabeebc6d6418c66068", 0xab}, {&(0x7f0000003c80)="ad8c6e7b970cefe461a27305f0100d6c56199798936383e81babb568b521f39d40e356e432b8e55a711ccb6b9b0bbb558a30cae3c187f8cc03b7293e20520b369f997cd4a7200d3bc70f4c471f21e228d82f9661034644cf03513b597ab443412757b3600c26c014489c6f0b18d1e30d094ab5fd96115fac5c29fd1ad5fcf56e5afc833f670c0d5048396d25b87bf64fd00e48ab5e104ea02ccd953fd26619a8b8bbdc4a2cad51dc688df4d5c4d53e691a4581ff913d7de89a8dadfbd04b8a0daadef3665a934ca0", 0xc8}, {&(0x7f0000000c40)="095bc6829f02c7e246a3046af626cf18df99493df6be3bfa9390f1821bb5f319086910e4515c0bdcff31181f05a7c3c2e06213cb0a", 0x35}, {0x0}, {&(0x7f0000003dc0)="30cf70bdd46e249dad0e51e4e8c1be86a405ac7cd8ad0ca7790be3598f167afbb6e55eda1d4e32742a289e8d010022e38b7eb9d588524ec5c8bc0b879208517ca2d3", 0x42}, {&(0x7f0000000140)="35fa2be9b694bff1c5c7ee4576ec3c45f0c6851cae736332a9db59f158f4048858d1a1a2e1dc74f7496b1bc5a9a574b474060a1aee63521d1589df9948f5482816b6e5a859c75c17c3cb2abd88335663000000000000000000", 0x59}], 0x7, 0x0, 0x0, 0x804}}, {{&(0x7f0000003f40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004140)=[{&(0x7f00000000c0)="0d823f77e3b138553bfbdec1c5fff465f639607a8c77cc9457a605e41c7a0878d4dcb72c845c326136754544ced8ead1344ece0fc55f0d83fea2b18a51aed015ece6e918", 0x44}, {&(0x7f0000004040)="ae528d0c38de4bfae46c16c1be56dbfc2905a0879fe655b8accc30c56a21432cad6f0ba64996d025dc00ce264cb2d630393b95d43ac7c6747d89d45506795ff19b055e5c585964ca2e5c9eca44bf362065830afe3634218baa45eb06ab13f0b94bedabeebf9e000457f1507af74f0070fb5cfeac92833079460fbef76a1d7788fc8233107a680dc8c757dc4c36a17bf2", 0x90}, {&(0x7f0000004100)="0d990965ee85d72e16e1b8c8cb2e69200e8027539a9202bfb7663d51360390732fd3481341b0fa73a0ae645c423b5c534dc08f0f48a4dc28ab5605d15b", 0x3d}], 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1c0000000000000001000000", @ANYRES64, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c010000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001eaff00511342ca02000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000010000000000ffffffffffffff0000000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x110, 0x811}}], 0x3, 0x40001) setgroups(0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)=0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x4492, &(0x7f0000000380)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@fscache}, {@debug={'debug', 0x3d, 0x401}}, {@dfltuid}, {@dfltgid}, {@version_u}, {@cache_loose}, {@msize={'msize', 0x3d, 0x9}}, {@access_user}], [{@hash}, {@smackfshat}, {@subj_role={'subj_role', 0x3d, 'ethtool\x00'}}, {@appraise_type}, {@smackfshat={'smackfshat', 0x3d, 'devlink\x00'}}, {@dont_appraise}, {@euid_eq={'euid', 0x3d, r6}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'GPL\x00'}}]}}) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r9) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000001c00028018000380100001800800010009000000040003"], 0x48}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r10, 0x408c5333, &(0x7f0000000580)={0x234b, 0xa2, 0x0, 'queue1\x00'}) r11 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) getsockopt$sock_int(r11, 0x1, 0x22, &(0x7f0000000040), &(0x7f0000000180)=0x4) socket(0x10, 0x3, 0x9) 994.20656ms ago: executing program 5 (id=443): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a118", 0x1d}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='clear_refs\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1}, &(0x7f00000005c0), &(0x7f0000000600)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) read(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000180), r3) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01042abd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="04000280"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r6, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000300)='dd\f\x03\xba\x7f\x98\xffqry*G;\xc7,\xcf\x7f\x81\n\x1dm\x9c\xdeE:cb2e\x18,\x16\x17^\xfe\xc6,\tq\x88\x861{(6\x00\x95\x88\x1c|\xd9!\xc2|\xbc<~\x02\x99\xc2\xaf\x99{\x1e\x96`k\x7f\xe1\x9b\x8b\xa9.\f\x14z\x8a\xd9e\xd3H9K\x0eF\xff\xdb%\xfd\x1d\x84\xce\x12\x9dz\x18fF\x1f\'U\xbb|\xeb2\xda\xac\x91\xeb\xd9\x9a\x11\x12\xc3\xec\xbb_\xe8\x16\xe9\xb5\x00\xa6\x98\xbbY_\xcb\xac\xae\xb6\xa9\x87\"$MQ#\xbb\xe3\x1b\xf0\x9b\xef\x01\x10\xb4\xa2\xd0wf\xf8+n\x17]\x03E\x83\xc3Y\x88\xbe\x9a\t]\xca\xf9:w7\nY\xa3\x8as\x9f\xd2W_{\xed\xcf-\xff\xd7d,\xd1\x1fU\xc3\x0f\x9c\xda\b#\xb2]\xb7\xe5\x97\xf2 \xb3\xc7r~!\xa4\xabs:\xffU\tj`\xca[\x8a\x8f\t*\xf1\xdeD\xb8p\xf4\xf0\xa7\x9c\xbd?)\xd2\f\x8d\xb26\v%\xb8\xc2\xacp\xe6x7\xd6\x17\xa4$I\xc4\xfcwIHQ\xe0\xa3<=\x94\x91\xd5b\x01bT\x06\xa7\x16\xd3\xd3\xcb\\\x15\xdc\xd34\r\xa8\x11\xc42h\x1fA|\xe1\x80\xe6]\xca\x87\x93\xab\xe4\xcd\xebe\xe0\xb2Y\x16\x12\\\xe2\xa2\xd2\xdd\xfd\tGu\xbasA\x9c\xc7\x14@\xec\xe1sB\x88\xaeZ9\xc1\xfb\x1bH\xc0\x16\xc2#\xc5:\x87\xf3Z2z;W/\xcc9\xd1\xe4V\xb1') 981.193861ms ago: executing program 3 (id=444): socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x14445, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@data_journal}, {@data_journal}, {@usrjquota}, {@init_itable_val={'init_itable', 0x3d, 0x22}}]}, 0x3, 0x43b, &(0x7f0000000200)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001b00)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000900)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES32, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000009300), 0x200, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000009340)={0x7, 0x4eb, 0x52, 0x3ff, 0x16, "d685ec9f8bbaebd2"}) r3 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0xf0) pwritev2(r3, 0x0, 0x0, 0x5412, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40000, 0x0) 943.665685ms ago: executing program 5 (id=445): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) getegid() 910.800228ms ago: executing program 1 (id=446): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="a77e", 0x2}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) 910.020878ms ago: executing program 3 (id=447): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) acct(0xfffffffffffffffc) (fail_nth: 3) 892.17183ms ago: executing program 5 (id=448): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) statx(0xffffffffffffff9c, &(0x7f0000001900)='./file0\x00', 0x1000, 0x20, &(0x7f0000001940)) 885.483941ms ago: executing program 1 (id=449): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c000000240001002dbd7000fddbdf25040000000600040000000000060004000000000006000300000000000600040086"], 0x3c}}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r6, 0x0, 0xb}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x32, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b2"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', r7, 0x0, 0x7}, 0x18) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000dc0)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r4, 0x8, 0x1, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000014c0)=ANY=[], 0x20) r11 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) r12 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r6, 0xffffffffffffffff, 0x1b, 0x0, @void}, 0x10) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r13, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNDETACHFILTER(r13, 0x401054d6, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@fallback=r11, r5, 0x12, 0x200c, 0x0, @value=r12, @void, @void, @void, r10}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@fallback=r3, r3, 0x21, 0x2021, r3, @void, @void, @value=0xffffffffffffffff, @void, r10}, 0x20) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) 839.896935ms ago: executing program 3 (id=450): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a118", 0x1d}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1}, &(0x7f00000005c0), &(0x7f0000000600)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 820.097267ms ago: executing program 4 (id=451): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x4d6, &(0x7f00000006c0)="$eJzs3U1vG1sZAODXk6RJc3NvUqjEh4CWUiioqp24bVR1VTYgVFVCVKxYtCFxoyh2HMVOaUIX6X9AohIr+AnsWCB1xZ4d7NiUBVKBCNQgsTCasd2GJM5XE7utn0eazJwZ2+97Ys+cmZOJTwB962JEbETEmYh4GBHjrfW51hR3mlP6uNebT2e3Np/O5qLRuP+PXLY9XRfbnpP6pPWaIxHxo+9H/DS3O25tbX1xplwurbTKhXpluVBbW7+2UJmZL82XlorF6anpyVvXbxZPrK4XKr999b2Fuz/+/e+++vKPG9/5eZrWWGvb9nqcpGbVh97ESQ1GxN3TCNYDA636nOl1IhxLEhGfi4hL6f7f6HU2AEA3NBrj0RjfXgYAPnZJ1geWS/KtvoCx7GfT+RhNytVa/eqj6urSXLOvbCKGkkcL5dJkq69wIoZyaXkqW35bLu4oX4+IcxHxi+GzWTk/Wy3P9eaUBwD63ic72v9/DydJPt/rrACAUzdyzOftcV8PAPCBOEL7f/Y08wAAuue41/8AwIdL+w8A/Uf7DwD9R/sPAP2n3f4PuKEfAPrBD+/dS6fG1mZk338993htdbH6+NpcqbaYr6zO5merK8v5+Wp1PvvOnspBr1euVpenbsTqk0K9VKsXamvrDyrV1aX6g+x7vR+UhrpSKwBgP+cuvPhzetW/cftsNsW2sRy01fBxS3qdANAzAzvmQP8Y7HUCQM+4xgcOuvOn4y3Cz08+F6A7rnxJ/z/0K/3/0L/0+0P/Onb/v4sD+OA1GrmjjPk/cJQHAwDvJ6fxgL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNGNZVMuybfGAh+LJMnnIz6NiIkYyj1aKJcmI+KziPjT8NBwWp7qddIAwDtK/pZrjf91Zfzy2M6tZ3L/Gc7mEfGzX93/5ZOZen1lKl3/z5H2+vrz1vpiL/IHAA7Sbqfb7Xjb682ns+2pm/m8+m5zcNE07lZram4ZjMFsPhJDETH6r1yr3JSerwycQPyNZxHxxb3qn8v6RiZaI5/ujJ/G/vQU44/sip/8X/wk29acp7+Lz59ALtBvXqTHnzt77f9JXMzme+//I9kR6t21j39bu45/yZvj30CH49/Fw8a48YcfdNz2LOLLg3vFz72Jn+sQ//Ih4//lK1+71Glb49cRV2Lv+NtjFeqV5UJtbf3aQmVmvjRfWioWp6emJ29dv1ksZH3UhXZP9W5/v331s/3qP9oh/sgB9f/mIev/m/8+/MnX94n/7W/s/f6f3yd+2iZ+65DxZ0Y7j+6dxp/rUP/93v+03bl6yPgv/7o+d8iHAgBdUFtbX5wpl0srFrq2kJ67vQdp9Hqhjz9+6SfgJF7nC6eYaq+PTMBpe7vT9zoTAAAAAAAAAAAAAACgk278w1Ov6wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDH638BAAD//21/0Xw=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\x00', @ANYRESDEC=0x0, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000000)="b97a3ecf54bb9d2e5fd5f6e7bac6a74ada20d289801d873de29d85753b8e903b1361971388da351cb630e2409a17cfb7fde3d276", &(0x7f00000001c0)=@buf="7124391e12fa9664ff4d4df6c021400e65c6fb15b4ac8b", 0x1}, 0x20) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001500)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) setpgid(0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x3fe00}], 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 804.093109ms ago: executing program 5 (id=452): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") 715.190188ms ago: executing program 4 (id=453): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) io_destroy(0x0) 672.962832ms ago: executing program 1 (id=454): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000080), 0x2000011a) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r1) 672.201332ms ago: executing program 5 (id=455): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000040), 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) r8 = socket(0x10, 0x3, 0x0) connect$netlink(r8, &(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdffc}, 0xc) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) 655.615184ms ago: executing program 3 (id=456): socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 533.593326ms ago: executing program 3 (id=457): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcfffffa, 0x4031, 0xffffffffffffffff, 0x41d1000) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0xe643}, 0x1, 0x3, 0xfffffffc, 0x0, 0x8, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x210, 0x940c, 0x3002, 0x210, 0x2c0, 0x300, 0x3d8, 0x3d8, 0x300, 0x3d8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, @private2, [0xff000000, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff000000, 0xffffffff, 0xff], 'veth1_to_team\x00', 'macsec0\x00', {}, {}, 0x62, 0x61, 0x0, 0x8}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x1ffffc, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@unspec=@addrtype1={{0x28}, {0x2, 0x140, 0xc}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x916, {0x7c7a1f6d}}}}, {{@ipv6={@mcast1, @remote, [0xff000000, 0x0, 0xffffffff, 0xffffffff], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 'syzkaller0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x9, 0x4, 0x10}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e000000ff000000040000000200000000060000f5559de9bc6ff8393b4aacd2abd82d4d1cb4", @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000200"/28], 0x50) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003140100c68f7bec9aff068609000200737962320000000008004100736977001400330062726964676530"], 0x38}, 0x1, 0x0, 0x0, 0x44805}, 0x50) bind$tipc(r9, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x3}}, 0x10) setregid(0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$BTRFS_IOC_SYNC(r7, 0x9408, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x5, 0x0, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, r0, 0x3) 533.071966ms ago: executing program 4 (id=458): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) getegid() 491.34373ms ago: executing program 4 (id=459): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) 28.418576ms ago: executing program 1 (id=460): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 273.56µs ago: executing program 4 (id=461): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 0s ago: executing program 1 (id=462): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) tee(r5, 0xffffffffffffffff, 0x4e, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x10, 0x3, 0x0) connect$netlink(r7, &(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdffc}, 0xc) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.118' (ED25519) to the list of known hosts. [ 35.540638][ T29] audit: type=1400 audit(1763178502.254:62): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 35.570122][ T29] audit: type=1400 audit(1763178502.284:63): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.572011][ T3304] cgroup: Unknown subsys name 'net' [ 35.602963][ T29] audit: type=1400 audit(1763178502.314:64): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.735681][ T3304] cgroup: Unknown subsys name 'cpuset' [ 35.743120][ T3304] cgroup: Unknown subsys name 'rlimit' [ 35.894818][ T29] audit: type=1400 audit(1763178502.604:65): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.924542][ T29] audit: type=1400 audit(1763178502.614:66): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.947365][ T29] audit: type=1400 audit(1763178502.614:67): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.956844][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 35.972529][ T29] audit: type=1400 audit(1763178502.614:68): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.005329][ T29] audit: type=1400 audit(1763178502.614:69): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 36.024570][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.035120][ T29] audit: type=1400 audit(1763178502.624:70): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 36.072004][ T29] audit: type=1400 audit(1763178502.704:71): avc: denied { relabelto } for pid=3306 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 37.353241][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 37.381487][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 37.519405][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.528060][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.536534][ T3313] bridge_slave_0: entered allmulticast mode [ 37.544742][ T3313] bridge_slave_0: entered promiscuous mode [ 37.572439][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.580736][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.591244][ T3313] bridge_slave_1: entered allmulticast mode [ 37.598556][ T3313] bridge_slave_1: entered promiscuous mode [ 37.621474][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.629328][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.637132][ T3314] bridge_slave_0: entered allmulticast mode [ 37.644442][ T3314] bridge_slave_0: entered promiscuous mode [ 37.652182][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 37.669075][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.687293][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.696142][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.704762][ T3314] bridge_slave_1: entered allmulticast mode [ 37.712588][ T3314] bridge_slave_1: entered promiscuous mode [ 37.720175][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 37.731724][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.774446][ T3328] chnl_net:caif_netlink_parms(): no params data found [ 37.794610][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.812817][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.823391][ T3313] team0: Port device team_slave_0 added [ 37.833583][ T3313] team0: Port device team_slave_1 added [ 37.886869][ T3314] team0: Port device team_slave_0 added [ 37.911009][ T3314] team0: Port device team_slave_1 added [ 37.919852][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.928175][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.957271][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.970088][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.978043][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.986396][ T3320] bridge_slave_0: entered allmulticast mode [ 37.993868][ T3320] bridge_slave_0: entered promiscuous mode [ 38.012593][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.020531][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.051630][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.065903][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.073664][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.082321][ T3320] bridge_slave_1: entered allmulticast mode [ 38.090402][ T3320] bridge_slave_1: entered promiscuous mode [ 38.121850][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.130102][ T3328] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.137911][ T3328] bridge_slave_0: entered allmulticast mode [ 38.145452][ T3328] bridge_slave_0: entered promiscuous mode [ 38.167598][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.175017][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.203980][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.218472][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.226467][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.258725][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.271125][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.279872][ T3328] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.288310][ T3328] bridge_slave_1: entered allmulticast mode [ 38.295894][ T3328] bridge_slave_1: entered promiscuous mode [ 38.308672][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.316456][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.323873][ T3317] bridge_slave_0: entered allmulticast mode [ 38.331973][ T3317] bridge_slave_0: entered promiscuous mode [ 38.356739][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.374512][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.383150][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.392380][ T3317] bridge_slave_1: entered allmulticast mode [ 38.401173][ T3317] bridge_slave_1: entered promiscuous mode [ 38.418835][ T3313] hsr_slave_0: entered promiscuous mode [ 38.427849][ T3313] hsr_slave_1: entered promiscuous mode [ 38.449755][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.462066][ T3328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.497050][ T3314] hsr_slave_0: entered promiscuous mode [ 38.504973][ T3314] hsr_slave_1: entered promiscuous mode [ 38.511935][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 38.518244][ T3314] Cannot create hsr debugfs directory [ 38.532148][ T3328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.566188][ T3320] team0: Port device team_slave_0 added [ 38.581744][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.593985][ T3328] team0: Port device team_slave_0 added [ 38.610236][ T3320] team0: Port device team_slave_1 added [ 38.624525][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.646760][ T3328] team0: Port device team_slave_1 added [ 38.669693][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.678987][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.709509][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.741533][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.748839][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.780358][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.800604][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.808048][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.837460][ T3328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.850817][ T3317] team0: Port device team_slave_0 added [ 38.861050][ T3317] team0: Port device team_slave_1 added [ 38.872864][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.881116][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.910114][ T3328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.932299][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.940168][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.968708][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.004159][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.011905][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.039640][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.066741][ T3320] hsr_slave_0: entered promiscuous mode [ 39.073716][ T3320] hsr_slave_1: entered promiscuous mode [ 39.080228][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 39.086335][ T3320] Cannot create hsr debugfs directory [ 39.130312][ T3328] hsr_slave_0: entered promiscuous mode [ 39.136808][ T3328] hsr_slave_1: entered promiscuous mode [ 39.143222][ T3328] debugfs: 'hsr0' already exists in 'hsr' [ 39.149320][ T3328] Cannot create hsr debugfs directory [ 39.169881][ T3317] hsr_slave_0: entered promiscuous mode [ 39.176825][ T3317] hsr_slave_1: entered promiscuous mode [ 39.183331][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 39.189252][ T3317] Cannot create hsr debugfs directory [ 39.268328][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.280382][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.310889][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.323664][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.400724][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.414614][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.430168][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.442369][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.496566][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.506788][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.519723][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.534547][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.584700][ T3320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.608222][ T3320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.618621][ T3320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.632516][ T3320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.643713][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.661094][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.678696][ T3328] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.689673][ T3328] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.707603][ T3328] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.718615][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.728504][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.738469][ T3328] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.771953][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.779718][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.790358][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.798604][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.816474][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.824884][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.842287][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.850548][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.904018][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.941987][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.956124][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.964191][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.990731][ T3317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.002710][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.033482][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.042012][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.068573][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.087337][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.118704][ T3328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.131259][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.144040][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.167350][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.175286][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.203500][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.211966][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.223068][ T3328] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.239131][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.272127][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.280090][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.316951][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.324691][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.411933][ T3313] veth0_vlan: entered promiscuous mode [ 40.450374][ T3313] veth1_vlan: entered promiscuous mode [ 40.500125][ T3317] veth0_vlan: entered promiscuous mode [ 40.520434][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.536941][ T3317] veth1_vlan: entered promiscuous mode [ 40.554236][ T3313] veth0_macvtap: entered promiscuous mode [ 40.564102][ T3313] veth1_macvtap: entered promiscuous mode [ 40.586383][ T3328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.621501][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.658361][ T3314] veth0_vlan: entered promiscuous mode [ 40.666249][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.679637][ T3317] veth0_macvtap: entered promiscuous mode [ 40.694008][ T3317] veth1_macvtap: entered promiscuous mode [ 40.706621][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.721749][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.739683][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.758066][ T3314] veth1_vlan: entered promiscuous mode [ 40.777424][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.804405][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.825587][ T3320] veth0_vlan: entered promiscuous mode [ 40.840245][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.860962][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.872826][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 40.872842][ T29] audit: type=1400 audit(1763178507.584:81): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.cYPxb9/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 40.872977][ T3320] veth1_vlan: entered promiscuous mode [ 40.886663][ T29] audit: type=1400 audit(1763178507.604:82): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.937734][ T29] audit: type=1400 audit(1763178507.604:83): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.cYPxb9/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 40.966052][ T29] audit: type=1400 audit(1763178507.604:84): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 40.995127][ T29] audit: type=1400 audit(1763178507.604:85): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.cYPxb9/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 41.025469][ T29] audit: type=1400 audit(1763178507.604:86): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.cYPxb9/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=5000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 41.058379][ T29] audit: type=1400 audit(1763178507.604:87): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.082224][ T29] audit: type=1400 audit(1763178507.634:88): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 41.093712][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.107884][ T29] audit: type=1400 audit(1763178507.634:89): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="gadgetfs" ino=3512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 41.119732][ T3314] veth0_macvtap: entered promiscuous mode [ 41.155870][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.165967][ T3320] veth0_macvtap: entered promiscuous mode [ 41.182574][ T3320] veth1_macvtap: entered promiscuous mode [ 41.190216][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.206502][ T3314] veth1_macvtap: entered promiscuous mode [ 41.229768][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.234895][ T29] audit: type=1400 audit(1763178507.944:90): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.241902][ T3328] veth0_vlan: entered promiscuous mode [ 41.285499][ T3328] veth1_vlan: entered promiscuous mode [ 41.298309][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.310694][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.329084][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.350933][ T3484] loop2: detected capacity change from 0 to 512 [ 41.358460][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.358761][ T3485] loop1: detected capacity change from 0 to 512 [ 41.382955][ T3328] veth0_macvtap: entered promiscuous mode [ 41.392894][ T52] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.415629][ T3485] ------------[ cut here ]------------ [ 41.416923][ T3328] veth1_macvtap: entered promiscuous mode [ 41.421877][ T3485] EA inode 11 i_nlink=2 [ 41.422268][ T3485] WARNING: CPU: 0 PID: 3485 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 41.445156][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.445702][ T3485] Modules linked in: [ 41.458551][ T3485] CPU: 0 UID: 0 PID: 3485 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.461162][ T3484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.468665][ T3485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 41.495463][ T3485] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 41.500193][ T3484] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.504489][ T3485] Code: 90 49 8d 7e 40 e8 e6 f9 b8 ff 4d 8b 6e 40 4c 89 e7 e8 fa f4 b8 ff 41 8b 56 48 48 c7 c7 a7 d3 55 86 4c 89 ee e8 87 f5 67 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 08 f4 b5 03 0f 1f 84 00 00 00 00 00 [ 41.504515][ T3485] RSP: 0018:ffffc900018cf5a0 EFLAGS: 00010246 [ 41.504541][ T3485] RAX: f74bd8a1c3433100 RBX: ffff8881190701a8 RCX: 0000000000080000 [ 41.504555][ T3485] RDX: ffffc9000218b000 RSI: 00000000000049ac RDI: 00000000000049ad [ 41.549312][ T3484] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.3: corrupted xattr block 33: e_value out of bounds [ 41.556240][ T3485] RBP: 0000000000000002 R08: 0001ffff8684810f R09: 0000000000000000 [ 41.556276][ T3485] R10: ffffc900018cf280 R11: 0001c900018cf280 R12: ffff888119070158 [ 41.569000][ T3484] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 41.581736][ T3485] R13: 000000000000000b R14: ffff888119070110 R15: 0000000000000001 [ 41.581761][ T3485] FS: 00007fa31de576c0(0000) GS:ffff8882aee11000(0000) knlGS:0000000000000000 [ 41.592969][ T3484] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.3: corrupted xattr block 33: e_value out of bounds [ 41.601904][ T3485] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.614258][ T3484] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 41.621354][ T3485] CR2: 00005574c7749ab0 CR3: 0000000119b4a000 CR4: 00000000003506f0 [ 41.621383][ T3485] Call Trace: [ 41.621393][ T3485] [ 41.632319][ T3484] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.3: corrupted xattr block 33: e_value out of bounds [ 41.645514][ T3485] ext4_xattr_set_entry+0x77f/0x1020 [ 41.645587][ T3485] ext4_xattr_ibody_set+0x184/0x3c0 [ 41.654115][ T3484] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 41.662711][ T3485] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 41.704027][ T3484] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.3: corrupted xattr block 33: e_value out of bounds [ 41.705645][ T3485] __ext4_expand_extra_isize+0x246/0x280 [ 41.715659][ T3484] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 41.721255][ T3485] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 41.736746][ T3484] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.3: corrupted xattr block 33: e_value out of bounds [ 41.742041][ T3485] ext4_evict_inode+0x80e/0xd90 [ 41.754206][ T3484] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, [ 41.758282][ T3485] ? __pfx_ext4_evict_inode+0x10/0x10 [ 41.773629][ T3484] block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 41.780711][ T3485] evict+0x2e3/0x550 [ 41.801655][ T3490] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.3: corrupted xattr block 33: e_value out of bounds [ 41.804300][ T3485] ? __dquot_initialize+0x146/0x7c0 [ 41.809415][ T3490] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 41.823823][ T3485] iput+0x4ed/0x650 [ 41.831151][ T3484] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 41.839964][ T3485] ext4_process_orphan+0x1a9/0x1c0 [ 41.844526][ T3484] EXT4-fs (loop2): This should not happen!! Data will be lost [ 41.844526][ T3484] [ 41.859295][ T3485] ext4_orphan_cleanup+0x6a8/0xa00 [ 41.865316][ T3484] EXT4-fs (loop2): Total free blocks count 0 [ 41.865337][ T3484] EXT4-fs (loop2): Free/Dirty block details [ 41.878462][ T3485] ext4_fill_super+0x3483/0x3810 [ 41.885097][ T3484] EXT4-fs (loop2): free_blocks=65280 [ 41.891716][ T3485] ? snprintf+0x86/0xb0 [ 41.898904][ T3484] EXT4-fs (loop2): dirty_blocks=33 [ 41.904489][ T3485] ? set_blocksize+0x1a8/0x310 [ 41.910811][ T3484] EXT4-fs (loop2): Block reservation details [ 41.915262][ T3485] ? sb_set_blocksize+0xe3/0x100 [ 41.920577][ T3484] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 41.922358][ T3490] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.3: corrupted xattr block 33: e_value out of bounds [ 41.925864][ T3485] ? setup_bdev_super+0x30e/0x370 [ 41.936589][ T3490] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 41.937554][ T3485] ? __pfx_ext4_fill_super+0x10/0x10 [ 41.978044][ T3485] get_tree_bdev_flags+0x291/0x300 [ 41.982890][ T3484] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.3: corrupted xattr block 33: e_value out of bounds [ 41.983596][ T3485] ? __pfx_ext4_fill_super+0x10/0x10 [ 41.999059][ T3484] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 42.004029][ T3485] get_tree_bdev+0x1f/0x30 [ 42.017819][ T3485] ext4_get_tree+0x1c/0x30 [ 42.022327][ T3485] vfs_get_tree+0x57/0x1d0 [ 42.027301][ T3485] do_new_mount+0x24d/0x660 [ 42.032500][ T3485] path_mount+0x4a5/0xb70 [ 42.037020][ T3485] ? user_path_at+0x109/0x130 [ 42.039804][ T3484] syz.2.3 (3484) used greatest stack depth: 10072 bytes left [ 42.042350][ T3485] __se_sys_mount+0x28c/0x2e0 [ 42.054973][ T3485] __x64_sys_mount+0x67/0x80 [ 42.060313][ T3485] x64_sys_call+0x2b51/0x3000 [ 42.065272][ T3485] do_syscall_64+0xd2/0x200 [ 42.070875][ T3485] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 42.078124][ T3485] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 42.084327][ T3485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.090836][ T3485] RIP: 0033:0x7fa31f3f0e6a [ 42.095746][ T3485] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.117428][ T3485] RSP: 002b:00007fa31de56e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 42.126871][ T3485] RAX: ffffffffffffffda RBX: 00007fa31de56ef0 RCX: 00007fa31f3f0e6a [ 42.135131][ T3485] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fa31de56eb0 [ 42.143750][ T3485] RBP: 0000200000000180 R08: 00007fa31de56ef0 R09: 0000000000800700 [ 42.152854][ T3485] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 42.161436][ T3485] R13: 00007fa31de56eb0 R14: 000000000000046f R15: 000000000000002c [ 42.171040][ T3485] [ 42.174531][ T3485] ---[ end trace 0000000000000000 ]--- [ 42.183323][ T52] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.184391][ T3485] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.2: iget: bad extra_isize 90 (inode size 256) [ 42.198047][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.221467][ T3485] EXT4-fs (loop1): Remounting filesystem read-only [ 42.222640][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.229124][ T3485] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -30) [ 42.254839][ T3485] EXT4-fs (loop1): 1 orphan inode deleted [ 42.261494][ T52] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.262457][ T3485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.310067][ T52] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.370013][ T52] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.376182][ T3498] loop0: detected capacity change from 0 to 512 [ 42.380616][ T3495] loop2: detected capacity change from 0 to 512 [ 42.398662][ T166] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.425882][ T3495] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.6: iget: bad extra_isize 90 (inode size 256) [ 42.434675][ T3499] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.450511][ T3498] EXT4-fs: Ignoring removed orlov option [ 42.463301][ T166] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.474942][ T3498] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 42.483983][ T3495] EXT4-fs (loop2): Remounting filesystem read-only [ 42.504845][ T3498] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 42.505456][ T166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.518857][ T3495] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -30) [ 42.536707][ T3498] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.1: corrupted in-inode xattr: e_value size too large [ 42.558070][ T3504] loop3: detected capacity change from 0 to 512 [ 42.562349][ T166] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.571078][ T3495] EXT4-fs (loop2): 1 orphan inode deleted [ 42.576408][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.588129][ T3495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.604371][ T3498] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1: couldn't read orphan inode 15 (err -117) [ 42.619922][ T3498] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.633155][ T166] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.648102][ T3504] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.4: iget: bad extra_isize 90 (inode size 256) [ 42.656324][ T166] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.695312][ T3504] EXT4-fs (loop3): Remounting filesystem read-only [ 42.709360][ T166] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.719978][ T3504] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -30) [ 42.746788][ T3504] EXT4-fs (loop3): 1 orphan inode deleted [ 42.753388][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.766496][ T3504] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.782256][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.816645][ T3514] loop0: detected capacity change from 0 to 512 [ 42.827086][ T3514] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.834552][ T3514] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.852825][ T3514] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.861660][ T3514] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 42.889814][ T3517] netlink: 'syz.2.9': attribute type 13 has an invalid length. [ 42.898275][ T3517] netlink: 'syz.2.9': attribute type 27 has an invalid length. [ 42.911216][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.970584][ T3514] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.10: Allocating blocks 41-42 which overlap fs metadata [ 42.991217][ T3514] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.10: Failed to acquire dquot type 1 [ 43.004571][ T3514] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 43.004966][ T3523] loop3: detected capacity change from 0 to 512 [ 43.022194][ T3514] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.10: corrupted inode contents [ 43.030473][ T3523] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.051045][ T3523] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.492433][ C1] hrtimer: interrupt took 31956 ns [ 43.544578][ T3514] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #12: comm syz.0.10: mark_inode_dirty error [ 43.556773][ T3523] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.566272][ T3523] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.577331][ T3514] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.10: corrupted inode contents [ 43.590520][ T3514] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.10: mark_inode_dirty error [ 43.615034][ T3514] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.10: corrupted inode contents [ 43.663061][ T3514] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 43.691796][ T3514] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.10: corrupted inode contents [ 43.704986][ T3514] EXT4-fs error (device loop0): ext4_truncate:4637: inode #12: comm syz.0.10: mark_inode_dirty error [ 43.742474][ T3514] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 43.752306][ T3523] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.12: Allocating blocks 41-42 which overlap fs metadata [ 43.776014][ T3523] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.12: Allocating blocks 41-42 which overlap fs metadata [ 43.791891][ T3514] EXT4-fs (loop0): 1 truncate cleaned up [ 43.800820][ T3514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.805516][ T3523] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.12: Failed to acquire dquot type 1 [ 43.840539][ T3523] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 43.883421][ T3523] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.12: corrupted inode contents [ 43.944672][ T3523] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #12: comm syz.3.12: mark_inode_dirty error [ 43.968610][ T3514] syz.0.10 (3514) used greatest stack depth: 9952 bytes left [ 43.988038][ T3523] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.12: corrupted inode contents [ 44.016028][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.025656][ T3523] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.12: mark_inode_dirty error [ 44.038170][ T166] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 1 [ 44.055175][ T3523] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.12: corrupted inode contents [ 44.108776][ T3523] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 44.121796][ T3523] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.12: corrupted inode contents [ 44.190294][ T3523] EXT4-fs error (device loop3): ext4_truncate:4637: inode #12: comm syz.3.12: mark_inode_dirty error [ 44.238400][ T3523] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 44.258624][ T3523] EXT4-fs (loop3): 1 truncate cleaned up [ 44.359800][ T3523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.538218][ T3523] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.12: Allocating blocks 41-42 which overlap fs metadata [ 44.553369][ T3523] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.12: Failed to acquire dquot type 1 [ 44.597373][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.634988][ T3575] loop2: detected capacity change from 0 to 1024 [ 45.660595][ T3575] ======================================================= [ 45.660595][ T3575] WARNING: The mand mount option has been deprecated and [ 45.660595][ T3575] and is ignored by this kernel. Remove the mand [ 45.660595][ T3575] option from the mount to silence this warning. [ 45.660595][ T3575] ======================================================= [ 45.995112][ T29] kauditd_printk_skb: 373 callbacks suppressed [ 45.995132][ T29] audit: type=1326 audit(1763178512.534:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3579 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6f9ef6c9 code=0x7ffc0000 [ 46.027129][ T29] audit: type=1326 audit(1763178512.534:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3579 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6f9ef6c9 code=0x7ffc0000 [ 46.055367][ T29] audit: type=1326 audit(1763178512.534:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3579 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e6f9ef6c9 code=0x7ffc0000 [ 46.136641][ T3580] loop4: detected capacity change from 0 to 512 [ 46.164460][ T29] audit: type=1326 audit(1763178512.804:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3579 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6f9ef6c9 code=0x7ffc0000 [ 46.190355][ T29] audit: type=1326 audit(1763178512.804:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3579 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6f9ef6c9 code=0x7ffc0000 [ 46.216215][ T29] audit: type=1326 audit(1763178512.804:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3579 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e6f9ef6c9 code=0x7ffc0000 [ 46.240453][ T29] audit: type=1326 audit(1763178512.814:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3579 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6f9ef6c9 code=0x7ffc0000 [ 46.265169][ T29] audit: type=1326 audit(1763178512.814:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3579 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6f9ef6c9 code=0x7ffc0000 [ 46.289343][ T29] audit: type=1326 audit(1763178512.814:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3579 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e6f9ef6c9 code=0x7ffc0000 [ 46.313166][ T29] audit: type=1326 audit(1763178512.814:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3579 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6f9ef6c9 code=0x7ffc0000 [ 46.343634][ T3575] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.449652][ T3580] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.27: iget: bad extra_isize 90 (inode size 256) [ 46.465496][ T3575] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #11: comm syz.2.26: iget: bogus i_mode (1) [ 46.465642][ T3580] EXT4-fs (loop4): Remounting filesystem read-only [ 46.486793][ T3580] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -30) [ 46.496529][ T3580] EXT4-fs (loop4): 1 orphan inode deleted [ 46.496774][ T3575] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.26: couldn't read orphan inode 11 (err -117) [ 46.503772][ T3580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.526555][ T3591] loop1: detected capacity change from 0 to 512 [ 46.546222][ T3593] bridge0: port 3(gretap0) entered blocking state [ 46.546572][ T3575] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.553528][ T3593] bridge0: port 3(gretap0) entered disabled state [ 46.591609][ T3593] gretap0: entered allmulticast mode [ 46.597317][ T3591] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.28: iget: bad extra_isize 90 (inode size 256) [ 46.597675][ T3591] EXT4-fs (loop1): Remounting filesystem read-only [ 46.613542][ T3593] gretap0: entered promiscuous mode [ 46.619324][ T3591] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -30) [ 46.644013][ T3591] EXT4-fs (loop1): 1 orphan inode deleted [ 46.652631][ T3575] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.652761][ T3591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.675908][ T3593] bridge0: port 3(gretap0) entered blocking state [ 46.682675][ T3593] bridge0: port 3(gretap0) entered forwarding state [ 46.694754][ T3594] gretap0: left allmulticast mode [ 46.700193][ T3594] gretap0: left promiscuous mode [ 46.705523][ T3594] bridge0: port 3(gretap0) entered disabled state [ 46.715736][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.784084][ T3598] loop3: detected capacity change from 0 to 512 [ 46.800676][ T3598] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.819230][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.832105][ T3598] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.842377][ T3607] bridge0: port 3(gretap0) entered blocking state [ 46.849104][ T3607] bridge0: port 3(gretap0) entered disabled state [ 46.855824][ T3607] gretap0: entered allmulticast mode [ 46.861857][ T3607] gretap0: entered promiscuous mode [ 46.867798][ T3598] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.868253][ T3607] bridge0: port 3(gretap0) entered blocking state [ 46.876425][ T3598] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 46.882913][ T3607] bridge0: port 3(gretap0) entered forwarding state [ 46.900691][ T3610] gretap0: left allmulticast mode [ 46.906004][ T3610] gretap0: left promiscuous mode [ 46.911164][ T3610] bridge0: port 3(gretap0) entered disabled state [ 46.929497][ T3602] loop0: detected capacity change from 0 to 128 [ 46.947121][ T3611] loop1: detected capacity change from 0 to 128 [ 46.954433][ T3598] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.32: Allocating blocks 41-42 which overlap fs metadata [ 46.978154][ T3598] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.32: Allocating blocks 41-42 which overlap fs metadata [ 46.978504][ T3602] netlink: 'syz.0.31': attribute type 3 has an invalid length. [ 46.992333][ T3598] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.32: Failed to acquire dquot type 1 [ 47.011275][ T3598] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 47.027772][ T3598] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.32: corrupted inode contents [ 47.040120][ T3598] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #12: comm syz.3.32: mark_inode_dirty error [ 47.056626][ T3598] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.32: corrupted inode contents [ 47.070769][ T3598] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.32: mark_inode_dirty error [ 47.091078][ T3598] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.32: corrupted inode contents [ 47.103205][ T3598] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 47.112134][ T3598] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.32: corrupted inode contents [ 47.126054][ T3598] EXT4-fs error (device loop3): ext4_truncate:4637: inode #12: comm syz.3.32: mark_inode_dirty error [ 47.138462][ T3598] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 47.148600][ T3598] EXT4-fs (loop3): 1 truncate cleaned up [ 47.155624][ T3598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.214522][ T3598] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.32: Failed to acquire dquot type 1 [ 47.252024][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.401703][ T3630] loop4: detected capacity change from 0 to 512 [ 47.409480][ T3630] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 47.423946][ T3630] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.435900][ T3630] EXT4-fs error (device loop4): ext4_init_orphan_info:618: comm syz.4.39: orphan file block 0: bad magic [ 47.449247][ T3630] EXT4-fs (loop4): mount failed [ 47.475680][ T3630] loop4: detected capacity change from 0 to 128 [ 47.740859][ T3611] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 47.842331][ T3646] loop0: detected capacity change from 0 to 512 [ 47.870304][ T3646] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 47.883657][ T3644] loop2: detected capacity change from 0 to 512 [ 47.915275][ T3647] loop1: detected capacity change from 0 to 512 [ 47.926754][ T3644] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.934048][ T3644] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.945047][ T3647] EXT4-fs: Ignoring removed oldalloc option [ 47.957652][ T3647] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.967545][ T3644] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.977251][ T3644] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.989358][ T52] tipc: Subscription rejected, illegal request [ 48.018576][ T3647] EXT4-fs (loop1): too many log groups per flexible block group [ 48.027428][ T3647] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 48.035339][ T3647] EXT4-fs (loop1): mount failed [ 48.043382][ T3644] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.42: Allocating blocks 41-42 which overlap fs metadata [ 48.063453][ T3644] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.42: Allocating blocks 41-42 which overlap fs metadata [ 48.083116][ T3644] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.42: Failed to acquire dquot type 1 [ 48.095506][ T3644] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 48.115259][ T3644] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.42: corrupted inode contents [ 48.129469][ T3644] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #12: comm syz.2.42: mark_inode_dirty error [ 48.141839][ T3644] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.42: corrupted inode contents [ 48.166560][ T3644] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.42: mark_inode_dirty error [ 48.183736][ T3644] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.42: corrupted inode contents [ 48.198935][ T3644] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 48.223436][ T3644] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.42: corrupted inode contents [ 48.259074][ T3665] netlink: 'syz.0.48': attribute type 13 has an invalid length. [ 48.268916][ T3665] netlink: 152 bytes leftover after parsing attributes in process `syz.0.48'. [ 48.279337][ T3644] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.42: mark_inode_dirty error [ 48.303715][ T3665] : renamed from syz_tun (while UP) [ 48.317729][ T3644] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 48.328770][ T3671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.49'. [ 48.346585][ T3665] : refused to change device tx_queue_len [ 48.354405][ T3665] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 48.382262][ T3644] EXT4-fs (loop2): 1 truncate cleaned up [ 48.389934][ T3671] hsr_slave_0: left promiscuous mode [ 48.396999][ T3644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.415825][ T3671] hsr_slave_1: left promiscuous mode [ 48.497133][ T3644] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.42: Allocating blocks 41-42 which overlap fs metadata [ 48.560776][ T3644] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.42: Failed to acquire dquot type 1 [ 48.619327][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.686792][ T3680] loop2: detected capacity change from 0 to 512 [ 48.706235][ T3680] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.52: iget: bad extra_isize 90 (inode size 256) [ 48.764188][ T3680] EXT4-fs (loop2): Remounting filesystem read-only [ 48.788177][ T3680] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -30) [ 48.834357][ T3680] EXT4-fs (loop2): 1 orphan inode deleted [ 48.860892][ T3680] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.919812][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.092436][ T3690] loop2: detected capacity change from 0 to 512 [ 49.131470][ T3690] EXT4-fs: Ignoring removed nobh option [ 49.220999][ T3690] EXT4-fs (loop2): failed to initialize system zone (-117) [ 49.273242][ T3690] EXT4-fs (loop2): mount failed [ 49.736439][ T3699] loop0: detected capacity change from 0 to 512 [ 49.909830][ T3699] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.019620][ T3699] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.075396][ T3699] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.57: corrupted xattr block 33: e_value out of bounds [ 50.109761][ T3709] loop1: detected capacity change from 0 to 512 [ 50.121679][ T3709] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.129451][ T3709] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.143093][ T3711] bridge0: port 3(gretap0) entered blocking state [ 50.149888][ T3711] bridge0: port 3(gretap0) entered disabled state [ 50.158235][ T3711] gretap0: entered allmulticast mode [ 50.164131][ T3711] gretap0: entered promiscuous mode [ 50.170947][ T3711] bridge0: port 3(gretap0) entered blocking state [ 50.178023][ T3711] bridge0: port 3(gretap0) entered forwarding state [ 50.193793][ T3709] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.203878][ T3709] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 50.225024][ T3699] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 50.225775][ T3713] gretap0: left allmulticast mode [ 50.242345][ T3713] gretap0: left promiscuous mode [ 50.245315][ T3699] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.57: corrupted xattr block 33: e_value out of bounds [ 50.248713][ T3713] bridge0: port 3(gretap0) entered disabled state [ 50.276711][ T3699] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 50.287390][ T3699] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.57: corrupted xattr block 33: e_value out of bounds [ 50.307062][ T3699] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 50.319041][ T3712] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.57: corrupted xattr block 33: e_value out of bounds [ 50.319069][ T3709] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.60: Allocating blocks 41-42 which overlap fs metadata [ 50.335842][ T3712] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 50.360498][ T3712] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.57: corrupted xattr block 33: e_value out of bounds [ 50.378631][ T3712] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 50.390359][ T3709] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.60: Failed to acquire dquot type 1 [ 50.431448][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.442702][ T3709] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 50.468645][ T3709] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.60: corrupted inode contents [ 50.489481][ T3709] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #12: comm syz.1.60: mark_inode_dirty error [ 50.508257][ T3709] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.60: corrupted inode contents [ 50.523348][ T3709] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.60: mark_inode_dirty error [ 50.538664][ T3709] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.60: corrupted inode contents [ 50.551627][ T3709] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 50.561309][ T3720] netlink: 20 bytes leftover after parsing attributes in process `syz.4.63'. [ 50.562081][ T3709] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.60: corrupted inode contents [ 50.587471][ T3709] EXT4-fs error (device loop1): ext4_truncate:4637: inode #12: comm syz.1.60: mark_inode_dirty error [ 50.590680][ T3720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.63'. [ 50.600185][ T3709] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 50.620525][ T3724] loop2: detected capacity change from 0 to 512 [ 50.642510][ T3720] hsr_slave_0 (unregistering): left promiscuous mode [ 50.648558][ T3709] EXT4-fs (loop1): 1 truncate cleaned up [ 50.668983][ T3724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.671922][ T3709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.689817][ T37] tipc: Subscription rejected, illegal request [ 50.709286][ T3724] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.811564][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.828457][ T52] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 1 [ 50.861915][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.057415][ T29] kauditd_printk_skb: 442 callbacks suppressed [ 51.057430][ T29] audit: type=1400 audit(1763178517.774:890): avc: denied { unlink } for pid=3328 comm="syz-executor" name="file0" dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 51.111494][ T3754] loop1: detected capacity change from 0 to 732 [ 51.123556][ T3754] iso9660: Unknown parameter ' ' [ 51.133387][ T29] audit: type=1326 audit(1763178517.814:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3751 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31f3ef6c9 code=0x7ffc0000 [ 51.160508][ T29] audit: type=1326 audit(1763178517.814:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3751 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31f3ef6c9 code=0x7ffc0000 [ 51.188378][ T29] audit: type=1326 audit(1763178517.814:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3751 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa31f3ef6c9 code=0x7ffc0000 [ 51.213474][ T29] audit: type=1326 audit(1763178517.814:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3751 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31f3ef6c9 code=0x7ffc0000 [ 51.240298][ T29] audit: type=1326 audit(1763178517.814:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3751 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31f3ef6c9 code=0x7ffc0000 [ 51.267241][ T29] audit: type=1326 audit(1763178517.814:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3751 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa31f3ef6c9 code=0x7ffc0000 [ 51.293924][ T29] audit: type=1326 audit(1763178517.814:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3751 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31f3ef6c9 code=0x7ffc0000 [ 51.323683][ T29] audit: type=1326 audit(1763178517.814:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3751 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa31f3ef6c9 code=0x7ffc0000 [ 51.353954][ T29] audit: type=1326 audit(1763178517.814:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3751 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31f3ef6c9 code=0x7ffc0000 [ 51.496001][ T3733] netlink: 19 bytes leftover after parsing attributes in process `syz.4.68'. [ 51.514071][ T3765] loop2: detected capacity change from 0 to 512 [ 51.547586][ T3765] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.734913][ T3765] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 51.840243][ T3765] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 51.854542][ T3765] EXT4-fs: Cannot change journaled quota options when quota turned on [ 51.911342][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.355762][ T3809] loop0: detected capacity change from 0 to 512 [ 52.365336][ T3807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.88'. [ 52.391282][ T3809] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.89: iget: bad extra_isize 90 (inode size 256) [ 52.410935][ T3809] EXT4-fs (loop0): Remounting filesystem read-only [ 52.419663][ T3809] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -30) [ 52.432167][ T3809] EXT4-fs (loop0): 1 orphan inode deleted [ 52.439736][ T3809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.472799][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.897636][ T3841] loop3: detected capacity change from 0 to 512 [ 52.947086][ T3841] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.982865][ T3841] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.003626][ T3845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.103'. [ 53.069514][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.235792][ T3866] loop3: detected capacity change from 0 to 512 [ 53.291125][ T3869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.111'. [ 53.387588][ T3870] SELinux: Context system_u:object_r:mqueue_spool_t:s0 is not valid (left unmapped). [ 53.465308][ T3866] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.110: iget: bad extra_isize 90 (inode size 256) [ 53.495182][ T3866] EXT4-fs (loop3): Remounting filesystem read-only [ 53.547792][ T3866] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -30) [ 53.558627][ T3866] EXT4-fs (loop3): 1 orphan inode deleted [ 53.567423][ T3866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.602004][ T3873] wireguard0: entered promiscuous mode [ 53.609725][ T3873] wireguard0: entered allmulticast mode [ 53.617207][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.767215][ T3885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.116'. [ 53.891930][ T3896] loop1: detected capacity change from 0 to 512 [ 53.943242][ T3894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3894 comm=syz.3.117 [ 53.968153][ T3894] SELinux: unknown common [ 54.035417][ T3905] capability: warning: `syz.4.125' uses deprecated v2 capabilities in a way that may be insecure [ 54.111635][ T3894] SELinux: failed to load policy [ 55.507403][ T4069] FAULT_INJECTION: forcing a failure. [ 55.507403][ T4069] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 55.524973][ T4069] CPU: 0 UID: 0 PID: 4069 Comm: syz.2.131 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 55.525057][ T4069] Tainted: [W]=WARN [ 55.525064][ T4069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 55.525077][ T4069] Call Trace: [ 55.525085][ T4069] [ 55.525093][ T4069] __dump_stack+0x1d/0x30 [ 55.525142][ T4069] dump_stack_lvl+0xe8/0x140 [ 55.525236][ T4069] dump_stack+0x15/0x1b [ 55.525254][ T4069] should_fail_ex+0x265/0x280 [ 55.525275][ T4069] should_fail+0xb/0x20 [ 55.525362][ T4069] should_fail_usercopy+0x1a/0x20 [ 55.525391][ T4069] _copy_to_user+0x20/0xa0 [ 55.525423][ T4069] simple_read_from_buffer+0xb5/0x130 [ 55.525457][ T4069] proc_fail_nth_read+0x10e/0x150 [ 55.525562][ T4069] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 55.525596][ T4069] vfs_read+0x1a8/0x770 [ 55.525628][ T4069] ? __rcu_read_unlock+0x4f/0x70 [ 55.525665][ T4069] ? __fget_files+0x184/0x1c0 [ 55.525775][ T4069] ksys_read+0xda/0x1a0 [ 55.525806][ T4069] __x64_sys_read+0x40/0x50 [ 55.525832][ T4069] x64_sys_call+0x27c0/0x3000 [ 55.525888][ T4069] do_syscall_64+0xd2/0x200 [ 55.525911][ T4069] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 55.525940][ T4069] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 55.526020][ T4069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.526055][ T4069] RIP: 0033:0x7f75a300e0dc [ 55.526071][ T4069] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 55.526172][ T4069] RSP: 002b:00007f75a1a77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 55.526195][ T4069] RAX: ffffffffffffffda RBX: 00007f75a3265fa0 RCX: 00007f75a300e0dc [ 55.526227][ T4069] RDX: 000000000000000f RSI: 00007f75a1a770a0 RDI: 0000000000000004 [ 55.526239][ T4069] RBP: 00007f75a1a77090 R08: 0000000000000000 R09: 0000000000000000 [ 55.526252][ T4069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.526264][ T4069] R13: 00007f75a3266038 R14: 00007f75a3265fa0 R15: 00007ffdf879b718 [ 55.526288][ T4069] [ 55.832379][ T3903] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.858654][ T4076] loop0: detected capacity change from 0 to 512 [ 55.919375][ T3903] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.989526][ T4085] loop2: detected capacity change from 0 to 512 [ 56.003459][ T3903] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.032474][ T4085] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.136: iget: bad extra_isize 90 (inode size 256) [ 56.085476][ T4085] EXT4-fs (loop2): Remounting filesystem read-only [ 56.092767][ T4085] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -30) [ 56.108014][ T4085] EXT4-fs (loop2): 1 orphan inode deleted [ 56.119922][ T4095] bridge0: port 3(gretap0) entered blocking state [ 56.127644][ T4095] bridge0: port 3(gretap0) entered disabled state [ 56.137004][ T4085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.151442][ T29] kauditd_printk_skb: 799 callbacks suppressed [ 56.151459][ T29] audit: type=1326 audit(1763178522.864:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75a300df10 code=0x7ffc0000 [ 56.151957][ T4095] gretap0: entered allmulticast mode [ 56.159127][ T29] audit: type=1326 audit(1763178522.864:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f75a300e417 code=0x7ffc0000 [ 56.221094][ T29] audit: type=1326 audit(1763178522.864:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75a300df10 code=0x7ffc0000 [ 56.248465][ T29] audit: type=1326 audit(1763178522.864:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a300f6c9 code=0x7ffc0000 [ 56.275436][ T29] audit: type=1326 audit(1763178522.864:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a300f6c9 code=0x7ffc0000 [ 56.303142][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.316000][ T4095] gretap0: entered promiscuous mode [ 56.322535][ T4095] bridge0: port 3(gretap0) entered blocking state [ 56.329771][ T4095] bridge0: port 3(gretap0) entered forwarding state [ 56.347609][ T3903] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.370079][ T29] audit: type=1326 audit(1763178523.084:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4097 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a300f6c9 code=0x7ffc0000 [ 56.396038][ T29] audit: type=1326 audit(1763178523.084:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4097 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a300f6c9 code=0x7ffc0000 [ 56.421980][ T29] audit: type=1326 audit(1763178523.084:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4097 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f75a300f6c9 code=0x7ffc0000 [ 56.448907][ T29] audit: type=1326 audit(1763178523.084:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4097 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a300f6c9 code=0x7ffc0000 [ 56.451358][ T4096] gretap0: left allmulticast mode [ 56.475435][ T29] audit: type=1326 audit(1763178523.084:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4097 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a300f6c9 code=0x7ffc0000 [ 56.508084][ T4096] gretap0: left promiscuous mode [ 56.513481][ T4096] bridge0: port 3(gretap0) entered disabled state [ 56.534907][ T3491] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.547712][ T3491] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.603005][ T3491] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.603942][ T4105] process 'syz.2.143' launched './file0' with NULL argv: empty string added [ 56.649811][ T3491] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.727098][ T4111] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.752118][ T4111] bond1 (unregistering): Released all slaves [ 56.766816][ T4121] netlink: 'syz.0.145': attribute type 10 has an invalid length. [ 56.783512][ T4121] team0: Port device dummy0 added [ 56.800479][ T4114] loop2: detected capacity change from 0 to 512 [ 56.840656][ T4120] netlink: 'syz.3.150': attribute type 31 has an invalid length. [ 56.855394][ T4114] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 56.894212][ T4130] netlink: 'syz.1.155': attribute type 13 has an invalid length. [ 56.902875][ T4130] netlink: 152 bytes leftover after parsing attributes in process `syz.1.155'. [ 56.922953][ T4130] : renamed from syz_tun (while UP) [ 56.931341][ T4130] : refused to change device tx_queue_len [ 56.938565][ T4130] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 56.963591][ T4132] loop0: detected capacity change from 0 to 512 [ 56.992157][ T4132] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.154: iget: bad extra_isize 90 (inode size 256) [ 57.011281][ T4129] veth0_to_team: entered promiscuous mode [ 57.045529][ T4132] EXT4-fs (loop0): Remounting filesystem read-only [ 57.053435][ T4132] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -30) [ 57.063608][ T4132] EXT4-fs (loop0): 1 orphan inode deleted [ 57.071172][ T4132] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.086086][ T4135] bridge0: port 3(gretap0) entered blocking state [ 57.093845][ T4135] bridge0: port 3(gretap0) entered disabled state [ 57.101357][ T4129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=4129 comm=syz.4.153 [ 57.117675][ T4135] gretap0: entered allmulticast mode [ 57.134950][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.150449][ T4135] gretap0: entered promiscuous mode [ 57.162793][ T4135] bridge0: port 3(gretap0) entered blocking state [ 57.170733][ T4135] bridge0: port 3(gretap0) entered forwarding state [ 57.195174][ T4148] gretap0: left allmulticast mode [ 57.201178][ T4148] gretap0: left promiscuous mode [ 57.208406][ T4148] bridge0: port 3(gretap0) entered disabled state [ 57.240014][ T4151] loop0: detected capacity change from 0 to 732 [ 57.269331][ T4151] iso9660: Unknown parameter ' ' [ 57.533018][ T4171] netlink: 'syz.4.169': attribute type 13 has an invalid length. [ 57.541583][ T4171] netlink: 152 bytes leftover after parsing attributes in process `syz.4.169'. [ 57.710177][ T4171] : renamed from syz_tun (while UP) [ 57.772258][ T4171] : refused to change device tx_queue_len [ 57.778624][ T4171] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 57.819269][ T4175] netlink: 'syz.0.170': attribute type 13 has an invalid length. [ 57.828343][ T4175] netlink: 152 bytes leftover after parsing attributes in process `syz.0.170'. [ 57.940110][ T4175] : refused to change device tx_queue_len [ 57.947198][ T4175] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 58.132997][ T4193] netlink: 'syz.4.177': attribute type 13 has an invalid length. [ 58.141869][ T4193] netlink: 152 bytes leftover after parsing attributes in process `syz.4.177'. [ 58.160777][ T4193] : refused to change device tx_queue_len [ 58.167193][ T4193] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 58.338496][ T4209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.181'. [ 59.113376][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.252803][ T4246] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 59.343894][ T4246] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 59.352796][ T4246] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 59.363226][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.492863][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.552616][ T4260] loop1: detected capacity change from 0 to 512 [ 59.594577][ T4260] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 59.686482][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.710699][ T3491] tipc: Subscription rejected, illegal request [ 60.152917][ T4277] loop1: detected capacity change from 0 to 512 [ 60.262512][ T4277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.361571][ T52] bridge_slave_1: left allmulticast mode [ 60.368835][ T52] bridge_slave_1: left promiscuous mode [ 60.375766][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.399596][ T4277] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 60.482980][ T4277] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 60.492342][ T4277] EXT4-fs: Cannot change journaled quota options when quota turned on [ 60.532800][ T52] bridge_slave_0: left allmulticast mode [ 60.539184][ T52] bridge_slave_0: left promiscuous mode [ 60.547198][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.565368][ T4295] loop2: detected capacity change from 0 to 2048 [ 60.587626][ T4295] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 60.810395][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.859169][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.885960][ T52] bond0 (unregistering): Released all slaves [ 60.941187][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.967304][ T4249] chnl_net:caif_netlink_parms(): no params data found [ 61.047568][ T52] hsr_slave_0: left promiscuous mode [ 61.063843][ T52] hsr_slave_1: left promiscuous mode [ 61.077567][ T4325] loop1: detected capacity change from 0 to 732 [ 61.105687][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.106812][ T4325] iso9660: Unknown parameter ' ' [ 61.115883][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.163944][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.172529][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.182974][ T29] kauditd_printk_skb: 699 callbacks suppressed [ 61.183039][ T29] audit: type=1326 audit(1763178527.904:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa31f3edf10 code=0x7ffc0000 [ 61.217764][ T29] audit: type=1326 audit(1763178527.904:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa31f3ef2cb code=0x7ffc0000 [ 61.252925][ T29] audit: type=1326 audit(1763178527.904:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa31f3ee32a code=0x7ffc0000 [ 61.284833][ T29] audit: type=1326 audit(1763178527.904:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31f3ef6c9 code=0x7ffc0000 [ 61.313978][ T29] audit: type=1326 audit(1763178527.904:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31f3ef6c9 code=0x7ffc0000 [ 61.395081][ T52] veth1_macvtap: left promiscuous mode [ 61.442752][ T52] veth0_macvtap: left promiscuous mode [ 61.462984][ T52] veth1_vlan: left promiscuous mode [ 61.494887][ T29] audit: type=1326 audit(1763178528.064:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa31f3ef6c9 code=0x7ffc0000 [ 61.498653][ T52] veth0_vlan: left promiscuous mode [ 61.526725][ T29] audit: type=1400 audit(1763178528.064:2412): avc: denied { create } for pid=4324 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 61.556645][ T29] audit: type=1326 audit(1763178528.064:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31f3ef6c9 code=0x7ffc0000 [ 61.584160][ T29] audit: type=1326 audit(1763178528.064:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31f3ef6c9 code=0x7ffc0000 [ 61.615590][ T29] audit: type=1326 audit(1763178528.104:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa31f3ef6c9 code=0x7ffc0000 [ 61.919239][ T52] team0 (unregistering): Port device team_slave_1 removed [ 61.931937][ T4359] loop1: detected capacity change from 0 to 512 [ 61.939378][ T52] team0 (unregistering): Port device team_slave_0 removed [ 62.008133][ T52] team0 (unregistering): Port device dummy0 removed [ 62.134680][ T4363] loop1: detected capacity change from 0 to 512 [ 62.197019][ T4363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.213117][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.221260][ T4249] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.224957][ T4363] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 62.245122][ T4249] bridge_slave_0: entered allmulticast mode [ 62.308209][ T4249] bridge_slave_0: entered promiscuous mode [ 62.315504][ T4363] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 62.323657][ T4363] EXT4-fs: Cannot change journaled quota options when quota turned on [ 62.325558][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.340909][ T4249] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.375862][ T4249] bridge_slave_1: entered allmulticast mode [ 62.390554][ T4249] bridge_slave_1: entered promiscuous mode [ 62.452634][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.473353][ T4249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.526313][ T4249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.622819][ T4249] team0: Port device team_slave_0 added [ 62.646166][ T4249] team0: Port device team_slave_1 added [ 62.686866][ T4387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'. [ 62.735476][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.744142][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.773762][ T4391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.229'. [ 62.777002][ T4249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.901990][ T4391] hsr_slave_1: left promiscuous mode [ 62.931816][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.940025][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.967279][ T4407] netlink: 'syz.3.234': attribute type 13 has an invalid length. [ 62.970976][ T4249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.979207][ T4407] netlink: 152 bytes leftover after parsing attributes in process `syz.3.234'. [ 63.033302][ T4407] : renamed from syz_tun (while UP) [ 63.041637][ T4407] : refused to change device tx_queue_len [ 63.048170][ T4407] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 63.077118][ T4249] hsr_slave_0: entered promiscuous mode [ 63.091498][ T4249] hsr_slave_1: entered promiscuous mode [ 63.261637][ T4249] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 63.292929][ T4249] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 63.304739][ T4249] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 63.326077][ T4249] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 63.352053][ T4432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.240'. [ 63.398607][ T4447] netlink: 'syz.3.242': attribute type 13 has an invalid length. [ 63.407292][ T4447] netlink: 152 bytes leftover after parsing attributes in process `syz.3.242'. [ 63.436718][ T4249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.470196][ T4447] : refused to change device tx_queue_len [ 63.477231][ T4447] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 63.544493][ T4455] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 63.566479][ T4249] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.579818][ T4455] siw: device registration error -23 [ 63.605577][ T1593] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.614343][ T1593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.646850][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.656293][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.690596][ T4463] netlink: 'syz.3.248': attribute type 3 has an invalid length. [ 63.806138][ T4485] netlink: 'syz.2.256': attribute type 13 has an invalid length. [ 63.814244][ T4485] netlink: 152 bytes leftover after parsing attributes in process `syz.2.256'. [ 63.854973][ T4249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.905864][ T4485] : renamed from syz_tun (while UP) [ 63.928225][ T4485] : refused to change device tx_queue_len [ 63.934207][ T4485] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 65.528830][ T2735] tipc: Subscription rejected, illegal request [ 65.790758][ T4538] loop2: detected capacity change from 0 to 512 [ 65.822787][ T4538] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.265: iget: bad extra_isize 90 (inode size 256) [ 65.859133][ T4538] EXT4-fs (loop2): Remounting filesystem read-only [ 65.866812][ T4538] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -30) [ 65.876662][ T4538] EXT4-fs (loop2): 1 orphan inode deleted [ 65.883423][ T4538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.918576][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.922405][ T4249] veth0_vlan: entered promiscuous mode [ 65.939073][ T4249] veth1_vlan: entered promiscuous mode [ 66.018260][ T4249] veth0_macvtap: entered promiscuous mode [ 66.024812][ T4546] loop1: detected capacity change from 0 to 4096 [ 66.028568][ T4249] veth1_macvtap: entered promiscuous mode [ 66.050152][ T4546] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.104524][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.141101][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.160248][ T4546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.176001][ T3491] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.193308][ T29] kauditd_printk_skb: 385 callbacks suppressed [ 66.193326][ T29] audit: type=1400 audit(1763178532.904:2801): avc: denied { ioctl } for pid=4545 comm="syz.1.267" path="/dev/vsock" dev="devtmpfs" ino=257 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.211069][ T3491] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.225032][ T29] audit: type=1400 audit(1763178532.904:2802): avc: denied { map } for pid=4545 comm="syz.1.267" path="/dev/vsock" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.260724][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.267055][ T4565] loop2: detected capacity change from 0 to 1024 [ 66.277562][ T29] audit: type=1400 audit(1763178532.904:2803): avc: denied { add_name } for pid=4545 comm="syz.1.267" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.288584][ T3491] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.299314][ T29] audit: type=1400 audit(1763178532.904:2804): avc: denied { create } for pid=4545 comm="syz.1.267" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 66.299347][ T29] audit: type=1400 audit(1763178532.904:2805): avc: denied { read write } for pid=4545 comm="syz.1.267" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 66.299373][ T29] audit: type=1400 audit(1763178532.914:2806): avc: denied { open } for pid=4545 comm="syz.1.267" path="/46/file0/file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 66.302548][ T29] audit: type=1400 audit(1763178533.004:2807): avc: denied { mounton } for pid=4249 comm="syz-executor" path="/root/syzkaller.kG02Wh/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 66.380318][ T3491] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.404893][ T29] audit: type=1400 audit(1763178533.034:2808): avc: denied { mount } for pid=4249 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.438482][ T29] audit: type=1400 audit(1763178533.034:2809): avc: denied { mount } for pid=4249 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 66.462914][ T29] audit: type=1400 audit(1763178533.034:2810): avc: denied { mounton } for pid=4249 comm="syz-executor" path="/root/syzkaller.kG02Wh/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 66.548083][ T4565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.571234][ T4565] netlink: 28 bytes leftover after parsing attributes in process `syz.2.274'. [ 66.580771][ T4573] loop1: detected capacity change from 0 to 512 [ 66.580944][ T4565] netlink: 108 bytes leftover after parsing attributes in process `syz.2.274'. [ 66.609731][ T4565] netlink: 28 bytes leftover after parsing attributes in process `syz.2.274'. [ 66.619728][ T4565] netlink: 108 bytes leftover after parsing attributes in process `syz.2.274'. [ 66.629275][ T4565] netlink: 84 bytes leftover after parsing attributes in process `syz.2.274'. [ 66.639359][ T4580] netlink: 12 bytes leftover after parsing attributes in process `syz.5.196'. [ 66.655275][ T4573] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 66.716879][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.739618][ T177] tipc: Subscription rejected, illegal request [ 66.817401][ T4593] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.938572][ T4604] loop2: detected capacity change from 0 to 512 [ 66.954479][ T4605] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 66.969786][ T4607] siw: device registration error -23 [ 66.997500][ T4604] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.288: iget: bad extra_isize 90 (inode size 256) [ 67.007989][ T4605] siw: device registration error -23 [ 67.024956][ T4604] EXT4-fs (loop2): Remounting filesystem read-only [ 67.033372][ T4604] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -30) [ 67.046728][ T4604] EXT4-fs (loop2): 1 orphan inode deleted [ 67.053948][ T4604] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.092458][ T4615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.291'. [ 67.148255][ T4618] loop1: detected capacity change from 0 to 512 [ 67.156470][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.196299][ T4618] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 67.345152][ T177] tipc: Subscription rejected, illegal request [ 67.465752][ T4643] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 67.518662][ T4643] siw: device registration error -23 [ 67.654747][ T4652] loop1: detected capacity change from 0 to 512 [ 68.154307][ T4652] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.307: iget: bad extra_isize 90 (inode size 256) [ 68.270736][ T4652] EXT4-fs (loop1): Remounting filesystem read-only [ 68.333245][ T4652] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -30) [ 68.345371][ T4652] EXT4-fs (loop1): 1 orphan inode deleted [ 68.395041][ T4652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.509220][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.519376][ T4672] loop2: detected capacity change from 0 to 512 [ 68.565036][ T4672] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 68.596367][ T4686] netlink: 12 bytes leftover after parsing attributes in process `syz.5.320'. [ 68.613892][ T4672] EXT4-fs error (device loop2): ext4_init_orphan_info:618: comm syz.2.313: orphan file block 0: bad magic [ 68.652763][ T4672] EXT4-fs (loop2): mount failed [ 68.689233][ T4690] loop1: detected capacity change from 0 to 2048 [ 68.710517][ T4672] loop2: detected capacity change from 0 to 128 [ 68.788129][ T3584] loop1: p2 p3 p7 [ 68.835508][ T4690] loop1: p2 p3 p7 [ 68.891791][ T4716] loop2: detected capacity change from 0 to 512 [ 68.941353][ T4716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.958666][ T4716] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.001470][ T4690] bridge: RTM_NEWNEIGH with invalid ether address [ 69.099024][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.170274][ T4735] netlink: 96 bytes leftover after parsing attributes in process `syz.2.338'. [ 69.320054][ T4745] loop2: detected capacity change from 0 to 512 [ 69.351378][ T4745] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.343: iget: bad extra_isize 90 (inode size 256) [ 69.446986][ T4745] EXT4-fs (loop2): Remounting filesystem read-only [ 69.455667][ T4745] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -30) [ 69.466153][ T4745] EXT4-fs (loop2): 1 orphan inode deleted [ 69.473558][ T4745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.530167][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.600343][ T4751] loop1: detected capacity change from 0 to 512 [ 69.610858][ T4751] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.345: iget: bad extra_isize 90 (inode size 256) [ 69.626566][ T4751] EXT4-fs (loop1): Remounting filesystem read-only [ 69.634554][ T4751] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -30) [ 69.645370][ T4751] EXT4-fs (loop1): 1 orphan inode deleted [ 69.654128][ T4751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.675871][ T4754] loop2: detected capacity change from 0 to 512 [ 69.683923][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.717236][ T4754] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.870380][ T4763] loop1: detected capacity change from 0 to 512 [ 69.881020][ T4763] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 69.901289][ T4763] EXT4-fs error (device loop1): ext4_init_orphan_info:618: comm syz.1.350: orphan file block 0: bad magic [ 69.921748][ T4770] mmap: syz.5.352 (4770) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 69.934862][ T4763] EXT4-fs (loop1): mount failed [ 69.963599][ T4763] loop1: detected capacity change from 0 to 128 [ 70.096616][ T4781] loop2: detected capacity change from 0 to 512 [ 70.125719][ T4781] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.355: iget: bad extra_isize 90 (inode size 256) [ 70.606541][ T4781] EXT4-fs (loop2): Remounting filesystem read-only [ 70.670540][ T4781] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -30) [ 70.765966][ T4781] EXT4-fs (loop2): 1 orphan inode deleted [ 71.074165][ T4823] netlink: 12 bytes leftover after parsing attributes in process `syz.5.371'. [ 71.117575][ T4828] loop2: detected capacity change from 0 to 512 [ 71.159908][ T4828] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.234834][ T29] kauditd_printk_skb: 567 callbacks suppressed [ 71.234856][ T29] audit: type=1326 audit(1763178537.944:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6f9ef6c9 code=0x7ffc0000 [ 71.273159][ T29] audit: type=1326 audit(1763178537.944:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1e6f9ef6c9 code=0x7ffc0000 [ 71.303042][ T29] audit: type=1326 audit(1763178537.944:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1e6f9ef703 code=0x7ffc0000 [ 71.455300][ T29] audit: type=1326 audit(1763178538.044:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1e6f9ee17f code=0x7ffc0000 [ 71.488672][ T29] audit: type=1326 audit(1763178538.054:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1e6f9ef757 code=0x7ffc0000 [ 71.489371][ T4842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.375'. [ 71.518361][ T29] audit: type=1326 audit(1763178538.054:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e6f9edf10 code=0x7ffc0000 [ 71.553906][ T29] audit: type=1326 audit(1763178538.054:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1e6f9ee32a code=0x7ffc0000 [ 71.578792][ T29] audit: type=1326 audit(1763178538.054:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6f9ef6c9 code=0x7ffc0000 [ 71.605367][ T29] audit: type=1326 audit(1763178538.054:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f1e6f9ef6c9 code=0x7ffc0000 [ 71.631106][ T29] audit: type=1326 audit(1763178538.054:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6f9ef6c9 code=0x7ffc0000 [ 71.663696][ T4842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.375'. [ 71.679841][ T4853] loop2: detected capacity change from 0 to 512 [ 71.716198][ T4853] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.376: iget: bad extra_isize 90 (inode size 256) [ 71.735100][ T4853] EXT4-fs (loop2): Remounting filesystem read-only [ 71.743793][ T4853] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -30) [ 71.754607][ T4853] EXT4-fs (loop2): 1 orphan inode deleted [ 71.762520][ T4853] EXT4-fs mount: 6 callbacks suppressed [ 71.762545][ T4853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.822538][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.436624][ T4900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.395'. [ 72.474304][ T31] tipc: Subscription rejected, illegal request [ 73.146117][ T3491] tipc: Subscription rejected, illegal request [ 73.245704][ T4983] netlink: 24 bytes leftover after parsing attributes in process `syz.5.427'. [ 73.270702][ T4983] IPVS: Error connecting to the multicast addr [ 74.013525][ T5016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.442'. [ 74.023778][ T5016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.442'. [ 74.213203][ T5030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.449'. [ 74.225254][ T5030] lo speed is unknown, defaulting to 1000 [ 74.231517][ T5030] lo speed is unknown, defaulting to 1000 [ 74.239571][ T5030] lo speed is unknown, defaulting to 1000 [ 74.248647][ T5030] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 74.248832][ T5032] netlink: 184 bytes leftover after parsing attributes in process `syz.3.450'. [ 74.266681][ T5030] lo speed is unknown, defaulting to 1000 [ 74.278923][ T5030] lo speed is unknown, defaulting to 1000 [ 74.287777][ T5030] lo speed is unknown, defaulting to 1000 [ 74.295194][ T5030] lo speed is unknown, defaulting to 1000 [ 74.302916][ T5030] lo speed is unknown, defaulting to 1000 [ 74.462305][ T52] tipc: Subscription rejected, illegal request [ 74.505386][ T5050] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 74.635021][ T5054] lo speed is unknown, defaulting to 1000 [ 74.764702][ T5050] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 75.029736][ T3304] ================================================================== [ 75.038258][ T3304] BUG: KCSAN: data-race in virtqueue_disable_cb / virtqueue_disable_cb [ 75.046800][ T3304] [ 75.049228][ T3304] write to 0xffff88810196f278 of 2 bytes by interrupt on cpu 1: [ 75.056971][ T3304] virtqueue_disable_cb+0x7a/0x150 [ 75.062319][ T3304] skb_xmit_done+0x65/0x140 [ 75.066894][ T3304] vring_interrupt+0x155/0x180 [ 75.072279][ T3304] __handle_irq_event_percpu+0x9d/0x540 [ 75.078301][ T3304] handle_irq_event+0x64/0xf0 [ 75.083270][ T3304] handle_edge_irq+0x154/0x470 [ 75.088075][ T3304] __common_interrupt+0x60/0xb0 [ 75.092954][ T3304] common_interrupt+0x7e/0x90 [ 75.098000][ T3304] asm_common_interrupt+0x26/0x40 [ 75.103417][ T3304] kcsan_setup_watchpoint+0x415/0x430 [ 75.109224][ T3304] __radix_tree_delete+0x4f0/0x560 [ 75.114725][ T3304] radix_tree_delete_item+0x176/0x270 [ 75.120279][ T3304] idr_remove+0x2f/0x40 [ 75.124978][ T3304] kernfs_put+0x12d/0x250 [ 75.129717][ T3304] kernfs_remove_by_name_ns+0xa3/0x100 [ 75.135377][ T3304] sysfs_remove_group+0xa5/0x170 [ 75.140873][ T3304] sysfs_remove_groups+0x3a/0x80 [ 75.147163][ T3304] __kobject_del+0x4b/0x190 [ 75.152766][ T3304] kobject_del+0x2e/0x50 [ 75.157159][ T3304] ib_free_port_attrs+0x17b/0x260 [ 75.163909][ T3304] rdma_dev_exit_net+0x1aa/0x290 [ 75.169315][ T3304] ops_undo_list+0x27b/0x410 [ 75.174592][ T3304] cleanup_net+0x2f4/0x4f0 [ 75.180181][ T3304] process_scheduled_works+0x4ce/0x9d0 [ 75.186250][ T3304] worker_thread+0x582/0x770 [ 75.191611][ T3304] kthread+0x489/0x510 [ 75.196321][ T3304] ret_from_fork+0x122/0x1b0 [ 75.202033][ T3304] ret_from_fork_asm+0x1a/0x30 [ 75.208796][ T3304] [ 75.212427][ T3304] read to 0xffff88810196f278 of 2 bytes by task 3304 on cpu 0: [ 75.222026][ T3304] virtqueue_disable_cb+0x58/0x150 [ 75.228634][ T3304] start_xmit+0x10e/0x17a0 [ 75.235402][ T3304] dev_hard_start_xmit+0x125/0x3e0 [ 75.241334][ T3304] sch_direct_xmit+0x192/0x550 [ 75.247149][ T3304] __dev_queue_xmit+0xe9a/0x2000 [ 75.254753][ T3304] ip_finish_output2+0x77f/0x8b0 [ 75.261412][ T3304] ip_finish_output+0x114/0x2a0 [ 75.267006][ T3304] ip_output+0xbd/0x190 [ 75.273297][ T3304] __ip_queue_xmit+0xbbf/0xc00 [ 75.281332][ T3304] ip_queue_xmit+0x39/0x50 [ 75.286955][ T3304] __tcp_transmit_skb+0x17fd/0x1c10 [ 75.293682][ T3304] __tcp_send_ack+0x288/0x3b0 [ 75.299681][ T3304] tcp_send_ack+0x29/0x30 [ 75.305531][ T3304] __tcp_cleanup_rbuf+0xd3/0x2c0 [ 75.311046][ T3304] tcp_recvmsg_locked+0x1adb/0x1fe0 [ 75.316956][ T3304] tcp_recvmsg+0x128/0x480 [ 75.322920][ T3304] inet_recvmsg+0xb7/0x290 [ 75.328433][ T3304] sock_recvmsg+0xf6/0x170 [ 75.333676][ T3304] sock_read_iter+0x152/0x1a0 [ 75.338931][ T3304] vfs_read+0x64c/0x770 [ 75.343386][ T3304] ksys_read+0xda/0x1a0 [ 75.347897][ T3304] __x64_sys_read+0x40/0x50 [ 75.353147][ T3304] x64_sys_call+0x27c0/0x3000 [ 75.358052][ T3304] do_syscall_64+0xd2/0x200 [ 75.363288][ T3304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.370559][ T3304] [ 75.373003][ T3304] value changed: 0x0000 -> 0x0001 [ 75.378665][ T3304] [ 75.381190][ T3304] Reported by Kernel Concurrency Sanitizer on: [ 75.387998][ T3304] CPU: 0 UID: 0 PID: 3304 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 75.400325][ T3304] Tainted: [W]=WARN [ 75.406012][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 75.419017][ T3304] ================================================================== [ 75.673590][ T5073] lo speed is unknown, defaulting to 1000