last executing test programs: 1m36.969827075s ago: executing program 3 (id=654): socket$inet_dccp(0x2, 0x6, 0x0) r0 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = syz_io_uring_setup(0x164, &(0x7f0000000480)={0x0, 0xd814, 0x8, 0x80000000, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @remote, 0x3}, 0x1c) r5 = syz_io_uring_setup(0x7d9e, &(0x7f00000008c0)={0x0, 0x92b2, 0x10100, 0xfffffffe, 0x21a}, &(0x7f0000000980)=0x0, &(0x7f00000001c0)=0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7040000010000008500000078000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r9}, 0x10) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x14a8}}) io_uring_enter(r5, 0x2ded, 0xf85a, 0x2d, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0xfffffffffffffffd, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fgetxattr(r10, &(0x7f00000001c0)=@random={'security.', '.}(}--\x00'}, &(0x7f00000004c0)=""/70, 0x46) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 1m36.178352036s ago: executing program 3 (id=658): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) bind$isdn_base(r0, &(0x7f00000002c0)={0x22, 0xa, 0x5a, 0x9, 0x1}, 0x6) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000050000000600000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) io_uring_setup(0x23e2, 0x0) syz_genetlink_get_family_id$nfc(0x0, r3) sendmsg$NFC_CMD_DEP_LINK_UP(r3, 0x0, 0x40) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1m35.073306632s ago: executing program 3 (id=660): openat$procfs(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_create(0x9) epoll_create1(0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000540)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x63, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x21f1, &(0x7f0000000480)={0x0, 0x400000, 0x10100, 0xfffffffb}, &(0x7f0000000200)=0x0, &(0x7f0000000400)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x2, 0x1000000, 0x2c, @mcast2, @private0, 0x7800, 0x80, 0x20003, 0x270}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[@ANYRES64=r6], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m35.013380293s ago: executing program 3 (id=665): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000002c0)={[{@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1) fallocate(r1, 0x3, 0x2, 0x8000c62) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r3, 0x8979) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x759, &(0x7f0000000180)={[{@nouid32}, {@jqfmt_vfsv1}, {@prjquota}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}, 0x0}, {@dioread_nolock}, {@user_xattr}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@journal_dev={'journal_dev', 0x3d, 0x6bd}}, {@resuid}, {@nombcache}, {@nogrpid}], [], 0x2c}, 0x2, 0x504, &(0x7f0000000c00)="$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") fdatasync(r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1c, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) 1m34.531638119s ago: executing program 3 (id=670): signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x6]}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x0) sendfile(r4, r2, 0x0, 0x100000000) 1m33.294701077s ago: executing program 3 (id=679): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000080)={[{@i_version}, {@mblk_io_submit}, {@init_itable_val={'init_itable', 0x3d, 0xba}}, {@nombcache}, {@discard}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fdatasync(r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) clock_adjtime(0x6, 0x0) 1m33.281819567s ago: executing program 32 (id=679): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000080)={[{@i_version}, {@mblk_io_submit}, {@init_itable_val={'init_itable', 0x3d, 0xba}}, {@nombcache}, {@discard}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$eJzs281vG0UbAPBn7SR9+/FSU5WPpgUCBRHxkTRpKT1wAYHEASQkOJRjSNIq1G1QEyRaRRAQKkdUiTviiMRfwAkuCDghcYU7qlShXFrgYrTZ3cR27LQOTlzw7ydtMrM7zszj3bFnZ7IB9K2R9EcSsS8ifomI/Vm2scBI9uvmytL0HytL00nUaq//nqyWu7GyNF0ULV63t8gMRJQ+TuJwi3oXLl0+N1Wtzl7M8+OL598ZX7h0+em581NnZ8/OXpg8derE8YlnT04+05U407huDL8/f+TQy29efXX69NW3fvgqKeJviqNLRjY7+Fit1uXqeuv/delkoIcNoSPlrJvG4Gr/3x/lWD95++Olj3raOGBb1Wq12r3tDy/XgP+wJHrdAqA3ii/69P632HZo6HFHuP58dgOUxn0z37IjA1HKyww23d9200hEnF7+8/N0i+2ZhwAAaPBNOv55Kh//NSz8lKJ+XuiufA2lEhF3R8SBiDgZEQcj4p6I1bL3RcT9HdbfvEiycfxTutbhn+xIOv57Ll/bahz/FaO/qJQj/iqGy5UYTM7MVWeP5e/JaAzuSvMTm9Tx7Ys/f9ruWP34L93S+ouxYN6OawO7Gl8zM7U49U9irnf9w4jhgVbxJ2srAellcSgihrdYx9wTXx5pd+zW8Tcaqs90YZ2p9kXE49n5X46m+AvJ5uuT4/+L6uyx8eKq2OjHn6681q7+TuPvtvT872l5/a/FX0nq12sXOq/jyq+ftL2n2er1P5S80bDvvanFxYsTEUPJK1mj6/dPNpWbXC+fxj96tHX/PxDr78ThiEgv4gci4sGIeChv+8MR8UhEHN0k/u9fePTtxj1JB/FvrzT+mY7O/3piKJr3tE6Uz333dUOllegg/vT8n1hNjeZ7bufz73batbWrGQAAAP59ShGxL5LS2Fq6VBoby/6H/2DsKVXnFxafPDP/7oWZ7BmBSgyWipmubD44mw+dyG/ri/xkU/54Pm/8WXn3an5ser460+vgoc/tbdP/U7+Ve906YNt5Xgv6l/4P/Uv/h/6l/0P/atH/d/eiHcDOa/X9/0EP2gHsvKb+b9kP+oj7f+hf+j/0L/0f+tLC7rj1Q/ISEhsSUbojmiGxTYlefzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0x98BAAD///1B6is=") lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fdatasync(r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) clock_adjtime(0x6, 0x0) 4.678617724s ago: executing program 0 (id=1299): openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1a002, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) unshare(0x2050000) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xc9, &(0x7f0000000000), &(0x7f00000001c0)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r2}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000002000000ff0f000007", @ANYRES8=r2], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000004c0)=ANY=[], &(0x7f0000002380)='GPL\x00', 0x6, 0xffffffffffffff44, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = io_uring_setup(0x6243, &(0x7f0000000300)={0x0, 0x342d, 0x1000, 0x0, 0x3d4}) r6 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r6, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r6, 0x3) r7 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r7, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x18) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f0000000540)={&(0x7f0000000380)=@name={0x1e, 0x2, 0x3, {{0x0, 0x4}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2aaa12fb1c658c08}, 0x4000041) 4.105767082s ago: executing program 2 (id=1301): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) connect$qrtr(0xffffffffffffffff, &(0x7f00000002c0)={0x2a, 0x6, 0xfffffffe}, 0xc) syz_io_uring_setup(0x36ec, &(0x7f0000000840)={0x0, 0x8083, 0x8, 0x3, 0x288}, &(0x7f0000000340), &(0x7f0000000280)) socket$inet_tcp(0x2, 0x1, 0x0) r6 = shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) shmget$private(0x0, 0x11000, 0x0, &(0x7f0000fec000/0x11000)=nil) shmdt(r6) 4.104743792s ago: executing program 4 (id=1302): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x1020c00, &(0x7f00000022c0), 0x1, 0x439, &(0x7f0000002380)="$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") lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00') r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r3}, 0x10) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r5 = syz_io_uring_setup(0x34fc, &(0x7f0000000400)={0x0, 0x645c, 0x800, 0x400022, 0x250}, &(0x7f0000000080)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x1c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x4080}) syz_io_uring_setup(0x3c00, &(0x7f00000005c0)={0x0, 0x8ecf, 0x10, 0x1, 0x2ef}, 0x0, 0x0) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000140)=0x8) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000002010400d57b00000000000a000000040001800400b380180002801400018008000100e00000020800022700000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 3.765335097s ago: executing program 2 (id=1304): mkdir(&(0x7f00000001c0)='./file0\x00', 0xa0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000040)) r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r0, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10, 0x80800) sendmsg$tipc(r1, &(0x7f0000000580)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x1}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="b5fe3dd5448b21b58ee75dcd7fca80effae6a9316b2122c965", 0x19}, {0x0}, {&(0x7f0000000380)="925cb330bef0699f9e7cd3d22049b5ddf0c6a17c9a0a85bf160b91c9a1a05814ee32cc0c4888ac77c49f0cfe32414efc4efe4c107e423a06153f5c61896fb6a507299ab505ef2f0361296b4740fb96aa5f1109faed12ed3bd5c62e8802e3a1bfb0c7e8f29d5f746b70bf8222116e28b04fd6c9f2af417c9b5b8f6add5d5b7f881f8f5946e5b6c8cceef7d1a562b0eb99ea9c4550cbf7686716e800d3f51678caa97f31a0a09d021a286ff3f0b3834625a2d29da2a822b28e62ee6779ed777df8056ce9b20bf1d407ef1ed7b898cacafa07c6174f1de156fe88bc2f1f1743ffa9d7018fcf63eeb6b90368f0b8c2c5d18491d9ae036be930", 0xf7}], 0x3, 0x0, 0x0, 0x40000c0}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) readahead(0xffffffffffffffff, 0x4, 0x81) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000ff0000000000faffff0318110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = io_uring_setup(0x1783, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x400, 0x2b3}) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0xf00, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000540)='kfree\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 3.753326117s ago: executing program 5 (id=1305): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r0) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00'}, 0x78) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) socket$xdp(0x2c, 0x3, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f0000000300)=ANY=[@ANYBLOB="3057000001"]) keyctl$search(0xa, r0, &(0x7f0000000400)='logon\x00', &(0x7f0000000440)={'syz', 0x2}, r1) r3 = syz_open_dev$vcsn(&(0x7f0000000180), 0x1, 0x521042) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$rds(0x15, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYBLOB="5953fdfffffffddbdf256b"], 0x28}}, 0x0) read$eventfd(r3, &(0x7f0000000080), 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x30410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30c3a0e4, 0x1, @perf_config_ext={0x20000000000000, 0x1}, 0x11d08, 0x2, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = io_uring_setup(0x503e, &(0x7f0000000f40)={0x0, 0x698c, 0x100, 0x2, 0xfffffffe}) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000000140)={0x5b, 0x0, 0x0, 0x0, 0x0}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 3.608211589s ago: executing program 2 (id=1306): socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500142f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa20", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)='dax\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x30}}, 0x24008880) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x0, 0x0, @dev, @private=0x10000}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x4, &(0x7f0000000300)=[{0x1, 0xff, 0x1, 0x2}, {0x76, 0x0, 0x0, 0x6}, {0xda, 0x7, 0x6}, {0x9, 0x9, 0x40, 0x1}]}) gettid() 3.57045183s ago: executing program 5 (id=1307): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r4}, 0x10) setitimer(0x2, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000300), 0x3, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000000340)={0x101, 0x2, "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"}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x80}) pidfd_send_signal(r8, 0x3f, &(0x7f0000000540)={0x2d, 0x1000, 0x6}, 0x0) ppoll(&(0x7f0000000080)=[{r6, 0x9000}, {r1, 0x8088}, {r5, 0x121d}, {r8, 0x8000}], 0x4, &(0x7f0000000240)={0x0, 0x3938700}, &(0x7f00000002c0)={[0x6]}, 0x8) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xad}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r9, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x17, 0x7f, 0x35e}, 0x8, 0x9, 0x3, 0x0, 0x0, 0x101, 0x0}) 2.948152758s ago: executing program 5 (id=1308): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x10, 0x5, 0x10000000, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0xc, 0x0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0x1e, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000100000018110000", @ANYRES32, @ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000f20000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000085000000140000001800000001000000000000008000000018680000100000000000000007000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x8880, 0x48, &(0x7f0000000440)=""/72, 0x41000, 0x4, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xc, 0x20000, 0x788964f9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0xda, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x3, &(0x7f0000001bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0xe2, &(0x7f00000001c0)=""/226, 0x40f00, 0x11, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r3, 0x0, 0x0, &(0x7f00000006c0), 0x10, 0x4e0, @void, @value}, 0x94) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r9 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r8, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r7, &(0x7f0000000640)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000014}, 0xc080) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r7, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x48, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devtty_t:s0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x20000004) ptrace(0x10, r10) ptrace$getregset(0x4205, r10, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x13, r11, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000019c0)=@bpf_ext={0x1c, 0xf, &(0x7f0000001c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x35bbebad}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x2}, @alu={0x4, 0x0, 0x4, 0xa, 0x0, 0xffffffffffffffe0, 0xfffffffffffffff0}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xc}, @cb_func={0x18, 0xd, 0x4, 0x0, 0xfffffffffffffffc}, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41000, 0x3, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001980)={0x1, 0x3, 0x3, 0x4}, 0x10, 0x1d73f, 0xffffffffffffffff, 0x5, &(0x7f0000001c80)=[r4, r4], &(0x7f0000001cc0)=[{0x0, 0x3, 0x10, 0x5}, {0x4, 0x5, 0x10, 0x5}, {0x2, 0x2, 0x3, 0x7}, {0x0, 0x1}, {0x2, 0x2, 0xf, 0x8}], 0x10, 0x0, @void, @value}, 0x94) 2.947701498s ago: executing program 4 (id=1309): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x106, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x0, 0x10000}, 0x1ba1, 0xfffffffd, 0x3, 0x7, 0x4, 0x1088f105, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYRES8], &(0x7f0000000900)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r2, 0x0, 0x400000000000}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000740)={[{@errors_remount}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@dioread_lock}, {@data_err_ignore}, {@mblk_io_submit}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@noblock_validity}, {@nojournal_checksum}]}, 0x1, 0x553, &(0x7f0000001080)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="02000000010002000000000002000500", @ANYRES32=0x0, @ANYBLOB="02000400bcd8c61b31b7cb86c2becfd5134975dd60ef3e388d4737a340be281905693a2f94a528b246d369f0aa3cff0c1a3db63f486cf0e522d96becb95e361ed0aeac078f6fec9d79b9ba9d4d10b7802a4fdf4ca8085de603c714b0156df16845f1ebe7b66fdb21650a536255b3ae7a1a774c59045152cddd4341fb69fb8a166721bc6a2728647d607fc674c5a002e51b9f515e711f1790a75a123731120e8a516ca27fbeb337365aab17ed0ff6528795b007a0", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="040000000000000010000500000000002000000000000000"], 0x3c, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x10001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f0000000180)={0x9, 'vlan1\x00'}) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2.456955065s ago: executing program 5 (id=1310): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffc}]}) r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0) splice(r3, 0x0, r6, 0x0, 0x25a5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) write$P9_RVERSION(r4, &(0x7f0000000380)=ANY=[], 0x15) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0x9, 0x1, 0xa, 0x10}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x1000a4, 0x100078}, 0x20) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000280)='./bus\x00', 0x1) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 2.281257978s ago: executing program 4 (id=1312): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x75}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00'}, 0x10) syslog(0x2, &(0x7f0000000240)=""/241, 0xf1) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port0\x00', 0x100, 0x60004, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x3, 0x80005, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa041, 0x0, 0x20000, 0xfffffffffffffffd, 0x5, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0x25, 0x60041, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x9}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 1.922740363s ago: executing program 2 (id=1313): bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[], 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0x4}, {0x0, 0xa}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x7ffffffd}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000440)={'#! ', './file1'}, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000780)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x140) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000800)={0x2, 0x0, 0x6, 0x3}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"]) 1.920868083s ago: executing program 0 (id=1324): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = inotify_init() r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[], 0x69) close(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2002, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800dfff32cfbb1600000000fcffffff18110100", @ANYRES32=r4, @ANYRESOCT=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000002080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) r6 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.745360985s ago: executing program 5 (id=1315): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000ac0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe8e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e23, 0x81, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}}, 0x38f7, 0x3, 0x100, 0x4, 0x62, 0x1}, 0x9c) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000300)={0x0, {}, 0x0, {}, 0x0, 0xa, 0xa, 0x8, "e94d591b06d9924b0e461f45d0917595729e5640fc7793a002e6a69b2a6e769bd806c933c1fdd468aff8db19f2fe0733bd4a8f438cb1cb4d683adf8997ceed65", "84a56459f86018f51581dae279233391899da0fb87d717d5d6fd362fb34c2e83", [0x8, 0xffff]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @remote, 0x3}, 0x1c) r5 = epoll_create1(0x0) epoll_pwait(r5, 0x0, 0x0, 0x101, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="09000000cc7228cd8c1c2f6bed2abc24ce9c04000020018000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r7, 0x0, 0x0) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 1.698845336s ago: executing program 0 (id=1316): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet(0x2, 0x4000000000000001, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) io_uring_setup(0x2007884, &(0x7f0000000500)={0x0, 0x19, 0x10, 0xfffffffe, 0x5c}) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.565440518s ago: executing program 4 (id=1317): mkdir(&(0x7f00000001c0)='./file0\x00', 0xa0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000040)) r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r0, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10, 0x80800) sendmsg$tipc(r1, &(0x7f0000000580)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x1}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="b5fe3dd5448b21b58ee75dcd7fca80effae6a9316b2122c965", 0x19}, {0x0}, {&(0x7f0000000380)="925cb330bef0699f9e7cd3d22049b5ddf0c6a17c9a0a85bf160b91c9a1a05814ee32cc0c4888ac77c49f0cfe32414efc4efe4c107e423a06153f5c61896fb6a507299ab505ef2f0361296b4740fb96aa5f1109faed12ed3bd5c62e8802e3a1bfb0c7e8f29d5f746b70bf8222116e28b04fd6c9f2af417c9b5b8f6add5d5b7f881f8f5946e5b6c8cceef7d1a562b0eb99ea9c4550cbf7686716e800d3f51678caa97f31a0a09d021a286ff3f0b3834625a2d29da2a822b28e62ee6779ed777df8056ce9b20bf1d407ef1ed7b898cacafa07c6174f1de156fe88bc2f1f1743ffa9d7018fcf63eeb6b90368f0b8c2c5d18491d9ae036be930", 0xf7}], 0x3, 0x0, 0x0, 0x40000c0}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) readahead(0xffffffffffffffff, 0x4, 0x81) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000ff0000000000faffff0318110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = io_uring_setup(0x1783, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x400, 0x2b3}) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0xf00, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000540)='kfree\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1.564714628s ago: executing program 0 (id=1329): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = dup2(r6, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000000008010800000000000000000100000505000300060000000900010073797a300000000006000240006000002c0004800800014000000003080006"], 0x5c}, 0x1, 0x0, 0x0, 0x4078}, 0x4000180) splice(r3, 0x0, r5, 0x0, 0x7, 0x9) write$P9_RWRITE(r5, &(0x7f0000000040)={0xb}, 0x11000) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read(r4, &(0x7f0000032440)=""/102364, 0x18fdc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) syz_pidfd_open(0x0, 0x0) 1.564424508s ago: executing program 2 (id=1318): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000600)={[{@noblock_validity}, {@noblock_validity}, {@norecovery}, {@nodelalloc}, {@abort}], [{@dont_hash}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x68040200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 1.555177568s ago: executing program 1 (id=1319): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x1020c00, &(0x7f00000022c0), 0x1, 0x439, &(0x7f0000002380)="$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") lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00') r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r3}, 0x10) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r5 = syz_io_uring_setup(0x34fc, &(0x7f0000000400)={0x0, 0x645c, 0x800, 0x400022, 0x250}, &(0x7f0000000080)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x1c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x4080}) syz_io_uring_setup(0x3c00, &(0x7f00000005c0)={0x0, 0x8ecf, 0x10, 0x1, 0x2ef}, 0x0, 0x0) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000140)=0x8) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000002010400d57b00000000000a000000040001800400b380180002801400018008000100e00000020800022700000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 990.504886ms ago: executing program 1 (id=1321): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x10, 0x5, 0x10000000, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0xc, 0x0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0x1e, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000100000018110000", @ANYRES32, @ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000f20000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000085000000140000001800000001000000000000008000000018680000100000000000000007000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x8880, 0x48, &(0x7f0000000440)=""/72, 0x41000, 0x4, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xc, 0x20000, 0x788964f9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0xda, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x3, &(0x7f0000001bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0xe2, &(0x7f00000001c0)=""/226, 0x40f00, 0x11, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r3, 0x0, 0x0, &(0x7f00000006c0), 0x10, 0x4e0, @void, @value}, 0x94) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r9 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r8, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r7, &(0x7f0000000640)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000014}, 0xc080) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r7, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x48, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devtty_t:s0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x20000004) ptrace(0x10, r10) ptrace$getregset(0x4205, r10, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x13, r11, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000019c0)=@bpf_ext={0x1c, 0xf, &(0x7f0000001c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x35bbebad}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x2}, @alu={0x4, 0x0, 0x4, 0xa, 0x0, 0xffffffffffffffe0, 0xfffffffffffffff0}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xc}, @cb_func={0x18, 0xd, 0x4, 0x0, 0xfffffffffffffffc}, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41000, 0x3, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001980)={0x1, 0x3, 0x3, 0x4}, 0x10, 0x1d73f, 0xffffffffffffffff, 0x5, &(0x7f0000001c80)=[r4, r4], &(0x7f0000001cc0)=[{0x0, 0x3, 0x10, 0x5}, {0x4, 0x5, 0x10, 0x5}, {0x2, 0x2, 0x3, 0x7}, {0x0, 0x1}, {0x2, 0x2, 0xf, 0x8}], 0x10, 0x0, @void, @value}, 0x94) 990.043336ms ago: executing program 4 (id=1322): r0 = io_uring_setup(0x7884, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000940), 0x0, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f00000001c0)={[{@jqfmt_vfsv0}, {}, {@mb_optimize_scan}, {@bsdgroups}, {@orlov}, {@grpjquota, 0x2e}, {@jqfmt_vfsv0}, {@debug}, {@nomblk_io_submit}, {@orlov}], [], 0x2c}, 0x0, 0x4c0, &(0x7f0000000600)="$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") r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB, @ANYRES32=r2], 0x1c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 847.160398ms ago: executing program 5 (id=1323): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x1022400, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$eJzs3UFrE1sYxvGnTW+TprTJhcuFe0E96EY3oY0fQIO0IAaU2hR1IUztREPGpMyESkRsNuLWD+Gq6M6doC7ddCNu3LsrguCmC3HETNImbVrTNklj+/9BmTd5z8OcttPyptDJ2o1n9/NZL5G1ShqMGA1KFa1L8V9VzUDtOFith9WoonOj3z6duH7z1pVUOj01Y8x0avZ80hgzfurNg0cvTr8rjc69Gn8d1mr89trX5OfVf1f/W/sxey/nmZxnCsWSscx8sViy5h3bLOS8fMKYa45tebbJFTzbbepnneLiYtlYhYWx6KJre56xCmWTt8umVDQlt2ysu1auYBKJhBmL6ngbamNNZmVmxkrt2PZDHd0Rum6k1ZOum6q0bmZWerAnAADQZ3af/4NZf+f5Pz0XHNua/18+l9qb/6VOzv8DPf2C9rlK06PfzP84Elw3ZUVrP7/NmP8BAAAAAAAAAAAAAAAAAAAAAPgTrPt+zPf9WP1Y/whLikiqPz7sfaI79vn9v3BI20WHNfzjXkRyni5lljLBMeinssrJka0JxfS9ej3UBPX05fTUhKmK662zXMsvL2VCCtfzdfFW+ZN/TwZ505z/S9HG8ycV0z+tz59smR/W2TMN+YRi+nBHRTlaqF7Xm/nHk8Zcuprekh+prgMAAAAA4ChImA3bXr9X+9UFEW3vB/k9/H1gy+vrIf3fzi0qAQAAAADAgXnlh3nLcWx3H0VY0gHieyj8ga6fonNFSH2xjS3FRUl9sI1eFRFJwTNmP/EvG/G2Un4ba4YkHfTzivTw0jrs30wAAAAAOm1z6N9D6OOTLu4IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDjp937gdXXb2vVG7vEG04X0vuNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjp2fAQAA//91iCZA") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x740, 0x140) close(r2) r3 = syz_io_uring_setup(0xfbb, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10000, 0x5, 0x1a6}, &(0x7f0000000100), &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2000004, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a03000000000000000000010000000900010073797a30000000000900020073797a300000000014000380080001400000000008000240000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xe4}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e20, 0x3, @empty, 0xbde}}, 0x2, 0x0, 0x2d, 0x0, "598ae7732e1e01bd123f7e8050b93adc9cb9750e8a2f49a3d1c23b9e3d6dc52fc09a86dfe42bf69380a09be4758a9bae36a3a4c787d16a19efb30b0d000000b2f201c65500"}, 0xd8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x7fffffff, @loopback, 0x9}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200080, &(0x7f0000000040)={[{@jqfmt_vfsv1}]}, 0x1, 0x56c, &(0x7f0000000940)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) 320.421366ms ago: executing program 4 (id=1325): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r0) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00'}, 0x78) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) socket$xdp(0x2c, 0x3, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f0000000300)=ANY=[@ANYBLOB="3057000001"]) keyctl$search(0xa, r0, &(0x7f0000000400)='logon\x00', &(0x7f0000000440)={'syz', 0x2}, r1) r3 = syz_open_dev$vcsn(&(0x7f0000000180), 0x1, 0x521042) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$rds(0x15, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYBLOB="5953fdfffffffddbdf256b"], 0x28}}, 0x0) read$eventfd(r3, &(0x7f0000000080), 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x30410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30c3a0e4, 0x1, @perf_config_ext={0x20000000000000, 0x1}, 0x11d08, 0x2, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = io_uring_setup(0x503e, &(0x7f0000000f40)={0x0, 0x698c, 0x100, 0x2, 0xfffffffe}) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000000140)={0x5b, 0x0, 0x0, 0x0, 0x0}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 318.369175ms ago: executing program 0 (id=1336): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x6, @perf_config_ext={0x3, 0x9}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, 0x0, &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = memfd_secret(0x80000) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000008000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) time(0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000540)={0x0, @broadcast, @multicast1}, &(0x7f0000000580)=0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000d80)=@updsa={0x22c, 0x1a, 0x0, 0x70bd2c, 0x25dfdbfb, {{@in=@broadcast, @in6=@local, 0x4e24, 0x8, 0x4e20, 0x9, 0xa, 0x20, 0xc0, 0x3b, r6}, {@in=@multicast1, 0x4d4, 0x33}, @in6=@mcast1, {0x8, 0x7, 0xff, 0xe85, 0x3355, 0x8, 0x0, 0x3017}, {0x9, 0x9, 0x2, 0x8}, {0x7, 0x5, 0xc5ff}, 0x70bd26, 0x0, 0xa, 0x4, 0x8, 0x10}, [@algo_auth={0x139, 0x1, {{'md5-generic\x00'}, 0x788, "044da9f16b7235da5f76b5c963f526583d847762c63078f0090525a4d155f5fad071c350e09af73ad8809a4f2dd5233a4889f321c02f76e00a83052a55ecf12cd96b7edc7952831f9adb90c0970ba08f364a59a98fb57c025f56f0df64272fb56facc6923a5ff53ba057c9abb1abe03a9661249ecf5eef85a043a31a8275e4cfedf32c29cc87dc3b6a5107e871459683417f0749c28eb84dc31931fcafc20bccbfc6d91a511b70464dc02aacbac52e9841807f9c62c551869053fe98d9184f85372219e64904ba824b49235697f3201640bf99b3ebff72a396b2117b99fba96bccb8b2cc8295ca5d9dc8ae961456f96e7a"}}]}, 0x22c}, 0x1, 0x0, 0x0, 0x5}, 0x4040080) syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x0) 317.439635ms ago: executing program 1 (id=1326): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 252.308616ms ago: executing program 1 (id=1327): r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='hrtimer_start\x00'}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x80) creat(0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$selinux_user(r3, &(0x7f0000000300)={'system_u:object_r:tun_tap_device_t:s0', 0x20, 'unconfined_u\x00'}, 0x33) fsmount(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) 63.207129ms ago: executing program 1 (id=1328): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = inotify_init() r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[], 0x69) close(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2002, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800dfff32cfbb1600000000fcffffff18110100", @ANYRES32=r4, @ANYRESOCT=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000002080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) r6 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) 48.644759ms ago: executing program 2 (id=1330): gettid() openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x2) 952.32µs ago: executing program 1 (id=1331): bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[], 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0x4}, {0x0, 0xa}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x7ffffffd}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000440)={'#! ', './file1'}, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000780)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x140) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000800)={0x2, 0x0, 0x6, 0x3}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"]) 0s ago: executing program 0 (id=1342): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = inotify_init() r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[], 0x69) close(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2002, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800dfff32cfbb1600000000fcffffff18110100", @ANYRES32=r4, @ANYRESOCT=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000002080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) r6 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) kernel console output (not intermixed with test programs): process `wÞ£ÿ'. [ 115.538003][ T5628] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 115.538003][ T5628] program syz.0.626 not setting count and/or reply_len properly [ 115.569368][ T5628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.626'. [ 115.578385][ T5628] netlink: 16 bytes leftover after parsing attributes in process `syz.0.626'. [ 115.587553][ T5628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.626'. [ 115.598067][ T5628] netlink: 16 bytes leftover after parsing attributes in process `syz.0.626'. [ 115.607050][ T5628] netlink: 5 bytes leftover after parsing attributes in process `syz.0.626'. [ 115.934324][ T5641] lo speed is unknown, defaulting to 1000 [ 116.991443][ T5653] lo speed is unknown, defaulting to 1000 [ 117.000433][ T29] kauditd_printk_skb: 744 callbacks suppressed [ 117.000534][ T29] audit: type=1326 audit(1747533895.083:5992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f37b0b5ab39 code=0x7ffc0000 [ 117.287597][ T5657] SELinux: syz.4.635 (5657) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 117.388925][ T5658] smc: net device bond0 applied user defined pnetid SYZ2 [ 117.429320][ T5657] smc: net device bond0 erased user defined pnetid SYZ2 [ 117.715585][ T29] audit: type=1326 audit(1747533895.343:5993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f37b0b5ab39 code=0x7ffc0000 [ 117.739295][ T29] audit: type=1326 audit(1747533895.343:5994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f37b0b5ab39 code=0x7ffc0000 [ 117.762747][ T29] audit: type=1326 audit(1747533895.343:5995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f37b0b5ab39 code=0x7ffc0000 [ 117.786240][ T29] audit: type=1326 audit(1747533895.343:5996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f37b0b5ab39 code=0x7ffc0000 [ 117.810025][ T29] audit: type=1326 audit(1747533895.343:5997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f37b0b5ab39 code=0x7ffc0000 [ 117.833607][ T29] audit: type=1326 audit(1747533895.343:5998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f37b0b5ab39 code=0x7ffc0000 [ 117.857054][ T29] audit: type=1326 audit(1747533895.343:5999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f37b0b5ab39 code=0x7ffc0000 [ 117.881191][ T29] audit: type=1326 audit(1747533895.343:6000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f37b0b5ab39 code=0x7ffc0000 [ 117.904657][ T29] audit: type=1326 audit(1747533895.343:6001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f37b0b5ab39 code=0x7ffc0000 [ 117.950432][ T5661] lo speed is unknown, defaulting to 1000 [ 118.268991][ T5670] loop4: detected capacity change from 0 to 512 [ 118.305051][ T5670] EXT4-fs: Ignoring removed i_version option [ 118.311126][ T5670] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.325060][ T5675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.640'. [ 118.334044][ T5675] netlink: 16 bytes leftover after parsing attributes in process `syz.1.640'. [ 118.343076][ T5675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.640'. [ 118.421367][ T5680] netem: change failed [ 119.542049][ T5720] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5720 comm=+}[@ [ 119.554376][ T5720] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5720 comm=+}[@ [ 120.539864][ T5735] netlink: 'syz.3.658': attribute type 10 has an invalid length. [ 120.547990][ T5735] __nla_validate_parse: 5 callbacks suppressed [ 120.548007][ T5735] netlink: 40 bytes leftover after parsing attributes in process `syz.3.658'. [ 120.597410][ T5735] !: entered promiscuous mode [ 120.610771][ T5735] bridge0: port 3(0!) entered blocking state [ 120.617313][ T5735] bridge0: port 3(0!) entered disabled state [ 120.640127][ T5735] !: entered allmulticast mode [ 121.687625][ T5745] loop3: detected capacity change from 0 to 512 [ 121.723233][ T5745] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 121.749497][ T5745] EXT4-fs (loop3): invalid journal inode [ 121.763201][ T5748] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.766606][ T5745] EXT4-fs (loop3): can't get journal size [ 121.776891][ T5748] bridge0: port 3(bond1) entered blocking state [ 121.783465][ T5748] bridge0: port 3(bond1) entered disabled state [ 121.810377][ T5748] bond1: entered allmulticast mode [ 121.827892][ T5745] EXT4-fs (loop3): 1 truncate cleaned up [ 121.838628][ T5748] bond1: entered promiscuous mode [ 121.871522][ T5745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.006101][ T5760] loop4: detected capacity change from 0 to 512 [ 122.067065][ T5760] EXT4-fs (loop4): write access unavailable, skipping orphan cleanup [ 122.076796][ T5760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 122.103266][ T29] kauditd_printk_skb: 548 callbacks suppressed [ 122.103284][ T29] audit: type=1400 audit(1747533900.403:6550): avc: denied { remove_name } for pid=3324 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.133716][ T29] audit: type=1400 audit(1747533900.403:6551): avc: denied { rmdir } for pid=3324 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.159700][ T29] audit: type=1400 audit(1747533900.473:6552): avc: denied { unlink } for pid=3324 comm="syz-executor" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 122.185574][ T3324] EXT4-fs error (device loop3): ext4_lookup:1789: inode #14: comm syz-executor: invalid fast symlink length 39 [ 122.198043][ T3324] EXT4-fs error (device loop3): ext4_lookup:1789: inode #14: comm syz-executor: invalid fast symlink length 39 [ 122.233049][ T29] audit: type=1326 audit(1747533900.493:6553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5742 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eaa42e969 code=0x7ffc0000 [ 122.262947][ T29] audit: type=1326 audit(1747533900.533:6554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5742 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eaa42e969 code=0x7ffc0000 [ 122.289738][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.454849][ T29] audit: type=1400 audit(1747533900.763:6555): avc: denied { create } for pid=5770 comm="syz.4.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 122.493868][ T29] audit: type=1400 audit(1747533900.793:6556): avc: denied { cpu } for pid=5770 comm="syz.4.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 122.933383][ T29] audit: type=1326 audit(1747533901.233:6557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.1.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eaa42e969 code=0x7ffc0000 [ 122.960803][ T29] audit: type=1326 audit(1747533901.233:6558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.1.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eaa42e969 code=0x7ffc0000 [ 123.035692][ T3500] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.200073][ T29] audit: type=1326 audit(1747533901.303:6559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.1.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f0eaa42e969 code=0x7ffc0000 [ 123.317692][ T5783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.676'. [ 123.330167][ T5783] team_slave_0: left promiscuous mode [ 123.351741][ T5783] team0 (unregistering): Port device team_slave_0 removed [ 123.360810][ T5783] team_slave_1: left promiscuous mode [ 123.370772][ T5783] team0 (unregistering): Port device team_slave_1 removed [ 123.406515][ T5790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.680'. [ 123.450356][ T5792] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.459307][ T5792] bridge0: port 4(bond1) entered blocking state [ 123.465926][ T5792] bridge0: port 4(bond1) entered disabled state [ 123.513317][ T5792] bond1: entered allmulticast mode [ 123.692310][ T5792] bond1: entered promiscuous mode [ 123.805827][ T5794] lo speed is unknown, defaulting to 1000 [ 124.406943][ T5802] lo speed is unknown, defaulting to 1000 [ 124.623375][ T5819] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 124.641814][ T5810] loop4: detected capacity change from 0 to 164 [ 124.683142][ T5810] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 124.852235][ T5175] !: left allmulticast mode [ 124.935656][ T5175] bridge0: port 3(0!) entered disabled state [ 125.019809][ T5175] bridge_slave_1: left allmulticast mode [ 125.026084][ T5175] bridge_slave_1: left promiscuous mode [ 125.032323][ T5175] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.139704][ T5175] bridge_slave_0: left allmulticast mode [ 125.145762][ T5175] bridge_slave_0: left promiscuous mode [ 125.152249][ T5175] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.278972][ T5175]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.289511][ T5175]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.299117][ T5175]  (unregistering): Released all slaves [ 125.351137][ T5175] tipc: Disabling bearer [ 125.356769][ T5175] tipc: Left network mode [ 125.419218][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 125.511162][ T5175] team0 (unregistering): Port device team_slave_1 removed [ 125.521933][ T5175] team0 (unregistering): Port device team_slave_0 removed [ 125.579958][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.587348][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.595450][ T5802] bridge_slave_0: entered allmulticast mode [ 125.602283][ T5802] bridge_slave_0: entered promiscuous mode [ 125.609692][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.617107][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.624363][ T5802] bridge_slave_1: entered allmulticast mode [ 125.631137][ T5802] bridge_slave_1: entered promiscuous mode [ 125.650844][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.662135][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.685913][ T5802] team0: Port device team_slave_0 added [ 125.693035][ T5802] team0: Port device team_slave_1 added [ 125.714628][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.722100][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.748712][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.760746][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.768071][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.794456][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.829102][ T5802] hsr_slave_0: entered promiscuous mode [ 125.835725][ T5802] hsr_slave_1: entered promiscuous mode [ 125.841757][ T5802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.850440][ T5802] Cannot create hsr debugfs directory [ 125.883040][ T5175] IPVS: stop unused estimator thread 0... [ 125.939728][ T5879] netlink: 'syz.4.688': attribute type 10 has an invalid length. [ 125.947706][ T5879] netlink: 40 bytes leftover after parsing attributes in process `syz.4.688'. [ 125.963047][ T5879] bridge0: port 4(dummy0) entered blocking state [ 125.969727][ T5879] bridge0: port 4(dummy0) entered disabled state [ 125.977314][ T5879] dummy0: entered allmulticast mode [ 125.983289][ T5879] dummy0: left allmulticast mode [ 125.988793][ T5879] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 126.052642][ T5888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.691'. [ 126.062746][ T5888] netlink: 116 bytes leftover after parsing attributes in process `syz.2.691'. [ 126.083017][ T5890] loop4: detected capacity change from 0 to 512 [ 126.109172][ T5890] sd 0:0:1:0: device reset [ 126.109476][ T5802] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 126.127422][ T5890] netlink: 60 bytes leftover after parsing attributes in process `syz.4.692'. [ 126.142893][ T5802] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 126.154818][ T5802] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 126.198131][ T5802] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 126.214249][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.221400][ T5802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.228991][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.236093][ T5802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.281851][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.301229][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.324631][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.335231][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.372720][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.380065][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.434618][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.441901][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.465994][ T5918] program syz.4.695 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.540590][ T5802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.652198][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.056250][ T5802] veth0_vlan: entered promiscuous mode [ 127.078520][ T5802] veth1_vlan: entered promiscuous mode [ 127.093955][ T5978] netlink: 'syz.1.704': attribute type 10 has an invalid length. [ 127.101790][ T5978] netlink: 40 bytes leftover after parsing attributes in process `syz.1.704'. [ 127.137323][ T5802] veth0_macvtap: entered promiscuous mode [ 127.149695][ T5802] veth1_macvtap: entered promiscuous mode [ 127.162833][ T5978] dummy0: entered promiscuous mode [ 127.173840][ T5978] bridge0: port 3(dummy0) entered blocking state [ 127.180396][ T5978] bridge0: port 3(dummy0) entered disabled state [ 127.194466][ T5978] dummy0: entered allmulticast mode [ 127.201309][ T5978] dummy0: left allmulticast mode [ 127.206813][ T5978] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 127.230226][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.243025][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.288133][ T5802] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.297106][ T5802] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.306013][ T5802] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.314864][ T5802] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.390128][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 127.390148][ T29] audit: type=1400 audit(1747533905.693:6631): avc: denied { mounton } for pid=5802 comm="syz-executor" path="/root/syzkaller.TveGC7/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 127.420893][ T29] audit: type=1400 audit(1747533905.693:6632): avc: denied { mount } for pid=5802 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 127.442868][ T29] audit: type=1400 audit(1747533905.693:6633): avc: denied { mounton } for pid=5802 comm="syz-executor" path="/root/syzkaller.TveGC7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 127.469732][ T29] audit: type=1400 audit(1747533905.693:6634): avc: denied { mounton } for pid=5802 comm="syz-executor" path="/root/syzkaller.TveGC7/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=13458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 127.517917][ T29] audit: type=1400 audit(1747533905.823:6635): avc: denied { mounton } for pid=5802 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 127.542305][ T29] audit: type=1400 audit(1747533905.823:6636): avc: denied { mount } for pid=5802 comm="syz-executor" name="/" dev="gadgetfs" ino=4109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 127.575198][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.707'. [ 127.717663][ T29] audit: type=1400 audit(1747533906.023:6637): avc: denied { create } for pid=6000 comm="syz.4.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 127.775023][ T29] audit: type=1326 audit(1747533906.043:6638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6000 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d669ee969 code=0x7ffc0000 [ 127.798130][ T29] audit: type=1326 audit(1747533906.043:6639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6000 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5d669ee969 code=0x7ffc0000 [ 127.821969][ T29] audit: type=1326 audit(1747533906.043:6640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6000 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d669ee969 code=0x7ffc0000 [ 128.889026][ T5954] netlink: 40 bytes leftover after parsing attributes in process `syz.0.702'. [ 129.096260][ T6049] loop5: detected capacity change from 0 to 128 [ 129.291481][ T6059] netlink: 'syz.5.716': attribute type 16 has an invalid length. [ 129.299315][ T6059] netlink: 'syz.5.716': attribute type 17 has an invalid length. [ 129.349423][ T6059] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.837899][ T6092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.736'. [ 129.968927][ T6102] wireguard0: entered promiscuous mode [ 129.975100][ T6102] wireguard0: entered allmulticast mode [ 130.103401][ T6106] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 130.681531][ T6111] loop5: detected capacity change from 0 to 512 [ 130.869734][ T6113] atomic_op ffff88811cf66528 conn xmit_atomic 0000000000000000 [ 130.935131][ T6111] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.987489][ T6111] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.011695][ T6111] netlink: 28 bytes leftover after parsing attributes in process `syz.5.730'. [ 131.021764][ T6111] netlink: 108 bytes leftover after parsing attributes in process `syz.5.730'. [ 131.032063][ T6111] netlink: 28 bytes leftover after parsing attributes in process `syz.5.730'. [ 131.041867][ T6111] netlink: 108 bytes leftover after parsing attributes in process `syz.5.730'. [ 131.051124][ T6111] netlink: 84 bytes leftover after parsing attributes in process `syz.5.730'. [ 131.070078][ T6130] IPVS: Error connecting to the multicast addr [ 131.144068][ T5802] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.777888][ T6119] Set syz1 is full, maxelem 65536 reached [ 133.014636][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 133.014656][ T29] audit: type=1326 audit(1747533911.313:6736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.4.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5d669e5927 code=0x7ffc0000 [ 133.044366][ T29] audit: type=1326 audit(1747533911.313:6737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.4.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5d6698ab39 code=0x7ffc0000 [ 133.071565][ T29] audit: type=1326 audit(1747533911.313:6738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.4.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f5d669ee969 code=0x7ffc0000 [ 133.522091][ T6162] sd 0:0:1:0: device reset [ 133.526859][ T29] audit: type=1326 audit(1747533911.823:6739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6161 comm="syz.0.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe123c6e969 code=0x7ffc0000 [ 133.550805][ T29] audit: type=1326 audit(1747533911.823:6740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6161 comm="syz.0.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe123c6e969 code=0x7ffc0000 [ 133.574578][ T29] audit: type=1326 audit(1747533911.823:6741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6161 comm="syz.0.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe123c6e969 code=0x7ffc0000 [ 133.599151][ T29] audit: type=1326 audit(1747533911.823:6742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6161 comm="syz.0.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe123c6e969 code=0x7ffc0000 [ 133.623117][ T29] audit: type=1326 audit(1747533911.823:6743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6161 comm="syz.0.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe123c6e969 code=0x7ffc0000 [ 133.648054][ T29] audit: type=1326 audit(1747533911.823:6744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6161 comm="syz.0.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe123c6e969 code=0x7ffc0000 [ 133.672030][ T29] audit: type=1326 audit(1747533911.823:6745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6161 comm="syz.0.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe123c6e969 code=0x7ffc0000 [ 133.698088][ T6164] bridge0: port 3(vlan0) entered blocking state [ 133.704822][ T6164] bridge0: port 3(vlan0) entered forwarding state [ 133.754428][ T6162] bridge0: port 3(vlan0) entered disabled state [ 133.761536][ T6162] bridge0: entered allmulticast mode [ 133.821778][ T6156] hsr0: entered promiscuous mode [ 133.878601][ T6160] GUP no longer grows the stack in syz.4.746 (6160): 200000004000-200000008000 (200000002000) [ 133.889281][ T6160] CPU: 1 UID: 0 PID: 6160 Comm: syz.4.746 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(voluntary) [ 133.889328][ T6160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 133.889346][ T6160] Call Trace: [ 133.889354][ T6160] [ 133.889364][ T6160] __dump_stack+0x1d/0x30 [ 133.889393][ T6160] dump_stack_lvl+0xe8/0x140 [ 133.889421][ T6160] dump_stack+0x15/0x1b [ 133.889464][ T6160] __get_user_pages+0x1758/0x1d20 [ 133.889520][ T6160] ? __rcu_read_unlock+0x4f/0x70 [ 133.889551][ T6160] get_user_pages_remote+0x1dc/0x7a0 [ 133.889602][ T6160] __access_remote_vm+0x156/0x570 [ 133.889654][ T6160] access_remote_vm+0x32/0x40 [ 133.889697][ T6160] proc_pid_cmdline_read+0x30f/0x6a0 [ 133.889747][ T6160] vfs_readv+0x3e9/0x670 [ 133.889766][ T6160] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 133.889866][ T6160] __x64_sys_preadv+0xfd/0x1c0 [ 133.889898][ T6160] x64_sys_call+0x1503/0x2fb0 [ 133.889971][ T6160] do_syscall_64+0xd0/0x1a0 [ 133.890003][ T6160] ? clear_bhb_loop+0x40/0x90 [ 133.890108][ T6160] ? clear_bhb_loop+0x40/0x90 [ 133.890144][ T6160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.890177][ T6160] RIP: 0033:0x7f5d669ee969 [ 133.890202][ T6160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.890225][ T6160] RSP: 002b:00007f5d65057038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 133.890268][ T6160] RAX: ffffffffffffffda RBX: 00007f5d66c15fa0 RCX: 00007f5d669ee969 [ 133.890355][ T6160] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 0000000000000009 [ 133.890372][ T6160] RBP: 00007f5d66a70ab1 R08: 0000000000000200 R09: 0000000000000000 [ 133.890389][ T6160] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 133.890405][ T6160] R13: 0000000000000000 R14: 00007f5d66c15fa0 R15: 00007ffedcbd7488 [ 133.890432][ T6160] [ 134.247497][ T6184] wireguard0: entered promiscuous mode [ 134.253117][ T6184] wireguard0: entered allmulticast mode [ 134.303825][ T6198] loop4: detected capacity change from 0 to 512 [ 134.456055][ T6206] loop5: detected capacity change from 0 to 256 [ 134.467967][ T6206] vfat: Unknown parameter 'shortn@me' [ 134.503566][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.5.759'. [ 134.513263][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.520872][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.529434][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.536918][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.662266][ T6218] qrtr: Invalid version 10 [ 135.038962][ T6239] netlink: 'syz.2.769': attribute type 4 has an invalid length. [ 135.378514][ T6243] loop4: detected capacity change from 0 to 2048 [ 135.389697][ T6243] EXT4-fs: Ignoring removed i_version option [ 137.006053][ T6265] loop5: detected capacity change from 0 to 2048 [ 137.025265][ T6268] loop4: detected capacity change from 0 to 512 [ 137.032371][ T6270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.775'. [ 137.055269][ T6268] EXT4-fs: Ignoring removed orlov option [ 137.095123][ T6268] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 137.124847][ T6265] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.166188][ T6268] EXT4-fs (loop4): write access unavailable, skipping orphan cleanup [ 137.197069][ T6265] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.222562][ T6268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 137.292179][ T6265] wireguard0: entered promiscuous mode [ 137.297857][ T6265] wireguard0: entered allmulticast mode [ 137.427776][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.778'. [ 137.593746][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.745084][ T5802] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.776450][ T6308] atomic_op ffff8881035ded28 conn xmit_atomic 0000000000000000 [ 138.082233][ T29] kauditd_printk_skb: 475 callbacks suppressed [ 138.082250][ T29] audit: type=1326 audit(1747533916.383:7221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6330 comm="syz.2.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b0bbe969 code=0x7ffc0000 [ 138.161701][ T29] audit: type=1326 audit(1747533916.383:7222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6330 comm="syz.2.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f37b0bbe969 code=0x7ffc0000 [ 138.185347][ T29] audit: type=1326 audit(1747533916.383:7223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6330 comm="syz.2.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b0bbe969 code=0x7ffc0000 [ 138.208864][ T29] audit: type=1326 audit(1747533916.383:7224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6330 comm="syz.2.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f37b0bbe969 code=0x7ffc0000 [ 138.232728][ T29] audit: type=1326 audit(1747533916.383:7225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6330 comm="syz.2.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b0bbe969 code=0x7ffc0000 [ 138.256238][ T29] audit: type=1326 audit(1747533916.383:7226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6330 comm="syz.2.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f37b0bbe969 code=0x7ffc0000 [ 138.279653][ T29] audit: type=1326 audit(1747533916.383:7227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6330 comm="syz.2.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b0bbe969 code=0x7ffc0000 [ 138.303179][ T29] audit: type=1326 audit(1747533916.383:7228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6330 comm="syz.2.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f37b0bbe969 code=0x7ffc0000 [ 138.326507][ T29] audit: type=1326 audit(1747533916.383:7229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6330 comm="syz.2.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b0bbe969 code=0x7ffc0000 [ 138.350044][ T29] audit: type=1326 audit(1747533916.383:7230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6330 comm="syz.2.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f37b0bbe969 code=0x7ffc0000 [ 138.779007][ T6356] loop4: detected capacity change from 0 to 512 [ 139.207924][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.794'. [ 139.208533][ T6321] netlink: 40 bytes leftover after parsing attributes in process `syz.5.783'. [ 139.226131][ T6363] hsr_slave_0: left promiscuous mode [ 139.233030][ T6363] hsr_slave_1: left promiscuous mode [ 139.575262][ T6369] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 139.633085][ T6376] loop5: detected capacity change from 0 to 2048 [ 139.671998][ T6376] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #2: comm syz.5.799: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 139.725290][ T6376] EXT4-fs (loop5): get root inode failed [ 139.731040][ T6376] EXT4-fs (loop5): mount failed [ 139.788454][ T6376] block device autoloading is deprecated and will be removed. [ 139.812887][ T6376] bio_check_eod: 103 callbacks suppressed [ 139.812902][ T6376] syz.5.799: attempt to access beyond end of device [ 139.812902][ T6376] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 139.936885][ T6395] loop4: detected capacity change from 0 to 1024 [ 139.960930][ T6395] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 140.034414][ T6395] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 140.107065][ T6395] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: inode #32: comm syz.4.803: iget: special inode unallocated [ 140.119748][ T6395] EXT4-fs (loop4): Remounting filesystem read-only [ 140.126459][ T6395] EXT4-fs (loop4): no journal found [ 140.132138][ T6395] EXT4-fs (loop4): can't get journal size [ 140.212361][ T6395] EXT4-fs (loop4): failed to initialize system zone (-117) [ 140.219998][ T6395] EXT4-fs (loop4): mount failed [ 140.283197][ T6417] loop0: detected capacity change from 0 to 128 [ 140.737583][ T6442] loop4: detected capacity change from 0 to 256 [ 140.744722][ T6442] vfat: Unknown parameter '01777777777777777777777' [ 140.761258][ T6442] loop4: detected capacity change from 0 to 512 [ 141.143899][ T6440] netlink: 'syz.1.812': attribute type 10 has an invalid length. [ 141.226964][ T6440] hsr_slave_0: left promiscuous mode [ 141.294279][ T6440] hsr_slave_1: left promiscuous mode [ 141.726514][ T6468] netlink: 14 bytes leftover after parsing attributes in process `syz.0.816'. [ 143.901161][ T6493] xt_TPROXY: Can be used only with -p tcp or -p udp [ 143.908391][ T29] kauditd_printk_skb: 523 callbacks suppressed [ 143.908466][ T29] audit: type=1400 audit(1747533922.203:7754): avc: denied { relabelfrom } for pid=6491 comm="syz.0.831" name="" dev="pipefs" ino=14581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 143.914597][ T6494] loop4: detected capacity change from 0 to 128 [ 143.947679][ T6493] loop0: detected capacity change from 0 to 512 [ 143.987086][ T6493] EXT4-fs: Ignoring removed orlov option [ 144.023082][ T6493] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.029823][ T6493] EXT4-fs: Ignoring removed orlov option [ 144.109879][ T6493] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c01c, mo2=0002] [ 144.138440][ T6493] System zones: 1-12 [ 144.146597][ T6493] EXT4-fs error (device loop0): ext4_init_orphan_info:586: comm syz.0.831: inode #0: comm syz.0.831: iget: illegal inode # [ 144.223320][ T6493] EXT4-fs (loop0): get orphan inode failed [ 144.250734][ T6493] EXT4-fs (loop0): mount failed [ 144.306217][ T6493] loop0: detected capacity change from 0 to 512 [ 144.335414][ T6525] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 144.377951][ T6493] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 144.406936][ T6493] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 144.422883][ T6493] EXT4-fs (loop0): mount failed [ 144.501485][ T29] audit: type=1326 audit(1747533922.803:7755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6536 comm="syz.5.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b871e969 code=0x7ffc0000 [ 144.574098][ T29] audit: type=1326 audit(1747533922.803:7756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6536 comm="syz.5.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b871e969 code=0x7ffc0000 [ 144.598358][ T29] audit: type=1326 audit(1747533922.813:7757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6536 comm="syz.5.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f71b871e969 code=0x7ffc0000 [ 144.622186][ T29] audit: type=1326 audit(1747533922.813:7758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6536 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b871e969 code=0x7ffc0000 [ 144.645163][ T29] audit: type=1326 audit(1747533922.813:7759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6536 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b871e969 code=0x7ffc0000 [ 144.668865][ T29] audit: type=1326 audit(1747533922.813:7760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6536 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71b871e969 code=0x7ffc0000 [ 144.690883][ T6545] loop5: detected capacity change from 0 to 1024 [ 144.692133][ T29] audit: type=1326 audit(1747533922.813:7761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6536 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b871e969 code=0x7ffc0000 [ 144.723964][ T29] audit: type=1326 audit(1747533922.813:7762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6536 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b871e969 code=0x7ffc0000 [ 144.768684][ T6545] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 144.784171][ T6545] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 144.868597][ T6545] EXT4-fs error (device loop5): ext4_get_journal_inode:5798: inode #32: comm syz.5.823: iget: special inode unallocated [ 144.933703][ T6545] EXT4-fs (loop5): Remounting filesystem read-only [ 144.940624][ T6545] EXT4-fs (loop5): no journal found [ 144.945977][ T6545] EXT4-fs (loop5): can't get journal size [ 144.981975][ T6545] EXT4-fs (loop5): failed to initialize system zone (-117) [ 145.015507][ T6545] EXT4-fs (loop5): mount failed [ 145.408979][ T6568] loop5: detected capacity change from 0 to 164 [ 145.431434][ T6568] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 145.489889][ T6574] SELinux: syz.4.827 (6574) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 145.602863][ T6582] netlink: 3 bytes leftover after parsing attributes in process `syz.4.830'. [ 145.612567][ T6582] 0ªX¹¦À: renamed from caif0 [ 145.657858][ T6582] 0ªX¹¦À: entered allmulticast mode [ 145.663154][ T6582] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 145.736090][ T6593] SELinux: syz.0.836 (6593) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 145.795280][ T6604] loop0: detected capacity change from 0 to 512 [ 145.795384][ T6600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.838'. [ 145.804853][ T6604] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.849967][ T6609] netlink: 'syz.2.840': attribute type 4 has an invalid length. [ 145.865483][ T6604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.881592][ T6604] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.009638][ T6627] xt_hashlimit: max too large, truncated to 1048576 [ 146.045288][ T6625] SELinux: syz.5.842 (6625) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 146.070650][ T6632] xt_TPROXY: Can be used only with -p tcp or -p udp [ 146.546847][ T6650] loop5: detected capacity change from 0 to 764 [ 147.578646][ T6656] loop5: detected capacity change from 0 to 1024 [ 147.658611][ T6656] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.722101][ T6656] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.782998][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.913321][ T5802] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.948042][ T6675] netlink: 'syz.0.853': attribute type 4 has an invalid length. [ 148.084492][ T6684] SELinux: syz.5.857 (6684) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 148.380900][ T6704] loop0: detected capacity change from 0 to 512 [ 148.395300][ T6704] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 148.423154][ T6704] EXT4-fs (loop0): 1 truncate cleaned up [ 148.438942][ T6704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.924376][ T29] kauditd_printk_skb: 358 callbacks suppressed [ 149.924399][ T29] audit: type=1400 audit(1747533928.203:8121): avc: denied { setattr } for pid=6699 comm="syz.0.862" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 150.571503][ T6743] netlink: 'syz.5.870': attribute type 4 has an invalid length. [ 150.593542][ T6746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=6746 comm=syz.1.871 [ 150.680292][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.121933][ T29] audit: type=1326 audit(1747533929.423:8122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.2.879" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f37b0bbe969 code=0x0 [ 151.405390][ T6777] netlink: 'syz.4.881': attribute type 10 has an invalid length. [ 151.440504][ T6777] hsr_slave_0: left promiscuous mode [ 151.462240][ T6777] hsr_slave_1: left promiscuous mode [ 151.659110][ T6783] loop4: detected capacity change from 0 to 1024 [ 151.688840][ T6783] ext4: Unknown parameter 'dont_hash' [ 154.012672][ T6790] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 154.363055][ T6802] xt_TPROXY: Can be used only with -p tcp or -p udp [ 155.577983][ T6803] loop4: detected capacity change from 0 to 512 [ 155.599713][ T6806] loop0: detected capacity change from 0 to 512 [ 155.620173][ T6806] EXT4-fs: Ignoring removed orlov option [ 155.678990][ T29] audit: type=1326 audit(1747533933.983:8123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.2.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b0bbe969 code=0x7fc00000 [ 155.706626][ T29] audit: type=1326 audit(1747533933.983:8124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.2.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f37b0bbe969 code=0x7fc00000 [ 155.735039][ T29] audit: type=1326 audit(1747533933.983:8125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.2.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b0bbe969 code=0x7fc00000 [ 155.760605][ T29] audit: type=1326 audit(1747533933.983:8126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.2.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b0bbe969 code=0x7fc00000 [ 155.785350][ T29] audit: type=1326 audit(1747533933.983:8127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.2.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b0bbe969 code=0x7fc00000 [ 155.810126][ T29] audit: type=1326 audit(1747533933.983:8128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.2.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b0bbe969 code=0x7fc00000 [ 155.834078][ T29] audit: type=1326 audit(1747533933.983:8129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.2.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b0bbe969 code=0x7fc00000 [ 155.857855][ T29] audit: type=1326 audit(1747533933.983:8130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.2.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b0bbe969 code=0x7fc00000 [ 155.883735][ T29] audit: type=1326 audit(1747533933.983:8131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.2.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b0bbe969 code=0x7fc00000 [ 155.908373][ T29] audit: type=1326 audit(1747533933.983:8132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.2.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b0bbe969 code=0x7fc00000 [ 155.945304][ T6806] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.952099][ T6806] EXT4-fs: Ignoring removed orlov option [ 156.203193][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.889'. [ 156.255116][ T6806] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c01c, mo2=0002] [ 156.308016][ T6806] System zones: 1-12 [ 156.312333][ T6806] EXT4-fs error (device loop0): ext4_init_orphan_info:586: comm syz.0.885: inode #0: comm syz.0.885: iget: illegal inode # [ 156.432631][ T6806] EXT4-fs (loop0): get orphan inode failed [ 156.455054][ T6806] EXT4-fs (loop0): mount failed [ 156.464287][ T6824] xt_hashlimit: max too large, truncated to 1048576 [ 156.490729][ T6796] loop0: detected capacity change from 0 to 512 [ 156.548853][ T6796] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 156.711592][ T6796] EXT4-fs (loop0): mount failed [ 156.988845][ T6837] loop5: detected capacity change from 0 to 512 [ 157.119965][ T6837] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.896: bg 0: block 248: padding at end of block bitmap is not set [ 157.203994][ T6837] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.896: Failed to acquire dquot type 1 [ 157.260601][ T6847] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 157.285985][ T6845] bridge0: port 3(vlan0) entered disabled state [ 157.309561][ T6837] EXT4-fs (loop5): 1 truncate cleaned up [ 157.344040][ T6837] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.381042][ T6849] netlink: 7 bytes leftover after parsing attributes in process `syz.0.898'. [ 157.603021][ T6837] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.725476][ T5802] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.785030][ T6845] Falling back ldisc for ttyS3. [ 158.614788][ T6879] sctp: [Deprecated]: syz.5.899 (pid 6879) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.614788][ T6879] Use struct sctp_sack_info instead [ 158.821675][ T6882] loop0: detected capacity change from 0 to 128 [ 158.861760][ T6879] loop5: detected capacity change from 0 to 8192 [ 158.914994][ T6879] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 158.936469][ T6882] netlink: 36 bytes leftover after parsing attributes in process `syz.0.901'. [ 159.004411][ T6879] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 159.013371][ T6879] FAT-fs (loop5): Filesystem has been set read-only [ 159.085706][ T6880] wireguard0: entered promiscuous mode [ 159.091333][ T6880] wireguard0: entered allmulticast mode [ 159.822968][ T6893] loop5: detected capacity change from 0 to 512 [ 160.020629][ T6893] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.073163][ T6908] loop0: detected capacity change from 0 to 1024 [ 160.081559][ T6893] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 160.121747][ T6908] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm +}[@: Failed to acquire dquot type 0 [ 160.193772][ T5802] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.208846][ T6908] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 160.285816][ T6908] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 160.302789][ T6908] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #13: comm +}[@: mark_inode_dirty error [ 160.323652][ T6914] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 160.337589][ T6908] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 160.359732][ T6914] SELinux: failed to load policy [ 160.370448][ T6908] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm +}[@: mark_inode_dirty error [ 160.382128][ T6908] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 160.394987][ T6908] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 160.414970][ T6908] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 160.450323][ T6908] EXT4-fs error (device loop0): ext4_truncate:4255: inode #13: comm +}[@: mark_inode_dirty error [ 160.466539][ T6908] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 160.477863][ T6908] EXT4-fs (loop0): 1 truncate cleaned up [ 160.484121][ T6908] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.536025][ T6908] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 160.771881][ T6940] netlink: 'syz.1.919': attribute type 10 has an invalid length. [ 160.775145][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.780085][ T6940] netlink: 40 bytes leftover after parsing attributes in process `syz.1.919'. [ 160.824917][ T6940] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 160.844698][ T6941] futex_wake_op: syz.5.916 tries to shift op by -1; fix this program [ 161.110214][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 161.110233][ T29] audit: type=1400 audit(1747533939.413:8352): avc: denied { name_connect } for pid=6948 comm="syz.1.922" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 161.158823][ T29] audit: type=1400 audit(1747533939.453:8353): avc: denied { listen } for pid=6948 comm="syz.1.922" lport=45544 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 161.186520][ T29] audit: type=1400 audit(1747533939.453:8354): avc: denied { accept } for pid=6948 comm="syz.1.922" lport=45544 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 161.211769][ T29] audit: type=1400 audit(1747533939.453:8355): avc: denied { read } for pid=6948 comm="syz.1.922" lport=45544 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 161.252253][ T6952] netlink: 20 bytes leftover after parsing attributes in process `syz.1.922'. [ 161.284961][ T29] audit: type=1400 audit(1747533939.583:8356): avc: denied { setopt } for pid=6948 comm="syz.1.922" lport=45544 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 161.329537][ T6951] loop5: detected capacity change from 0 to 8192 [ 161.336528][ T29] audit: type=1400 audit(1747533939.633:8357): avc: denied { mounton } for pid=6942 comm="syz.0.920" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 161.526919][ T29] audit: type=1400 audit(1747533939.833:8358): avc: denied { read } for pid=6964 comm="syz.1.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 161.624352][ T29] audit: type=1400 audit(1747533939.903:8359): avc: denied { ioctl } for pid=6968 comm="syz.0.929" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 161.790643][ T29] audit: type=1326 audit(1747533940.093:8360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6972 comm="syz.1.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eaa42e969 code=0x7ffc0000 [ 161.798661][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.930'. [ 161.824411][ T29] audit: type=1326 audit(1747533940.093:8361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6972 comm="syz.1.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eaa42e969 code=0x7ffc0000 [ 162.624638][ T6994] loop5: detected capacity change from 0 to 512 [ 162.767299][ T6994] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 162.780586][ T6994] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.838507][ T6999] netlink: 9 bytes leftover after parsing attributes in process `syz.2.937'. [ 162.871451][ T6999] gretap0: entered promiscuous mode [ 162.902685][ T7004] netlink: 5 bytes leftover after parsing attributes in process `syz.2.937'. [ 162.947620][ T7004] 0ªX¹¦D: renamed from gretap0 [ 162.970576][ T7004] 0ªX¹¦D: left promiscuous mode [ 162.975528][ T7004] 0ªX¹¦D: entered allmulticast mode [ 163.010470][ T7004] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 163.276630][ T7013] netlink: 36 bytes leftover after parsing attributes in process `syz.1.940'. [ 163.285752][ T7013] netlink: 16 bytes leftover after parsing attributes in process `syz.1.940'. [ 163.294910][ T7013] netlink: 36 bytes leftover after parsing attributes in process `syz.1.940'. [ 163.313940][ T7013] netlink: 36 bytes leftover after parsing attributes in process `syz.1.940'. [ 163.389947][ T5802] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 163.529699][ T7017] loop0: detected capacity change from 0 to 2048 [ 163.556619][ T7017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.604529][ T7023] loop4: detected capacity change from 0 to 2048 [ 163.659523][ T7018] loop5: detected capacity change from 0 to 128 [ 163.754596][ T7018] syz.5.941: attempt to access beyond end of device [ 163.754596][ T7018] loop5: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 163.804543][ T7018] syz.5.941: attempt to access beyond end of device [ 163.804543][ T7018] loop5: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 163.815038][ T7026] SELinux: syz.4.944 (7026) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 163.820425][ T7018] Buffer I/O error on dev loop5, logical block 156, lost async page write [ 163.847592][ T7018] syz.5.941: attempt to access beyond end of device [ 163.847592][ T7018] loop5: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 163.861664][ T7018] Buffer I/O error on dev loop5, logical block 157, lost async page write [ 163.882532][ T7018] syz.5.941: attempt to access beyond end of device [ 163.882532][ T7018] loop5: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 163.897546][ T7018] Buffer I/O error on dev loop5, logical block 158, lost async page write [ 163.937105][ T7018] syz.5.941: attempt to access beyond end of device [ 163.937105][ T7018] loop5: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 163.950845][ T7018] Buffer I/O error on dev loop5, logical block 159, lost async page write [ 163.960266][ T7018] syz.5.941: attempt to access beyond end of device [ 163.960266][ T7018] loop5: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 163.974382][ T7018] Buffer I/O error on dev loop5, logical block 160, lost async page write [ 163.984801][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.001351][ T7031] loop4: detected capacity change from 0 to 164 [ 164.013408][ T7018] syz.5.941: attempt to access beyond end of device [ 164.013408][ T7018] loop5: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 164.027751][ T7018] Buffer I/O error on dev loop5, logical block 161, lost async page write [ 164.028123][ T7031] Unable to read rock-ridge attributes [ 164.038948][ T7018] syz.5.941: attempt to access beyond end of device [ 164.038948][ T7018] loop5: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 164.059618][ T7018] Buffer I/O error on dev loop5, logical block 132, lost async page write [ 164.079743][ T7031] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 164.091885][ T7018] syz.5.941: attempt to access beyond end of device [ 164.091885][ T7018] loop5: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 164.107422][ T7018] Buffer I/O error on dev loop5, logical block 133, lost async page write [ 164.117689][ T7018] syz.5.941: attempt to access beyond end of device [ 164.117689][ T7018] loop5: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 164.132985][ T7018] Buffer I/O error on dev loop5, logical block 150, lost async page write [ 164.145363][ T7018] Buffer I/O error on dev loop5, logical block 151, lost async page write [ 164.161245][ T7033] xt_TPROXY: Can be used only with -p tcp or -p udp [ 164.182254][ T7038] loop0: detected capacity change from 0 to 1024 [ 164.194802][ T7038] ext4: Unknown parameter 'dont_hash' [ 164.300009][ T7042] sctp: [Deprecated]: syz.2.949 (pid 7042) Use of struct sctp_assoc_value in delayed_ack socket option. [ 164.300009][ T7042] Use struct sctp_sack_info instead [ 164.992802][ T7042] wireguard0: entered promiscuous mode [ 164.999356][ T7042] wireguard0: entered allmulticast mode [ 165.071397][ T7055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=7055 comm=syz.4.952 [ 165.392769][ T7067] loop4: detected capacity change from 0 to 164 [ 165.405862][ T7067] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 165.610247][ T7075] loop5: detected capacity change from 0 to 256 [ 165.617329][ T7075] vfat: Unknown parameter '01777777777777777777777' [ 165.638027][ T7075] loop5: detected capacity change from 0 to 512 [ 165.649943][ T7075] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 165.747214][ T7075] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 165.763742][ T7075] EXT4-fs (loop5): 1 truncate cleaned up [ 165.770694][ T7075] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.042127][ T7083] rdma_op ffff8881035ded80 conn xmit_rdma 0000000000000000 [ 167.201042][ T7091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.209961][ T7091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.554313][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 167.554331][ T29] audit: type=1326 audit(1747533945.853:8396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.0.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe123c6e969 code=0x7ffc0000 [ 167.589149][ T29] audit: type=1326 audit(1747533945.853:8397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.0.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe123c6e969 code=0x7ffc0000 [ 167.592399][ T7097] loop0: detected capacity change from 0 to 1024 [ 167.615542][ T29] audit: type=1326 audit(1747533945.853:8398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.0.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe123c6e969 code=0x7ffc0000 [ 167.650030][ T29] audit: type=1326 audit(1747533945.853:8399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.0.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe123c6e969 code=0x7ffc0000 [ 167.674362][ T29] audit: type=1326 audit(1747533945.853:8400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.0.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe123c6e969 code=0x7ffc0000 [ 167.699869][ T29] audit: type=1326 audit(1747533945.853:8401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.0.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe123c6e969 code=0x7ffc0000 [ 167.708460][ T7099] netlink: 14 bytes leftover after parsing attributes in process `syz.2.963'. [ 167.725826][ T29] audit: type=1326 audit(1747533945.853:8402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.0.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe123c6e969 code=0x7ffc0000 [ 167.725866][ T29] audit: type=1326 audit(1747533945.853:8403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.0.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe123c6e969 code=0x7ffc0000 [ 167.782624][ T29] audit: type=1326 audit(1747533945.853:8404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.0.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe123c6e969 code=0x7ffc0000 [ 167.806365][ T29] audit: type=1326 audit(1747533945.853:8405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.0.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe123c6e969 code=0x7ffc0000 [ 167.964937][ T7097] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.013695][ T7097] pimreg: entered allmulticast mode [ 168.056085][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.885508][ T7104] loop0: detected capacity change from 0 to 1024 [ 168.904792][ T7106] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.965'. [ 168.945131][ T7104] ext4: Unknown parameter 'dont_hash' [ 169.097741][ T7111] netlink: 9 bytes leftover after parsing attributes in process `syz.2.966'. [ 169.110171][ T7112] sctp: [Deprecated]: syz.1.967 (pid 7112) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.110171][ T7112] Use struct sctp_sack_info instead [ 169.129423][ T7111] 0ªX¹¦D: entered promiscuous mode [ 169.135461][ T7111] 0ªX¹¦D: left allmulticast mode [ 169.144105][ T5802] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.159334][ T7111] netlink: 5 bytes leftover after parsing attributes in process `syz.2.966'. [ 169.438022][ T7111] 1ªX¹¦D: renamed from 30ªX¹¦D [ 169.453745][ T7111] 1ªX¹¦D: left promiscuous mode [ 169.459619][ T7111] 1ªX¹¦D: entered allmulticast mode [ 169.754926][ T7111] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 169.797588][ T7117] xt_TPROXY: Can be used only with -p tcp or -p udp [ 169.827631][ T7117] loop4: detected capacity change from 0 to 512 [ 169.865053][ T7117] EXT4-fs: Ignoring removed orlov option [ 169.914801][ T7117] EXT4-fs: Ignoring removed nomblk_io_submit option [ 169.921596][ T7117] EXT4-fs: Ignoring removed orlov option [ 169.984572][ T7123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.970'. [ 170.008672][ T7117] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c01c, mo2=0002] [ 170.030689][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.966'. [ 170.039904][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.966'. [ 170.051705][ T7117] System zones: 1-12 [ 170.056073][ T7117] EXT4-fs error (device loop4): ext4_init_orphan_info:586: comm syz.4.969: inode #0: comm syz.4.969: iget: illegal inode # [ 170.069361][ T7117] EXT4-fs (loop4): get orphan inode failed [ 170.085463][ T7112] wireguard0: entered promiscuous mode [ 170.085828][ T7117] EXT4-fs (loop4): mount failed [ 170.091241][ T7112] wireguard0: entered allmulticast mode [ 170.129026][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.966'. [ 170.337653][ T7145] vhci_hcd: invalid port number 96 [ 170.342907][ T7145] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 170.410350][ T7145] loop0: detected capacity change from 0 to 528 [ 170.425334][ T7145] EXT4-fs (loop0): failed to parse options in superblock:  [ 170.438541][ T7145] EXT4-fs (loop0): Unsupported encryption level 25 [ 170.524128][ T7153] netlink: 256 bytes leftover after parsing attributes in process `syz.5.976'. [ 171.537023][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.980'. [ 171.560279][ T7176] xt_TPROXY: Can be used only with -p tcp or -p udp [ 171.681661][ T7170] loop0: detected capacity change from 0 to 512 [ 171.689129][ T7180] loop4: detected capacity change from 0 to 1024 [ 171.712504][ T7170] EXT4-fs: Ignoring removed orlov option [ 171.779334][ T7170] EXT4-fs: Ignoring removed nomblk_io_submit option [ 171.786221][ T7170] EXT4-fs: Ignoring removed orlov option [ 171.963740][ T7170] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c01c, mo2=0002] [ 172.018529][ T7170] System zones: 1-12 [ 172.030750][ T7170] EXT4-fs error (device loop0): ext4_init_orphan_info:586: comm syz.0.982: inode #0: comm syz.0.982: iget: illegal inode # [ 172.085393][ T7170] EXT4-fs (loop0): get orphan inode failed [ 172.103030][ T7170] EXT4-fs (loop0): mount failed [ 172.271773][ T7180] 9pnet_fd: Insufficient options for proto=fd [ 172.369608][ T7200] loop0: detected capacity change from 0 to 256 [ 172.513134][ T7200] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 172.521903][ T7200] FAT-fs (loop0): Filesystem has been set read-only [ 172.896999][ T7205] IPVS: Error connecting to the multicast addr [ 173.887768][ T7217] xt_TPROXY: Can be used only with -p tcp or -p udp [ 174.081578][ T7224] loop5: detected capacity change from 0 to 512 [ 174.082499][ T7211] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 174.089734][ T7224] EXT4-fs: Ignoring removed orlov option [ 174.106936][ T7211] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 174.116157][ T7224] EXT4-fs: Ignoring removed nomblk_io_submit option [ 174.122856][ T7224] EXT4-fs: Ignoring removed orlov option [ 174.130295][ T7223] sctp: [Deprecated]: syz.4.996 (pid 7223) Use of struct sctp_assoc_value in delayed_ack socket option. [ 174.130295][ T7223] Use struct sctp_sack_info instead [ 174.186660][ T7224] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c01c, mo2=0002] [ 174.225789][ T7224] System zones: 1-12 [ 174.238779][ T7223] loop4: detected capacity change from 0 to 8192 [ 174.240026][ T7224] EXT4-fs error (device loop5): ext4_init_orphan_info:586: comm syz.5.997: inode #0: comm syz.5.997: iget: illegal inode # [ 174.277840][ T7224] EXT4-fs (loop5): get orphan inode failed [ 174.288331][ T7234] loop0: detected capacity change from 0 to 1024 [ 174.292818][ T7224] EXT4-fs (loop5): mount failed [ 174.301923][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 174.301937][ T29] audit: type=1326 audit(1747533952.603:8491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.1.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eaa42e969 code=0x7ffc0000 [ 174.316981][ T7234] EXT4-fs: Ignoring removed orlov option [ 174.331896][ T29] audit: type=1326 audit(1747533952.603:8492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.1.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eaa42e969 code=0x7ffc0000 [ 174.369099][ T7234] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 174.374338][ T29] audit: type=1326 audit(1747533952.603:8493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.1.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f0eaa42e969 code=0x7ffc0000 [ 174.402943][ T29] audit: type=1326 audit(1747533952.603:8494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.1.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eaa42e969 code=0x7ffc0000 [ 174.426964][ T29] audit: type=1326 audit(1747533952.603:8495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.1.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0eaa42e969 code=0x7ffc0000 [ 174.438794][ T7239] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 174.450587][ T29] audit: type=1326 audit(1747533952.603:8496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.1.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eaa42e969 code=0x7ffc0000 [ 174.478369][ T7234] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.483829][ T29] audit: type=1326 audit(1747533952.603:8497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.1.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0eaa42e969 code=0x7ffc0000 [ 174.520131][ T29] audit: type=1326 audit(1747533952.603:8498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.1.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eaa42e969 code=0x7ffc0000 [ 174.545115][ T29] audit: type=1326 audit(1747533952.603:8499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.1.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0eaa42e969 code=0x7ffc0000 [ 174.568898][ T29] audit: type=1326 audit(1747533952.603:8500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.1.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eaa42e969 code=0x7ffc0000 [ 174.582853][ T7234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7234 comm=syz.0.998 [ 174.605428][ T7223] wireguard0: entered promiscuous mode [ 174.611033][ T7223] wireguard0: entered allmulticast mode [ 174.637871][ T7245] netlink: 'syz.5.1002': attribute type 10 has an invalid length. [ 174.673570][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.696665][ T7247] netlink: 'syz.1.1003': attribute type 4 has an invalid length. [ 174.744159][ T7252] __nla_validate_parse: 6 callbacks suppressed [ 174.744175][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1005'. [ 174.755708][ T7250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7250 comm=syz.5.1002 [ 174.772015][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1005'. [ 174.784358][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1005'. [ 174.786821][ T7253] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1004'. [ 174.814980][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1005'. [ 174.824299][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1005'. [ 174.833541][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1005'. [ 174.847482][ T7245] netlink: 'syz.5.1002': attribute type 10 has an invalid length. [ 174.855482][ T7245] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1002'. [ 174.865471][ T7245] team0: entered promiscuous mode [ 174.870713][ T7245] team_slave_0: entered promiscuous mode [ 174.876556][ T7245] team_slave_1: entered promiscuous mode [ 174.884039][ T7245] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.893045][ T7245] bridge0: port 3(team0) entered blocking state [ 174.899557][ T7245] bridge0: port 3(team0) entered disabled state [ 174.906865][ T7245] team0: entered allmulticast mode [ 174.912203][ T7245] team_slave_0: entered allmulticast mode [ 174.918215][ T7245] team_slave_1: entered allmulticast mode [ 174.926936][ T7245] bridge0: port 3(team0) entered blocking state [ 174.933278][ T7245] bridge0: port 3(team0) entered forwarding state [ 174.980521][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1005'. [ 174.989838][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1005'. [ 175.048228][ T7259] loop4: detected capacity change from 0 to 128 [ 175.225939][ T7278] xt_TPROXY: Can be used only with -p tcp or -p udp [ 175.281045][ T7281] netlink: 'syz.5.1014': attribute type 30 has an invalid length. [ 175.291878][ T7281] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.300876][ T7281] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.309856][ T7281] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.318840][ T7281] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.338893][ T7281] netlink: 'syz.5.1014': attribute type 30 has an invalid length. [ 175.827658][ T7303] xt_hashlimit: size too large, truncated to 1048576 [ 176.153114][ T7318] xt_TPROXY: Can be used only with -p tcp or -p udp [ 176.355698][ T7330] 0ªX¹¦À: renamed from caif0 [ 176.371966][ T7330] 0ªX¹¦À: entered allmulticast mode [ 176.377392][ T7330] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 176.393683][ T7323] bond1: left allmulticast mode [ 176.398730][ T7323] bond1: left promiscuous mode [ 176.403818][ T7323] bridge0: port 4(bond1) entered disabled state [ 176.411341][ T7323] dummy0: left allmulticast mode [ 176.416605][ T7323] bridge0: port 3(dummy0) entered disabled state [ 176.434155][ T7323] bridge_slave_1: left allmulticast mode [ 176.439912][ T7323] bridge_slave_1: left promiscuous mode [ 176.445878][ T7323] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.454137][ T7323] bridge_slave_0: left allmulticast mode [ 176.460031][ T7323] bridge_slave_0: left promiscuous mode [ 176.466758][ T7323] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.909422][ T7339] bond2: entered promiscuous mode [ 176.915302][ T7339] bond2: entered allmulticast mode [ 176.950229][ T7339] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.966754][ T7339] bond2 (unregistering): Released all slaves [ 177.013595][ T7345] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 177.060224][ T7353] loop0: detected capacity change from 0 to 1024 [ 177.067548][ T7353] EXT4-fs: Ignoring removed bh option [ 177.132581][ T7358] loop4: detected capacity change from 0 to 256 [ 177.919240][ T7353] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.177022][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.330907][ T7372] loop4: detected capacity change from 0 to 1024 [ 178.345498][ T7372] EXT4-fs: Ignoring removed orlov option [ 178.439778][ T7373] loop5: detected capacity change from 0 to 1024 [ 178.450854][ T7373] journal_path: Lookup failure for './file0' [ 178.457158][ T7373] EXT4-fs: error: could not find journal device path [ 178.542259][ T7387] loop0: detected capacity change from 0 to 512 [ 178.583650][ T7387] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c118, mo2=0002] [ 178.594644][ T7387] System zones: 1-12 [ 178.635573][ T7387] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #2: comm syz.0.1047: corrupted xattr block 255: invalid header [ 178.650140][ T7387] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 178.659713][ T7387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.672865][ T7387] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #2: comm syz.0.1047: corrupted xattr block 255: invalid header [ 178.688022][ T7387] SELinux: (dev loop0, type ext4) getxattr errno 117 [ 178.699573][ T7387] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.016864][ T7405] loop0: detected capacity change from 0 to 512 [ 179.035610][ T7405] ext4: Unknown parameter 'fsuuid' [ 179.171064][ T7413] xt_TPROXY: Can be used only with -p tcp or -p udp [ 179.182037][ T7413] loop5: detected capacity change from 0 to 512 [ 179.195866][ T7419] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 179.202710][ T7419] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 179.210597][ T7419] vhci_hcd vhci_hcd.0: Device attached [ 179.222854][ T7413] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 179.227251][ T7425] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 179.250229][ T7413] EXT4-fs (loop5): mount failed [ 179.257640][ T7425] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 179.349227][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 179.349245][ T29] audit: type=1326 audit(1747533957.653:8773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.5.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b871e969 code=0x7ffc0000 [ 179.400169][ T29] audit: type=1326 audit(1747533957.653:8774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.5.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71b871e969 code=0x7ffc0000 [ 179.424621][ T29] audit: type=1326 audit(1747533957.653:8775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.5.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b871e969 code=0x7ffc0000 [ 179.449394][ T29] audit: type=1326 audit(1747533957.653:8776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.5.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f71b871e969 code=0x7ffc0000 [ 179.475022][ T29] audit: type=1326 audit(1747533957.653:8777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.5.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b871e969 code=0x7ffc0000 [ 179.500385][ T29] audit: type=1326 audit(1747533957.653:8778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.5.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f71b871e969 code=0x7ffc0000 [ 179.527004][ T29] audit: type=1326 audit(1747533957.653:8779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.5.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b871e969 code=0x7ffc0000 [ 179.552648][ T29] audit: type=1326 audit(1747533957.653:8780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.5.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f71b871e969 code=0x7ffc0000 [ 179.577843][ T29] audit: type=1326 audit(1747533957.653:8781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.5.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b871e969 code=0x7ffc0000 [ 179.604387][ T29] audit: type=1326 audit(1747533957.653:8782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.5.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f71b871e969 code=0x7ffc0000 [ 179.674314][ T3484] usb 1-1: new high-speed USB device number 3 using vhci_hcd [ 179.851546][ T7433] bio_check_eod: 9 callbacks suppressed [ 179.851568][ T7433] syz.4.1060: attempt to access beyond end of device [ 179.851568][ T7433] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 180.007176][ T7422] vhci_hcd: connection reset by peer [ 180.013800][ T59] vhci_hcd: stop threads [ 180.018532][ T59] vhci_hcd: release socket [ 180.022973][ T59] vhci_hcd: disconnect device [ 180.158330][ T7440] loop5: detected capacity change from 0 to 164 [ 180.175003][ T7442] __nla_validate_parse: 23 callbacks suppressed [ 180.175022][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1064'. [ 180.194432][ T7440] loop5: detected capacity change from 0 to 1024 [ 180.201772][ T7440] EXT4-fs: Ignoring removed nobh option [ 180.204003][ T7442] bridge_slave_1: left allmulticast mode [ 180.213900][ T7442] bridge_slave_1: left promiscuous mode [ 180.218328][ T7440] ext2: Unknown parameter 'dont_hash' [ 180.219844][ T7442] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.227348][ T7440] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 180.263240][ T7442] bridge_slave_0: left allmulticast mode [ 180.269167][ T7442] bridge_slave_0: left promiscuous mode [ 180.275035][ T7442] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.376357][ T7443] bond0: entered promiscuous mode [ 180.381556][ T7443] bond0: entered allmulticast mode [ 180.403882][ T7443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.357794][ T7482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.366684][ T7482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.458881][ T7484] SELinux: failed to load policy [ 182.515057][ T7493] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 182.521760][ T7493] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 182.530396][ T7493] vhci_hcd vhci_hcd.0: Device attached [ 182.558436][ T7499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=7499 comm=syz.1.1074 [ 182.574996][ T7493] vhci_hcd vhci_hcd.0: port 0 already used [ 182.583544][ T7501] loop5: detected capacity change from 0 to 1024 [ 182.610859][ T7501] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.651843][ T7494] vhci_hcd: connection closed [ 182.652240][ T5272] vhci_hcd: stop threads [ 182.652686][ T7501] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, [ 182.657414][ T5272] vhci_hcd: release socket [ 182.657427][ T5272] vhci_hcd: disconnect device [ 182.681016][ T7501] block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 182.733310][ T5802] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.883231][ T7513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1080'. [ 183.204965][ T7528] loop4: detected capacity change from 0 to 512 [ 183.475063][ T7539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1089'. [ 183.553290][ T7539] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 183.612872][ T7542] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1090'. [ 184.345505][ T7556] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 184.416670][ T7556] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7556 comm=syz.2.1094 [ 184.540317][ T7557] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1094'. [ 184.579549][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 184.579583][ T29] audit: type=1400 audit(1747533962.883:8987): avc: denied { audit_write } for pid=7555 comm="syz.2.1094" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 184.607229][ T29] audit: type=1107 audit(1747533962.883:8988): pid=7555 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 184.620753][ T29] audit: type=1400 audit(1747533962.883:8989): avc: denied { create } for pid=7555 comm="syz.2.1094" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 184.642654][ T29] audit: type=1400 audit(1747533962.893:8990): avc: denied { mounton } for pid=7555 comm="syz.2.1094" path="/246/file0" dev="tmpfs" ino=1345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 184.650013][ T7546] loop4: detected capacity change from 0 to 1024 [ 184.764331][ T3484] vhci_hcd: vhci_device speed not set [ 184.779743][ T29] audit: type=1400 audit(1747533963.063:8991): avc: denied { unlink } for pid=3316 comm="syz-executor" name="file0" dev="tmpfs" ino=1345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 184.925105][ T7572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1098'. [ 185.747443][ T29] audit: type=1326 audit(1747533964.115:8992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7587 comm="syz.4.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d669ee969 code=0x7ffc0000 [ 185.751507][ T7588] loop4: detected capacity change from 0 to 512 [ 185.771170][ T29] audit: type=1326 audit(1747533964.115:8993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7587 comm="syz.4.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d669ee969 code=0x7ffc0000 [ 185.806707][ T7589] xt_CT: You must specify a L4 protocol and not use inversions on it [ 185.806970][ T29] audit: type=1326 audit(1747533964.115:8994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7587 comm="syz.4.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5d669ee969 code=0x7ffc0000 [ 185.817314][ T7588] EXT4-fs (loop4): write access unavailable, skipping orphan cleanup [ 185.839050][ T29] audit: type=1326 audit(1747533964.115:8995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7587 comm="syz.4.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5d669ee9a3 code=0x7ffc0000 [ 185.871010][ T29] audit: type=1326 audit(1747533964.115:8996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7587 comm="syz.4.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5d669ed41f code=0x7ffc0000 [ 185.885667][ T7588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 185.911664][ T7580] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 185.953419][ T7592] @: renamed from vlan0 [ 186.188523][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.908594][ T7617] netlink: 'syz.5.1111': attribute type 4 has an invalid length. [ 186.916765][ T7617] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.1111'. [ 187.257349][ T7633] loop5: detected capacity change from 0 to 1024 [ 187.265879][ T7633] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 187.277459][ T7633] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 187.290516][ T7634] capability: warning: `syz.2.1116' uses deprecated v2 capabilities in a way that may be insecure [ 187.332030][ T7633] JBD2: no valid journal superblock found [ 187.338110][ T7633] EXT4-fs (loop5): Could not load journal inode [ 187.422907][ T7639] IPVS: Error connecting to the multicast addr [ 188.642768][ T7654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.672821][ T7654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.584683][ T7675] netlink: 'syz.5.1130': attribute type 10 has an invalid length. [ 189.593332][ T7675] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1130'. [ 189.604644][ T29] kauditd_printk_skb: 429 callbacks suppressed [ 189.604658][ T29] audit: type=1326 audit(1747533967.975:9426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7672 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe123c6e969 code=0x7ffc0000 [ 189.636972][ T29] audit: type=1326 audit(1747533967.975:9427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7672 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe123c6e969 code=0x7ffc0000 [ 189.660619][ T29] audit: type=1326 audit(1747533967.975:9428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7674 comm="syz.5.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b871e969 code=0x7ffc0000 [ 189.684400][ T29] audit: type=1326 audit(1747533967.975:9429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7674 comm="syz.5.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b871e969 code=0x7ffc0000 [ 189.708357][ T7680] vhci_hcd: invalid port number 65 [ 189.713681][ T7680] vhci_hcd: invalid port number 65 [ 189.767454][ T29] audit: type=1326 audit(1747533968.005:9430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7674 comm="syz.5.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f71b871e969 code=0x7ffc0000 [ 189.790966][ T29] audit: type=1326 audit(1747533968.035:9431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7674 comm="syz.5.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b871e969 code=0x7ffc0000 [ 189.815391][ T29] audit: type=1326 audit(1747533968.035:9432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7674 comm="syz.5.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b871e969 code=0x7ffc0000 [ 189.840819][ T29] audit: type=1400 audit(1747533968.035:9433): avc: denied { append } for pid=7679 comm="syz.4.1131" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 189.863851][ T29] audit: type=1326 audit(1747533968.085:9434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7674 comm="syz.5.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f71b871e969 code=0x7ffc0000 [ 189.888386][ T29] audit: type=1326 audit(1747533968.085:9435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7674 comm="syz.5.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b871e969 code=0x7ffc0000 [ 189.992343][ T7688] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1133'. [ 190.008557][ T7686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.013225][ T7688] vlan0: entered allmulticast mode [ 190.022139][ T7688] veth1: entered allmulticast mode [ 190.027781][ T7686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.049494][ T7686] loop4: detected capacity change from 0 to 1024 [ 190.095570][ T7694] loop5: detected capacity change from 0 to 512 [ 190.102469][ T7694] EXT4-fs: Ignoring removed orlov option [ 190.108836][ T7694] EXT4-fs: Ignoring removed nomblk_io_submit option [ 190.115515][ T7694] EXT4-fs: Ignoring removed orlov option [ 190.132558][ T7694] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c01c, mo2=0002] [ 190.141065][ T7694] System zones: 1-12 [ 190.146278][ T7694] EXT4-fs error (device loop5): ext4_init_orphan_info:586: comm syz.5.1136: inode #0: comm syz.5.1136: iget: illegal inode # [ 190.160756][ T7694] EXT4-fs (loop5): get orphan inode failed [ 190.167056][ T7694] EXT4-fs (loop5): mount failed [ 190.179240][ T7694] loop5: detected capacity change from 0 to 512 [ 190.207290][ T7694] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 190.222572][ T7694] EXT4-fs (loop5): mount failed [ 190.263926][ T7690] sit0: entered allmulticast mode [ 190.431296][ T7710] netlink: '+}[@': attribute type 4 has an invalid length. [ 190.612342][ T7715] loop0: detected capacity change from 0 to 1024 [ 190.620335][ T7715] EXT4-fs: Ignoring removed nobh option [ 190.626621][ T7715] EXT4-fs: Ignoring removed nobh option [ 190.655490][ T7715] EXT4-fs: Mount option(s) incompatible with ext2 [ 190.863517][ T7715] vlan0: entered allmulticast mode [ 190.969481][ T7731] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1143'. [ 191.137174][ T7737] loop0: detected capacity change from 0 to 512 [ 191.144397][ T7737] EXT4-fs: Ignoring removed orlov option [ 191.152174][ T7737] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.158980][ T7737] EXT4-fs: Ignoring removed orlov option [ 191.169844][ T7743] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1149'. [ 191.192440][ T7737] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c01c, mo2=0002] [ 191.201553][ T7737] System zones: 1-12 [ 191.206049][ T7737] EXT4-fs error (device loop0): ext4_init_orphan_info:586: comm syz.0.1148: inode #0: comm syz.0.1148: iget: illegal inode # [ 191.220720][ T7737] EXT4-fs (loop0): get orphan inode failed [ 191.227073][ T7737] EXT4-fs (loop0): mount failed [ 191.249220][ T7737] loop0: detected capacity change from 0 to 512 [ 191.294943][ T7737] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 191.331505][ T7737] EXT4-fs (loop0): mount failed [ 191.416191][ T7756] loop4: detected capacity change from 0 to 512 [ 191.424288][ T7756] EXT4-fs (loop4): write access unavailable, skipping orphan cleanup [ 191.432867][ T7756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 191.448359][ T7756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1152'. [ 191.486860][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.591571][ T7762] futex_wake_op: syz.4.1153 tries to shift op by 144; fix this program [ 191.644552][ T7764] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1154'. [ 191.745394][ T7772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1157'. [ 191.754567][ T7772] netem: change failed [ 191.782267][ T7776] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1159'. [ 191.818916][ T7779] batadv_slave_0: entered promiscuous mode [ 191.846817][ T7779] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1158'. [ 191.883459][ T7779] batadv_slave_0 (unregistering): left promiscuous mode [ 191.997200][ T7787] xt_TPROXY: Can be used only with -p tcp or -p udp [ 192.337122][ T7802] loop5: detected capacity change from 0 to 128 [ 192.366224][ T7802] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 192.394252][ T7802] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.418626][ T7802] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.429308][ T7802] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.511451][ T7802] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.522231][ T7802] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.528339][ T7808] netlink: 'syz.1.1169': attribute type 1 has an invalid length. [ 192.561787][ T7808] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.589957][ T7802] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.600421][ T7802] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.626221][ T7808] bond1: (slave ip6gretap1): making interface the new active one [ 192.637467][ T7808] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 192.645685][ T7808] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 192.654134][ T7808] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 192.687326][ T7802] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.698147][ T7802] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.745129][ T5296] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 192.754333][ T3480] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 192.793417][ T7802] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.801926][ T7802] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.815590][ T7802] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.824695][ T7802] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.837968][ T7802] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.846525][ T7802] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.859145][ T7802] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.867569][ T7802] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.000516][ T7836] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1173'. [ 193.036812][ T5802] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 194.269510][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 194.278287][ T5296] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 194.947497][ T7860] loop4: detected capacity change from 0 to 2048 [ 194.954534][ T7860] EXT4-fs: quotafile must be on filesystem root [ 194.989404][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 194.989422][ T29] audit: type=1400 audit(1747533973.355:9703): avc: denied { bind } for pid=7861 comm="syz.0.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 195.023944][ T7860] random: crng reseeded on system resumption [ 195.066071][ T29] audit: type=1400 audit(1747533973.395:9704): avc: denied { append } for pid=7859 comm="syz.4.1180" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 195.089694][ T29] audit: type=1400 audit(1747533973.395:9705): avc: denied { open } for pid=7859 comm="syz.4.1180" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 195.113435][ T29] audit: type=1400 audit(1747533973.405:9706): avc: denied { firmware_load } for pid=5296 comm="kworker/u8:14" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 195.189050][ T7865] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1182'. [ 195.216040][ T5283] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 195.245944][ T7863] loop0: detected capacity change from 0 to 1024 [ 195.299083][ T29] audit: type=1400 audit(1747533973.645:9707): avc: denied { mounton } for pid=7861 comm="syz.0.1181" path="/234/file0" dev="tmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 195.334508][ T5296] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 195.342841][ T5296] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 195.354435][ T29] audit: type=1326 audit(1747533973.725:9708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7859 comm="syz.4.1180" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d669ee969 code=0x0 [ 195.944342][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 196.330024][ T29] audit: type=1400 audit(1747533973.875:9709): avc: denied { execute } for pid=7859 comm="syz.4.1180" dev="tmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 196.331303][ T7863] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 196.352042][ T29] audit: type=1400 audit(1747533973.875:9710): avc: denied { execute_no_trans } for pid=7859 comm="syz.4.1180" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 196.352128][ T29] audit: type=1400 audit(1747533974.305:9711): avc: denied { write } for pid=7872 comm="syz.4.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 196.412879][ T7863] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.1181: Failed to acquire dquot type 0 [ 196.551898][ T7863] EXT4-fs (loop0): 1 truncate cleaned up [ 196.564090][ T7886] tipc: New replicast peer: 255.255.255.255 [ 196.571269][ T7886] tipc: Enabled bearer , priority 10 [ 196.571776][ T7863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.597333][ T7863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.721748][ T7863] loop0: detected capacity change from 0 to 164 [ 196.740168][ T7863] grow_buffers: requested out-of-range block 18446744072635809824 for device loop0 [ 196.749915][ T7863] isofs_fill_super: bread failed, dev=loop0, iso_blknum=1610612752, block=-1073741792 [ 196.822764][ T7897] loop5: detected capacity change from 0 to 1024 [ 196.837483][ T7898] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1191'. [ 196.848286][ T7897] ext4: Unknown parameter 'dont_hash' [ 196.947736][ T7901] loop0: detected capacity change from 0 to 512 [ 196.976516][ T7901] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 196.986033][ T7901] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 197.009813][ T7901] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 197.020075][ T7901] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 197.028675][ T7901] System zones: 0-2, 18-18, 34-35 [ 197.035100][ T7901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.341006][ T7901] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 197.341006][ T7901] program syz.0.1193 not setting count and/or reply_len properly [ 197.407062][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.684944][ T10] tipc: Node number set to 2501371827 [ 197.704299][ T269] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 197.704315][ T269] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 197.977485][ T7924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1200'. [ 198.095288][ T7926] loop0: detected capacity change from 0 to 1024 [ 198.104116][ T7926] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 198.117117][ T7926] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 198.130943][ T7926] JBD2: no valid journal superblock found [ 198.137148][ T7926] EXT4-fs (loop0): Could not load journal inode [ 198.407007][ T7936] loop5: detected capacity change from 0 to 128 [ 198.414966][ T7936] FAT-fs (loop5): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 198.457671][ T7937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1204'. [ 198.550676][ T7944] xt_hashlimit: max too large, truncated to 1048576 [ 198.899428][ T5283] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 198.929646][ T7959] loop4: detected capacity change from 0 to 512 [ 198.975246][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1211'. [ 199.175543][ T7965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1213'. [ 199.440538][ T31] FAT-fs (loop5): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 199.571651][ T7969] loop5: detected capacity change from 0 to 1024 [ 199.590183][ T7971] loop0: detected capacity change from 0 to 256 [ 199.651083][ T7969] ext4: Unknown parameter 'dont_hash' [ 199.734274][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 200.633308][ T29] kauditd_printk_skb: 544 callbacks suppressed [ 200.633324][ T29] audit: type=1400 audit(1747533978.995:10255): avc: denied { lock } for pid=7975 comm="syz.1.1216" path="socket:[18714]" dev="sockfs" ino=18714 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 200.764922][ T7984] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1217'. [ 200.781842][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1216'. [ 200.802719][ T7984] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 200.897582][ T269] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 200.939978][ T29] audit: type=1326 audit(1747533979.305:10256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.4.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d669ee969 code=0x7ffc0000 [ 200.963802][ T29] audit: type=1326 audit(1747533979.305:10257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.4.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d669ee969 code=0x7ffc0000 [ 200.988094][ T29] audit: type=1326 audit(1747533979.305:10258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.4.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5d669ee969 code=0x7ffc0000 [ 201.012171][ T29] audit: type=1326 audit(1747533979.305:10259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.4.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d669ee969 code=0x7ffc0000 [ 201.036616][ T29] audit: type=1326 audit(1747533979.305:10260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.4.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d669ee969 code=0x7ffc0000 [ 201.077515][ T7990] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 201.284246][ T29] audit: type=1326 audit(1747533979.445:10261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.4.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5d669ee969 code=0x7ffc0000 [ 201.307966][ T29] audit: type=1326 audit(1747533979.445:10262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.4.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d669ee969 code=0x7ffc0000 [ 201.332964][ T29] audit: type=1326 audit(1747533979.445:10263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.4.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d669ee969 code=0x7ffc0000 [ 201.356706][ T29] audit: type=1326 audit(1747533979.445:10264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.4.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d669ee969 code=0x7ffc0000 [ 202.303860][ T8008] loop5: detected capacity change from 0 to 8192 [ 202.407680][ T8014] loop0: detected capacity change from 0 to 128 [ 202.504336][ T269] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 202.885700][ T8020] netlink: 'syz.2.1228': attribute type 13 has an invalid length. [ 203.072805][ T8024] loop4: detected capacity change from 0 to 1024 [ 203.113403][ T8024] EXT4-fs: Ignoring removed orlov option [ 203.248846][ T8034] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1235'. [ 203.265912][ T8034] loop5: detected capacity change from 0 to 512 [ 203.293082][ T8034] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 203.301930][ T8034] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 203.330819][ T8014] futex_wake_op: syz.0.1227 tries to shift op by -1; fix this program [ 203.345050][ T8040] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1236'. [ 203.354951][ T8040] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 203.399853][ T3315] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 203.407961][ T3315] FAT-fs (loop0): Filesystem has been set read-only [ 203.443299][ T8044] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1237'. [ 203.458380][ T8044] loop0: detected capacity change from 0 to 512 [ 203.466196][ T8044] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 203.474918][ T8044] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 203.545855][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1240'. [ 203.555047][ T8053] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1240'. [ 203.593889][ T8057] loop0: detected capacity change from 0 to 2048 [ 203.605199][ T5283] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 203.613789][ T8053] loop5: detected capacity change from 0 to 164 [ 203.621646][ T8053] Unable to read rock-ridge attributes [ 203.632065][ T8057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.644394][ T8053] Unable to read rock-ridge attributes [ 203.662914][ T8057] EXT4-fs (loop0): Online defrag not supported with bigalloc [ 203.680478][ T8057] EXT4-fs (loop0): Online defrag not supported with bigalloc [ 203.690512][ T8053] Unable to read rock-ridge attributes [ 203.697817][ T8053] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 203.764034][ T8071] loop5: detected capacity change from 0 to 1024 [ 203.771557][ T8071] EXT4-fs: Ignoring removed orlov option [ 203.778392][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.781852][ T8071] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.324693][ T8090] loop4: detected capacity change from 0 to 512 [ 204.904781][ T31] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 204.927289][ T8112] usb usb8: usbfs: process 8112 (syz.4.1259) did not claim interface 0 before use [ 205.560397][ T8123] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1263'. [ 205.586182][ T8123] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 205.617756][ T5802] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.799747][ T8128] tipc: Started in network mode [ 205.804900][ T8128] tipc: Node identity ac14140f, cluster identity 4711 [ 205.834147][ T8128] tipc: New replicast peer: 10.1.1.2 [ 205.839759][ T8128] tipc: Enabled bearer , priority 10 [ 206.045030][ T7600] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 206.378737][ T8140] loop4: detected capacity change from 0 to 512 [ 206.396759][ T8140] x_tables: ip_tables: udp match: only valid for protocol 17 [ 206.620854][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 206.620869][ T29] audit: type=1326 audit(1747533984.985:10474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d669ee969 code=0x7ffc0000 [ 206.679117][ T29] audit: type=1326 audit(1747533985.015:10475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5d669ee969 code=0x7ffc0000 [ 206.704424][ T29] audit: type=1326 audit(1747533985.015:10476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d669ee969 code=0x7ffc0000 [ 206.729423][ T29] audit: type=1326 audit(1747533985.015:10477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5d669ee969 code=0x7ffc0000 [ 206.753878][ T29] audit: type=1400 audit(1747533985.015:10478): avc: denied { setopt } for pid=8144 comm="syz.4.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 206.773524][ T29] audit: type=1326 audit(1747533985.015:10479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d669ee969 code=0x7ffc0000 [ 206.797536][ T29] audit: type=1326 audit(1747533985.015:10480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5d669ee969 code=0x7ffc0000 [ 206.821494][ T29] audit: type=1326 audit(1747533985.025:10481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d669ee969 code=0x7ffc0000 [ 206.845879][ T29] audit: type=1326 audit(1747533985.025:10482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5d669ee969 code=0x7ffc0000 [ 206.869700][ T29] audit: type=1326 audit(1747533985.025:10483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d669ee969 code=0x7ffc0000 [ 206.894097][ T10] tipc: Node number set to 2886997007 [ 207.058988][ T8154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1272'. [ 207.187870][ T8161] SELinux: syz.4.1273 (8161) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 207.235777][ T5296] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 207.255390][ T8165] loop4: detected capacity change from 0 to 1024 [ 207.262561][ T8165] EXT4-fs: Ignoring removed mblk_io_submit option [ 207.270104][ T8165] EXT4-fs: Ignoring removed nobh option [ 207.276008][ T8165] EXT4-fs: Ignoring removed bh option [ 207.368783][ T8167] loop4: detected capacity change from 0 to 1024 [ 207.375960][ T8167] ext4: Unknown parameter 'dont_hash' [ 208.905405][ T8175] loop0: detected capacity change from 0 to 1024 [ 208.912632][ T8175] EXT4-fs: Ignoring removed orlov option [ 208.921656][ T8175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.014312][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 209.130811][ T8178] loop5: detected capacity change from 0 to 2048 [ 209.195441][ T4811] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 209.275680][ T8178] Alternate GPT is invalid, using primary GPT. [ 209.282111][ T8178] loop5: p1 p2 p3 [ 209.772462][ T8190] netlink: 'syz.1.1290': attribute type 10 has an invalid length. [ 209.783648][ T8191] loop4: detected capacity change from 0 to 128 [ 209.853867][ T8195] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1278'. [ 209.863100][ T8195] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 209.875138][ T8190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8190 comm=syz.1.1290 [ 209.906982][ T8190] netlink: 'syz.1.1290': attribute type 10 has an invalid length. [ 209.914955][ T8190] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1290'. [ 209.961145][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.049600][ T8206] bond0: (slave bond_slave_0): Releasing backup interface [ 210.075341][ T8206] bond0: (slave bond_slave_1): Releasing backup interface [ 210.201130][ T8191] loop4: detected capacity change from 0 to 8192 [ 210.208199][ T8191] vfat: Unknown parameter 'GPL' [ 210.325601][ T8196] futex_wake_op: syz.4.1279 tries to shift op by -1; fix this program [ 210.335431][ T5283] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 210.421929][ T8213] loop4: detected capacity change from 0 to 128 [ 210.455917][ T8213] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1286'. [ 210.652169][ T8218] loop4: detected capacity change from 0 to 1024 [ 210.697915][ T8218] pimreg: entered allmulticast mode [ 210.773150][ T8224] x_tables: ip_tables: udp match: only valid for protocol 17 [ 210.919380][ T8221] tipc: Started in network mode [ 210.924881][ T8221] tipc: Node identity ac14140f, cluster identity 4711 [ 210.985279][ T8221] tipc: New replicast peer: 10.1.1.2 [ 210.990696][ T8221] tipc: Enabled bearer , priority 10 [ 211.053218][ T8237] loop0: detected capacity change from 0 to 2048 [ 211.190758][ T8237] Alternate GPT is invalid, using primary GPT. [ 211.197404][ T8237] loop0: p1 p2 p3 [ 211.545070][ T5283] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 211.643536][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 211.643554][ T29] audit: type=1400 audit(1747533990.005:10622): avc: denied { read } for pid=8240 comm="syz.0.1295" name="usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 211.692621][ T8241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1295'. [ 211.761848][ T29] audit: type=1400 audit(1747533990.045:10623): avc: denied { open } for pid=8240 comm="syz.0.1295" path="/dev/usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 211.856954][ T8241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.864981][ T8241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.954438][ T8244] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1298'. [ 212.019119][ T29] audit: type=1400 audit(1747533990.385:10624): avc: denied { getopt } for pid=8248 comm="syz.0.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 212.108548][ T3390] tipc: Node number set to 2886997007 [ 212.642801][ T8260] loop4: detected capacity change from 0 to 512 [ 212.650003][ T29] audit: type=1326 audit(1747533991.005:10625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8257 comm="syz.4.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d669ee969 code=0x7ffc0000 [ 212.674163][ T29] audit: type=1326 audit(1747533991.005:10626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8257 comm="syz.4.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5d669ee969 code=0x7ffc0000 [ 212.698755][ T29] audit: type=1326 audit(1747533991.005:10627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8257 comm="syz.4.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5d669ee9a3 code=0x7ffc0000 [ 212.722925][ T29] audit: type=1326 audit(1747533991.005:10628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8257 comm="syz.4.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5d669ed41f code=0x7ffc0000 [ 212.747341][ T29] audit: type=1326 audit(1747533991.005:10629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8257 comm="syz.4.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5d669ee9f7 code=0x7ffc0000 [ 212.755744][ T5283] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 212.771060][ T29] audit: type=1326 audit(1747533991.005:10630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8257 comm="syz.4.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5d669ed2d0 code=0x7ffc0000 [ 212.804035][ T29] audit: type=1326 audit(1747533991.005:10631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8257 comm="syz.4.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5d669ee56b code=0x7ffc0000 [ 212.840053][ T8261] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 212.968460][ T8267] loop5: detected capacity change from 0 to 1024 [ 212.985822][ T8267] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 212.997422][ T8267] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 213.029787][ T8267] JBD2: no valid journal superblock found [ 213.035632][ T8267] EXT4-fs (loop5): Could not load journal inode [ 213.121914][ T8273] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1307'. [ 213.145850][ T8273] xfrm1: entered promiscuous mode [ 213.150926][ T8273] xfrm1: entered allmulticast mode [ 213.238645][ T8273] random: crng reseeded on system resumption [ 213.838204][ T8279] loop4: detected capacity change from 0 to 1024 [ 213.883591][ T8279] EXT4-fs: Ignoring removed mblk_io_submit option [ 213.930787][ T8279] EXT4-fs: Ignoring removed nobh option [ 214.182544][ T4811] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 214.257506][ T8284] xt_TPROXY: Can be used only with -p tcp or -p udp [ 214.830438][ T8295] netlink: 'syz.4.1312': attribute type 10 has an invalid length. [ 214.868876][ T8295] batman_adv: batadv0: Adding interface: team0 [ 214.876504][ T8295] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.902126][ T8295] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 214.946624][ T8297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8297 comm=syz.2.1313 [ 214.968425][ T8295] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8295 comm=syz.4.1312 [ 215.010051][ T8295] netlink: 'syz.4.1312': attribute type 10 has an invalid length. [ 215.018658][ T8295] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1312'. [ 215.028669][ T8295] team0: entered promiscuous mode [ 215.033851][ T8295] team_slave_0: entered promiscuous mode [ 215.040810][ T8295] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.048374][ T8295] batman_adv: batadv0: Interface activated: team0 [ 215.055053][ T8295] batman_adv: batadv0: Interface deactivated: team0 [ 215.062238][ T8295] batman_adv: batadv0: Removing interface: team0 [ 215.070680][ T8295] bridge0: port 4(team0) entered blocking state [ 215.077131][ T8295] bridge0: port 4(team0) entered disabled state [ 215.083702][ T8295] team0: entered allmulticast mode [ 215.088960][ T8295] team_slave_0: entered allmulticast mode [ 215.099887][ T8303] pimreg: entered allmulticast mode [ 215.295038][ T4811] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 215.826558][ T8330] xt_TPROXY: Can be used only with -p tcp or -p udp [ 215.871231][ T8337] loop5: detected capacity change from 0 to 128 [ 215.879510][ T8330] loop4: detected capacity change from 0 to 512 [ 215.897541][ T8330] EXT4-fs: Ignoring removed orlov option [ 215.916060][ T8337] 9pnet_fd: Insufficient options for proto=fd [ 215.922594][ T8330] EXT4-fs: Ignoring removed nomblk_io_submit option [ 215.929719][ T8330] EXT4-fs: Ignoring removed orlov option [ 215.945985][ T8330] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c01c, mo2=0002] [ 215.956098][ T8330] System zones: 1-12 [ 216.002404][ T8339] loop5: detected capacity change from 0 to 1024 [ 216.039350][ T8330] EXT4-fs error (device loop4): ext4_init_orphan_info:586: comm syz.4.1322: inode #0: comm syz.4.1322: iget: illegal inode # [ 216.054464][ T8330] EXT4-fs (loop4): get orphan inode failed [ 216.071029][ T8339] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.083957][ T8330] EXT4-fs (loop4): mount failed [ 216.286099][ T8330] loop4: detected capacity change from 0 to 512 [ 216.377467][ T8346] netlink: 'syz.0.1336': attribute type 13 has an invalid length. [ 216.432779][ T8348] loop4: detected capacity change from 0 to 1024 [ 216.498473][ T8348] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 216.510416][ T8348] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 216.595473][ T5283] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 216.646646][ T8348] JBD2: no valid journal superblock found [ 216.653106][ T8348] EXT4-fs (loop4): Could not load journal inode [ 216.678913][ T8348] ================================================================== [ 216.689242][ T8348] BUG: KCSAN: data-race in __lru_add_drain_all / folios_put_refs [ 216.698000][ T8348] [ 216.700607][ T8348] write to 0xffff888237d25a68 of 1 bytes by task 3319 on cpu 1: [ 216.708433][ T8348] folios_put_refs+0x285/0x2d0 [ 216.713325][ T8348] folio_batch_move_lru+0x1fd/0x230 [ 216.718734][ T8348] lru_add_drain_cpu+0x77/0x250 [ 216.723669][ T8348] __folio_batch_release+0x44/0xb0 [ 216.729020][ T8348] shmem_undo_range+0x344/0xa80 [ 216.733993][ T8348] shmem_evict_inode+0x134/0x520 [ 216.738979][ T8348] evict+0x2e3/0x550 [ 216.742889][ T8348] iput+0x447/0x5b0 [ 216.746728][ T8348] do_unlinkat+0x2c4/0x4c0 [ 216.751160][ T8348] __x64_sys_unlink+0x2e/0x40 [ 216.755878][ T8348] x64_sys_call+0x22a6/0x2fb0 [ 216.760592][ T8348] do_syscall_64+0xd0/0x1a0 [ 216.765127][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.771075][ T8348] [ 216.773407][ T8348] read to 0xffff888237d25a68 of 1 bytes by task 8348 on cpu 0: [ 216.780961][ T8348] __lru_add_drain_all+0x12b/0x3f0 [ 216.786286][ T8348] lru_add_drain_all+0x10/0x20 [ 216.791072][ T8348] invalidate_bdev+0x47/0x70 [ 216.795790][ T8348] ext4_fill_super+0x2a6e/0x34e0 [ 216.800947][ T8348] get_tree_bdev_flags+0x28e/0x300 [ 216.806088][ T8348] get_tree_bdev+0x1f/0x30 [ 216.810521][ T8348] ext4_get_tree+0x1c/0x30 [ 216.815007][ T8348] vfs_get_tree+0x57/0x1d0 [ 216.819452][ T8348] do_new_mount+0x207/0x680 [ 216.824099][ T8348] path_mount+0x4a4/0xb20 [ 216.828544][ T8348] __se_sys_mount+0x28f/0x2e0 [ 216.833601][ T8348] __x64_sys_mount+0x67/0x80 [ 216.838328][ T8348] x64_sys_call+0xd36/0x2fb0 [ 216.843032][ T8348] do_syscall_64+0xd0/0x1a0 [ 216.847553][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.853457][ T8348] [ 216.855788][ T8348] value changed: 0x06 -> 0x00 [ 216.860473][ T8348] [ 216.862886][ T8348] Reported by Kernel Concurrency Sanitizer on: [ 216.869066][ T8348] CPU: 0 UID: 0 PID: 8348 Comm: syz.4.1325 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(voluntary) [ 216.881577][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 216.891642][ T8348] ================================================================== [ 216.937454][ T29] kauditd_printk_skb: 316 callbacks suppressed [ 216.937475][ T29] audit: type=1400 audit(1747533995.285:10948): avc: denied { create } for pid=8336 comm="syz.5.1323" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 216.976680][ T8360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8360 comm=syz.1.1331 [ 217.113940][ T5802] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.894310][ T7600] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 218.994881][ T7600] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 220.094317][ T7600] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 221.224964][ T5283] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 222.324561][ T31] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 223.424292][ T7600] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 224.544964][ T31] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 225.655021][ T7600] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 226.294339][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!