last executing test programs: 3.453155315s ago: executing program 2 (id=631): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="27050200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b0000000000000057", 0x4c}, {&(0x7f0000001240)="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", 0x787}], 0x2}, 0x9cdc2384056b48b8) 3.423879945s ago: executing program 2 (id=633): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d0000000000000000", 0xd1, 0x1, 0x0, 0x0) 3.406124155s ago: executing program 2 (id=634): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB="0000000000000000000000000000fdffffff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="19000000040000000800000007"], 0x48) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x800008ec0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xb, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) dup(r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.746040928s ago: executing program 1 (id=649): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), 0x0}, 0x20) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x19, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="02090000020000000040000000000000b0ba3906977ca111d90557c54fe138fdb754c240d19db45f70279f2b5c0aa460867bedbc2f22c271968908194daa1cfa64b81c11a1864781e3cdd4e3e3a84ba0d5ac91b214adf88928325f55029b7b04118029b1a5739c3431fcbe889f1096d24335bc10ba6edd8d88fad7a22112ab69e43a16bd30431cb9c0390be5a80b861358b1aa6cbf45345c7547dda5f5da1ee2147a74ea01b843092ba1a9dfb1425b1e4445b1ba88ea01161a499676673a539ed993ff74bdc6a697d49eb158a437022780fae1a37c72b0c990d92d68dc081e2ab50fc859513193c4352581699d"], 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="ec000000210004000000000000000000ffffffff0000000000000000000000006401010100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa00c3d5e05139ef44ce0000000000000000000000fc01000000000000000000000000000100000000030000000a000200fc000000000000000000000000000001ff02000000000000000000000000000100000000000000000000000000000000ac1414bb000000000000000000000000000400000000000000000a00"], 0xec}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2}) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x77c, &(0x7f0000001180)="$eJzs3c9rHFUcAPDvbJKmTauJIGg9BQQNlG5Mja2CYMWDCBYKerZdNttQs8mW7KY0IaBFBC+CigdBLz37o968+uOq/4UHsVRNixUPEpnNTrttdtNsmmSr+/nAJO/NzO6b776ZeW93HjMB9KzR9E8u4mBEfJBEDDfmJxExUE/1RxxfW+/GynIxnZJYXX3t96S+zvWV5WI0vSa1v5F5NCK+fzfiUG59udXFpZlCuVyab+THa7PnxquLS4fPzhamS9OluaMTk5NHjj1z7Oj2xfrnT0sHrnz48pNfHf/7nUcuv/9DEsfjQGNZcxzbZTRGG5/JQPoR3ual7S6sy5JubwBbkh6afWtHeRyM4eirpwCA/7O3ImIVAOgp/dp/AOg52e8A11eWi9nU3V8kdtfVFyNi71r82fXNtSX9jWt2e+vXQYeuJ7ddGUkiYmQbyh+NiM++eeOLdIodug4J0MrbFyPi9Mjo+vN/sm7MQqee2mDZnsb/0TvmO//B7vk27f8826r/l7vZ/4kW/Z/BFsfuVtz1+N+3DYVsIO3/Pd80tu1GU/wNI32N3AP1Pt9AcuZsuZSe2x6MiLEYGEzzE2vrthwGNXbtn2vtym/u//3x0Zufp+Wn/2+tkfu1f/D210wVaoV7jTtz9WLEY/2t4k9u1n/Spv97cpNlvPLce5+2W5bGn8abTevjj8bopJ2xeiniiZb1f6sqkw3HJ47Xd4fxbKdo4eufPxlqV35z/adTWn72XWA3pPU/tHH8I0nzeM1q52X8eGn4u3bL7h5/6/1/T/J6PZ31Iy4UarX5iYg9yavr5x+59dosn62fxj/2eOvjf6P9P/1OeHqT8fdf+e3Lrce/s9L4pzqq/84Tl2/M9LUrf3P1P1lPjTXmbOb8t9kNvJfPDgAAAAAAAAAAAAAAAAAAAAAAAAA2KxcRByLJ5W+mc7l8fu0Z3g/HUK5cqdYOnakszE1F/VnZIzGQy251Odx0P9SJxv3ws/yRO/JPR8RDEfHx4L4ku4/iVJdjBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDM/jbP/0/9MtjtrQMAdszebm8AALDrtP8A0Hu0/wDQe7T/ANB7tP8A0Hu0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOywkydOpNPqXyvLxTQ/dX5xYaZy/vBUqTqTn10o5ouV+XP56UplulzKFyuzd3u/cqVybjLmFi6M10rV2nh1cenUbGVhrnbq7GxhunSqNLArUQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ6qLSzOFcrk0L7GFxOr9sRndT/Q1dqc7FyUR0ekbvhBdD6ezRHJ/bMY2J7p8YgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4j/g3AAD//5EOHsI=") getgroups(0x0, 0x0) mknod$loop(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x80, 0x4) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 2.549268159s ago: executing program 2 (id=650): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_dev$sg(0x0, 0x800000000000002, 0x81) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo\x00') getdents64(r4, 0x0, 0x0) getdents64(r4, &(0x7f0000002f40)=""/4098, 0x1002) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 1.909423981s ago: executing program 3 (id=661): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0xe}}]}}]}, 0x3c}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.896521331s ago: executing program 3 (id=662): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x401, 0x7, 0x900}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}]}]}]}}]}, 0x58}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.878533452s ago: executing program 3 (id=663): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x3, 0x0, 0x0, 0xc07}}, 0x120) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r0, 0x0, 0x0) 1.871107332s ago: executing program 1 (id=664): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000300"/15], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, &(0x7f0000000200)="7f", 0x0}, 0x50) 1.778546452s ago: executing program 1 (id=665): mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x5c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) read(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x81) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000ec000000000000000000000000a20000000000a03000000000000000004010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003780000000c0a010200fdffffff000000010000000900020073797a32000000004c000380480000800b000340000000003c000b80200007800e000100"], 0xfc}}, 0x0) 1.778155132s ago: executing program 1 (id=666): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x101) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000000c0)="4cff43884207e4708c", 0x9, 0x4040010, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0xf, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x844}, 0x24000000) 1.589901763s ago: executing program 2 (id=667): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2e03c760", @ANYRES16=0x0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x8000}, 0x30000894) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000340)={0x0, r2}, 0x10) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x0, 0x0, r3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x61) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x4, @perf_config_ext={0x5, 0xee4}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, @void, @value}, 0x94) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000280)) write$binfmt_script(r5, &(0x7f0000000180), 0xfea7) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) readv(r4, &(0x7f0000000040)=[{&(0x7f00000020c0)=""/4106, 0x100a}], 0x1) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 1.059951225s ago: executing program 4 (id=675): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000000c80)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@grpquota}, {@barrier_val}, {@grpjquota}, {}, {}, {@usrjquota}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c"], 0xfc}, 0x1, 0x0, 0x0, 0x4040040}, 0x880) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000030000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}, 0x1, 0x0, 0x0, 0x44}, 0x0) 977.140176ms ago: executing program 3 (id=676): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001080)={0x1, &(0x7f0000001180)=[{0x0, 0x48, 0xf, 0x80000000}]}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000580)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000100)={0x1d, r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e21, 0x2, @loopback}}, 0x8, 0x3}, &(0x7f0000000240)=0x90) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000400)={r5, 0x66}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r7, &(0x7f0000000180)='./file1\x00', r7, &(0x7f0000000640)='./bus\x00', 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x4, 0x1, 0x3, 0x0, 0x20001, r6, 0xfffff1b5, '\x00', r2, r7, 0x3, 0x4, 0x3c, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) syz_io_uring_setup(0xd9, &(0x7f0000000480)={0x0, 0x1, 0x80, 0x0, 0x4}, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 971.551846ms ago: executing program 4 (id=677): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_dev$sg(0x0, 0x800000000000002, 0x81) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo\x00') getdents64(r4, 0x0, 0x0) getdents64(r4, &(0x7f0000002f40)=""/4098, 0x1002) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 961.276506ms ago: executing program 3 (id=678): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/212, 0xd4, 0x1, 0x0, 0x0) 869.279016ms ago: executing program 1 (id=679): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0), 0x0) sendto$inet(r0, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000900)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10) 717.122627ms ago: executing program 2 (id=682): creat(0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresuid(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[@ANYBLOB="cc00000709000000dd020000370800007c0200000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/1021], 0x420) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x11) futex_waitv(&(0x7f0000000180)=[{0x3, &(0x7f0000000040)=0x3, 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) 692.186037ms ago: executing program 0 (id=684): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x401, 0x7, 0x900}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}]}]}]}}]}, 0x58}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 680.512017ms ago: executing program 0 (id=685): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x4}, 0x18) socket$can_bcm(0x1d, 0x2, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r4, 0x40044581, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0xa73617b787a0b5eb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x0, 0x4) ioctl$USBDEVFS_DROP_PRIVILEGES(r7, 0x4004551e, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r11 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) sendmsg$tipc(r11, &(0x7f0000000240)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x3, {{0x2, 0x4}, 0x4}}, 0x10, 0x0}, 0x20008041) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 664.398097ms ago: executing program 0 (id=686): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x70bd26, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) 650.970617ms ago: executing program 0 (id=687): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}], 0x1c) 623.628037ms ago: executing program 0 (id=688): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001580)={0xfc, {"a2e3ad1bed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f3b3563030890e0879b0af8c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x80000000}, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x4044800}, 0xc048011) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000440)='compact_retry\x00', r4}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x1808008, &(0x7f00000000c0)={[], [{@seclabel}]}, 0x6, 0x58f, &(0x7f0000000680)="$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") close(0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210008e975f571", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32, @ANYBLOB="00000000000000020000000000000000000000020000000000000000"], 0x48) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000180), 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x90801, 0x24) 605.373357ms ago: executing program 0 (id=689): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x101) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000000c0)="4cff43884207e4708c", 0x9, 0x4040010, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0xf, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x844}, 0x24000000) 73.38927ms ago: executing program 3 (id=690): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b0000059cbe3f3482f84b2179b0140000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) close(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001940)={&(0x7f0000000280)='net_dev_xmit\x00'}, 0x18) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_usb_connect(0x2, 0xd34, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x200, 0x7f, 0x5, 0x70, 0xff, 0x7}, 0x34, &(0x7f0000000480)={0x5, 0xf, 0x34, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x23, 0xff0f, 0x8, [0x18000, 0xff00f0]}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0xb, 0xf00, 0x7, [0x3eb0]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x60, 0x2, 0xff, 0x1, 0x2}]}, 0x2, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x419}}]}) syz_usb_control_io$hid(r3, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0xb4, @string={0xb4, 0x3, "37db5881215002364509e5368ec2ac076de6d79eb2f11a11d43c753717d758274cb167517601e64171344473ffeebea3a7c5677ab8e283b3f5f0bccfdc1093ae72ef0416db51255b5bdfa2e8c87c68ce07facef5a19e8039ad514df08ae8970558edc827c64936e070bc8c81aca43a0033cf79744fcaee1e3e245c0bc29f6f9debbbae1fe2a1a2c7b7040fb6a1ec3abd55bd231475b6be2638dec00f7bb2ecd024af60829bb9841a711d975a0a4b8b5c8364"}}, &(0x7f0000000700)={0x0, 0x22, 0x4, {[@local=@item_012={0x0, 0x2, 0x2}, @global=@item_012={0x2, 0x1, 0x6, "31e6"}]}}, &(0x7f0000000740)={0x0, 0x21, 0x9, {0x9, 0x21, 0xd47, 0x0, 0x1, {0x22, 0xb}}}}, &(0x7f0000000980)={0x2c, &(0x7f00000007c0)=ANY=[@ANYBLOB="1c0706000000b702000042e4"], &(0x7f0000000800)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000880)={0x20, 0x1, 0x9d, "7a5fa620a87e9254c9e842d3f52ae15e18307877cee1ba835be5469ab20a62381945af2ebd40e7bd797eceee3d3c56ea2abf52b3ce3bc298ef59286ee68c145d8493487e416134b8a1f8804d67af80b9cf4df2730f951bf771ce448bf0b65d6ce12b0737c65f9127c64806279bc59e7f0570b89ef7bb2554e66cb8b21d20b9bf60587102b39839a501189f5e61e55e3b9801b2cab6c6f45004bb2aea43"}, &(0x7f0000000940)={0x20, 0x3, 0x1, 0x6}}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x24000810}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000004000000000000000200000000100000", @ANYRES32, @ANYBLOB="00e87f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000000000000fdffffff00"/28], 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0xb768ba4272c74b08, &(0x7f00000002c0)={@remote, @rand_addr, 0x0}, &(0x7f0000000300)=0xc) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r5, 0x20, 0x70bf26, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000004940)={'ip_vti0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x700, 0x700, 0xf, 0xf, {{0x5, 0x4, 0x3, 0x35, 0x14, 0x65, 0x0, 0x8, 0x2f, 0x0, @local, @broadcast}}}}) r8 = open(&(0x7f0000000080)='./bus\x00', 0x145842, 0x0) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x8ec00}], 0x12, 0x300400, 0x0, 0x3) 73.16671ms ago: executing program 4 (id=691): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000300"/16], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, &(0x7f0000000200)="7f", 0x0}, 0x50) 58.16575ms ago: executing program 4 (id=692): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr/keycreate\x00') mount$9p_fd(0x0, &(0x7f00000006c0)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = syz_io_uring_setup(0x4174, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x18, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) 51.94496ms ago: executing program 1 (id=693): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2e03c760", @ANYRES16=0x0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x8000}, 0x30000894) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000340)={0x0, r2}, 0x10) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x0, 0x0, r3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x61) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000)=0x56, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x4, @perf_config_ext={0x5, 0xee4}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, @void, @value}, 0x94) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000280)) write$binfmt_script(r5, &(0x7f0000000180), 0xfea7) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) readv(r4, &(0x7f0000000040)=[{&(0x7f00000020c0)=""/4106, 0x100a}], 0x1) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 14.52523ms ago: executing program 4 (id=694): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 4 (id=695): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x401, 0x7, 0x900}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}]}]}]}}]}, 0x58}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 14.734958][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 14.734972][ T29] audit: type=1400 audit(1733060878.753:76): avc: denied { transition } for pid=3177 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.738826][ T29] audit: type=1400 audit(1733060878.753:77): avc: denied { noatsecure } for pid=3177 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.741405][ T29] audit: type=1400 audit(1733060878.753:78): avc: denied { write } for pid=3177 comm="sh" path="pipe:[2410]" dev="pipefs" ino=2410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.744398][ T29] audit: type=1400 audit(1733060878.753:79): avc: denied { rlimitinh } for pid=3177 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.746886][ T29] audit: type=1400 audit(1733060878.753:80): avc: denied { siginh } for pid=3177 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.740146][ T29] audit: type=1400 audit(1733060882.763:81): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.128' (ED25519) to the list of known hosts. [ 22.227725][ T29] audit: type=1400 audit(1733060886.253:82): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.228697][ T3286] cgroup: Unknown subsys name 'net' [ 22.250430][ T29] audit: type=1400 audit(1733060886.253:83): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.277789][ T29] audit: type=1400 audit(1733060886.273:84): avc: denied { unmount } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.477520][ T3286] cgroup: Unknown subsys name 'cpuset' [ 22.483576][ T3286] cgroup: Unknown subsys name 'rlimit' [ 22.613034][ T29] audit: type=1400 audit(1733060886.633:85): avc: denied { setattr } for pid=3286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.636363][ T29] audit: type=1400 audit(1733060886.633:86): avc: denied { create } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.656879][ T29] audit: type=1400 audit(1733060886.633:87): avc: denied { write } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.677233][ T29] audit: type=1400 audit(1733060886.633:88): avc: denied { read } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.697509][ T29] audit: type=1400 audit(1733060886.643:89): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.705234][ T3290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.722306][ T29] audit: type=1400 audit(1733060886.643:90): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.754097][ T29] audit: type=1400 audit(1733060886.753:91): avc: denied { relabelto } for pid=3290 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.783027][ T3286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.535596][ T3297] chnl_net:caif_netlink_parms(): no params data found [ 24.562707][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 24.584172][ T3296] chnl_net:caif_netlink_parms(): no params data found [ 24.640730][ T3298] chnl_net:caif_netlink_parms(): no params data found [ 24.675213][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 24.683445][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.690555][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.697955][ T3296] bridge_slave_0: entered allmulticast mode [ 24.704322][ T3296] bridge_slave_0: entered promiscuous mode [ 24.715233][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.722294][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.729575][ T3297] bridge_slave_0: entered allmulticast mode [ 24.735757][ T3297] bridge_slave_0: entered promiscuous mode [ 24.746513][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.753669][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.760847][ T3296] bridge_slave_1: entered allmulticast mode [ 24.767181][ T3296] bridge_slave_1: entered promiscuous mode [ 24.775111][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.782305][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.789595][ T3297] bridge_slave_1: entered allmulticast mode [ 24.795720][ T3297] bridge_slave_1: entered promiscuous mode [ 24.842492][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.851669][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.858766][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.866665][ T3307] bridge_slave_0: entered allmulticast mode [ 24.873020][ T3307] bridge_slave_0: entered promiscuous mode [ 24.880941][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.896881][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.910235][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.917354][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.925105][ T3307] bridge_slave_1: entered allmulticast mode [ 24.931449][ T3307] bridge_slave_1: entered promiscuous mode [ 24.942135][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.951322][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.958388][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.966463][ T3298] bridge_slave_0: entered allmulticast mode [ 24.972968][ T3298] bridge_slave_0: entered promiscuous mode [ 24.979631][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.986904][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.994037][ T3298] bridge_slave_1: entered allmulticast mode [ 25.000513][ T3298] bridge_slave_1: entered promiscuous mode [ 25.023205][ T3297] team0: Port device team_slave_0 added [ 25.045615][ T3297] team0: Port device team_slave_1 added [ 25.052346][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.078635][ T3296] team0: Port device team_slave_0 added [ 25.089833][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.103300][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.112503][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.119696][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.127726][ T3300] bridge_slave_0: entered allmulticast mode [ 25.134043][ T3300] bridge_slave_0: entered promiscuous mode [ 25.140735][ T3296] team0: Port device team_slave_1 added [ 25.146628][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.153626][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.179525][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.195472][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.209464][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.216516][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.223692][ T3300] bridge_slave_1: entered allmulticast mode [ 25.230029][ T3300] bridge_slave_1: entered promiscuous mode [ 25.236335][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.243312][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.269259][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.281370][ T3307] team0: Port device team_slave_0 added [ 25.309545][ T3307] team0: Port device team_slave_1 added [ 25.315607][ T3298] team0: Port device team_slave_0 added [ 25.321622][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.328608][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.354558][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.366416][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.376657][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.394917][ T3298] team0: Port device team_slave_1 added [ 25.400875][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.407870][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.433801][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.469398][ T3297] hsr_slave_0: entered promiscuous mode [ 25.475605][ T3297] hsr_slave_1: entered promiscuous mode [ 25.482187][ T3300] team0: Port device team_slave_0 added [ 25.488020][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.494942][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.520918][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.537714][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.544763][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.570798][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.582682][ T3300] team0: Port device team_slave_1 added [ 25.588559][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.595494][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.621492][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.642157][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.649123][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.675140][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.711965][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.718938][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.744876][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.757394][ T3296] hsr_slave_0: entered promiscuous mode [ 25.763550][ T3296] hsr_slave_1: entered promiscuous mode [ 25.770063][ T3296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.778245][ T3296] Cannot create hsr debugfs directory [ 25.789471][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.796415][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.822326][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.848602][ T3307] hsr_slave_0: entered promiscuous mode [ 25.854653][ T3307] hsr_slave_1: entered promiscuous mode [ 25.860635][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.868216][ T3307] Cannot create hsr debugfs directory [ 25.889047][ T3298] hsr_slave_0: entered promiscuous mode [ 25.895091][ T3298] hsr_slave_1: entered promiscuous mode [ 25.901066][ T3298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.908728][ T3298] Cannot create hsr debugfs directory [ 25.950553][ T3300] hsr_slave_0: entered promiscuous mode [ 25.956763][ T3300] hsr_slave_1: entered promiscuous mode [ 25.962641][ T3300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.970277][ T3300] Cannot create hsr debugfs directory [ 26.105333][ T3307] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.113603][ T3307] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.132070][ T3307] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.141799][ T3297] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.152079][ T3307] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.160621][ T3297] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.180077][ T3297] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.188530][ T3297] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.207241][ T3300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.215543][ T3298] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.224296][ T3298] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.236437][ T3300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.246683][ T3298] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.259673][ T3300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.268947][ T3298] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.283498][ T3296] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.292112][ T3296] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.300544][ T3300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.311939][ T3296] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.320821][ T3296] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.402888][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.431070][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.439251][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.455428][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.464046][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.476088][ T1646] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.483160][ T1646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.495138][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.503076][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.510178][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.520271][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.535617][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.544304][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.553656][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.560713][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.570198][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.577335][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.588185][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.601953][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.609065][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.624564][ T1646] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.631715][ T1646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.640579][ T1646] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.647622][ T1646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.661785][ T3297] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.672226][ T3297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.685182][ T1604] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.692282][ T1604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.700806][ T1604] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.707852][ T1604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.731779][ T3296] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.742196][ T3296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.757337][ T1646] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.764391][ T1646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.785635][ T3300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.796052][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.866229][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.892690][ T3298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.910170][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.945334][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.969112][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.039854][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.052586][ T3297] veth0_vlan: entered promiscuous mode [ 27.068667][ T3297] veth1_vlan: entered promiscuous mode [ 27.101470][ T3297] veth0_macvtap: entered promiscuous mode [ 27.118288][ T3297] veth1_macvtap: entered promiscuous mode [ 27.134445][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.158347][ T3300] veth0_vlan: entered promiscuous mode [ 27.167648][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.183203][ T3296] veth0_vlan: entered promiscuous mode [ 27.192344][ T3297] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.201176][ T3297] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.209996][ T3297] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.218786][ T3297] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.230846][ T3300] veth1_vlan: entered promiscuous mode [ 27.257815][ T3298] veth0_vlan: entered promiscuous mode [ 27.264144][ T3296] veth1_vlan: entered promiscuous mode [ 27.272998][ T3307] veth0_vlan: entered promiscuous mode [ 27.279632][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 27.279644][ T29] audit: type=1400 audit(1733060891.293:110): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/root/syzkaller.kNdTZA/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 27.281273][ T3298] veth1_vlan: entered promiscuous mode [ 27.285719][ T29] audit: type=1400 audit(1733060891.293:111): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 27.285739][ T29] audit: type=1400 audit(1733060891.293:112): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/root/syzkaller.kNdTZA/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 27.317404][ T3298] veth0_macvtap: entered promiscuous mode [ 27.337453][ T29] audit: type=1400 audit(1733060891.293:113): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 27.366416][ T3298] veth1_macvtap: entered promiscuous mode [ 27.368362][ T29] audit: type=1400 audit(1733060891.293:114): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/root/syzkaller.kNdTZA/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 27.394964][ T3300] veth0_macvtap: entered promiscuous mode [ 27.395784][ T29] audit: type=1400 audit(1733060891.303:115): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/root/syzkaller.kNdTZA/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 27.429269][ T3296] veth0_macvtap: entered promiscuous mode [ 27.455560][ T29] audit: type=1400 audit(1733060891.303:116): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.463219][ T3296] veth1_macvtap: entered promiscuous mode [ 27.490115][ T3307] veth1_vlan: entered promiscuous mode [ 27.497260][ T29] audit: type=1400 audit(1733060891.513:117): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 27.523855][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.534365][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.545312][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.553862][ T3300] veth1_macvtap: entered promiscuous mode [ 27.561153][ T3297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.565700][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.586322][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.596188][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.606664][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.617377][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.637063][ T29] audit: type=1400 audit(1733060891.653:118): avc: denied { read write } for pid=3297 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.661228][ T29] audit: type=1400 audit(1733060891.653:119): avc: denied { open } for pid=3297 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.686158][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.696692][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.707250][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.715618][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.726261][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.736132][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.746556][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.757218][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.764187][ T3372] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 27.771903][ T3372] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 27.772360][ T3307] veth0_macvtap: entered promiscuous mode [ 27.785991][ T3372] hid-generic 0000:0003:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 27.786561][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.806017][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.815838][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.826356][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.836177][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.846627][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.858185][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.872284][ T3298] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.881165][ T3298] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.889979][ T3298] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.898700][ T3298] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.912401][ T3296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.921149][ T3296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.930095][ T3296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.938912][ T3296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.954349][ T3307] veth1_macvtap: entered promiscuous mode [ 27.969172][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.979737][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.989600][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.000174][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.010019][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.020463][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.031258][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.042826][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.053348][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.063297][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.073825][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.083754][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.094183][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.104033][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.114562][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.125365][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.135267][ T3300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.144085][ T3300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.152926][ T3300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.161630][ T3300] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.178578][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.189133][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.199041][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.209492][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.219349][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.229790][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.239679][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.250121][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.261020][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.269525][ T3307] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.278267][ T3307] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.287062][ T3307] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.295768][ T3307] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.325251][ T3446] loop3: detected capacity change from 0 to 1024 [ 28.389964][ T3446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.410419][ T3458] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.423251][ T3452] random: crng reseeded on system resumption [ 28.486537][ T3465] loop0: detected capacity change from 0 to 8192 [ 28.493411][ T40] nci: nci_rx_work: unknown MT 0x1 [ 28.501220][ T3465] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 28.682746][ T3465] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 28.691596][ T3465] FAT-fs (loop0): Filesystem has been set read-only [ 28.699266][ T3465] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 28.708414][ T3465] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 28.920707][ T3300] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 29.042155][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.236232][ T3478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.321207][ T3490] loop4: detected capacity change from 0 to 1024 [ 29.333538][ T3480] syz.3.11 uses obsolete (PF_INET,SOCK_PACKET) [ 29.359508][ T3490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.390107][ T3490] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 29.406209][ T3490] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 29.418645][ T3490] EXT4-fs (loop4): This should not happen!! Data will be lost [ 29.418645][ T3490] [ 29.428334][ T3490] EXT4-fs (loop4): Total free blocks count 0 [ 29.434420][ T3490] EXT4-fs (loop4): Free/Dirty block details [ 29.440365][ T3490] EXT4-fs (loop4): free_blocks=68451041280 [ 29.446179][ T3490] EXT4-fs (loop4): dirty_blocks=32 [ 29.451390][ T3490] EXT4-fs (loop4): Block reservation details [ 29.457394][ T3490] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 29.470440][ T3490] syz.4.14 (3490) used greatest stack depth: 9976 bytes left [ 29.516409][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.576895][ T3503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16'. [ 29.590377][ T3503] bond0: (slave bond_slave_0): Releasing backup interface [ 29.667381][ T3505] loop2: detected capacity change from 0 to 2048 [ 29.719544][ T3505] loop2: p2 p3 p7 [ 29.756667][ T2999] loop2: p2 p3 p7 [ 29.980300][ T28] bond0 (unregistering): Released all slaves [ 30.726604][ T3514] loop0: detected capacity change from 0 to 128 [ 30.754996][ T3514] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 30.802859][ T3514] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 30.974769][ T3523] Zero length message leads to an empty skb [ 31.060986][ T3526] tipc: Started in network mode [ 31.065895][ T3526] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 31.074937][ T3526] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 31.083216][ T3526] tipc: Enabled bearer , priority 10 [ 31.155884][ T3525] loop3: detected capacity change from 0 to 512 [ 31.173292][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 31.249429][ T3525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.277934][ T3525] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.399132][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.528825][ T3539] loop2: detected capacity change from 0 to 256 [ 31.535566][ T3539] ======================================================= [ 31.535566][ T3539] WARNING: The mand mount option has been deprecated and [ 31.535566][ T3539] and is ignored by this kernel. Remove the mand [ 31.535566][ T3539] option from the mount to silence this warning. [ 31.535566][ T3539] ======================================================= [ 31.615815][ T3539] FAT-fs (loop2): IO charset macgaelic not found [ 32.086827][ T24] tipc: Node number set to 1 [ 32.095903][ T3549] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.697331][ T3558] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 33.081834][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 33.081850][ T29] audit: type=1400 audit(1733060896.903:202): avc: denied { create } for pid=3547 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 33.107791][ T29] audit: type=1400 audit(1733060897.023:203): avc: denied { setopt } for pid=3547 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 33.127061][ T29] audit: type=1400 audit(1733060897.083:204): avc: denied { write } for pid=3553 comm="syz.4.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 33.147204][ T29] audit: type=1400 audit(1733060897.083:205): avc: denied { nlmsg_read } for pid=3553 comm="syz.4.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 33.329207][ T3562] loop3: detected capacity change from 0 to 2048 [ 33.336143][ T3562] EXT4-fs: Ignoring removed nobh option [ 33.426893][ T29] audit: type=1400 audit(1733060897.443:206): avc: denied { map } for pid=3561 comm="syz.1.34" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4491 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.450767][ T29] audit: type=1400 audit(1733060897.443:207): avc: denied { read write } for pid=3561 comm="syz.1.34" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4491 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.501107][ T3562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.543718][ T3562] EXT4-fs (loop3): shut down requested (0) [ 33.550284][ T29] audit: type=1400 audit(1733060897.563:208): avc: denied { create } for pid=3574 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 33.569676][ T29] audit: type=1400 audit(1733060897.563:209): avc: denied { append } for pid=3560 comm="syz.3.33" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.696324][ T3582] loop4: detected capacity change from 0 to 1024 [ 33.712821][ T29] audit: type=1400 audit(1733060897.613:210): avc: denied { map_read map_write } for pid=3566 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.732734][ T29] audit: type=1400 audit(1733060897.613:211): avc: denied { create } for pid=3566 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.766930][ T3583] Process accounting resumed [ 33.784672][ T3585] loop1: detected capacity change from 0 to 1024 [ 33.791882][ T3582] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 33.802631][ T3585] EXT4-fs: test_dummy_encryption option not supported [ 33.850934][ T3582] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.935587][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.113097][ T3598] loop3: detected capacity change from 0 to 512 [ 34.126491][ T3598] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.135582][ T3598] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 34.144945][ T3598] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 34.153935][ T3598] System zones: 1-12 [ 34.260403][ T3598] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.46: corrupted in-inode xattr: e_value size too large [ 34.542956][ T3598] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.46: couldn't read orphan inode 15 (err -117) [ 34.597126][ T3598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.660303][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.681137][ T3614] netlink: 48 bytes leftover after parsing attributes in process `syz.0.53'. [ 34.696883][ T3614] netlink: 48 bytes leftover after parsing attributes in process `syz.0.53'. [ 34.749582][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.921615][ T3637] 9pnet_fd: Insufficient options for proto=fd [ 35.126259][ T3644] loop1: detected capacity change from 0 to 512 [ 35.144977][ T3644] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.162893][ T3644] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 35.209667][ T3644] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 35.235170][ T3644] System zones: 1-12 [ 35.252158][ T3644] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.64: corrupted in-inode xattr: e_value size too large [ 35.301396][ T3644] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.64: couldn't read orphan inode 15 (err -117) [ 35.344908][ T3644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.373651][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.403910][ T3648] vlan2: entered promiscuous mode [ 35.409036][ T3648] bond0: entered promiscuous mode [ 35.414077][ T3648] bond_slave_0: entered promiscuous mode [ 35.419875][ T3648] bond_slave_1: entered promiscuous mode [ 35.427872][ T3648] bond0: left promiscuous mode [ 35.432661][ T3648] bond_slave_0: left promiscuous mode [ 35.438146][ T3648] bond_slave_1: left promiscuous mode [ 35.499442][ T3650] netlink: 48 bytes leftover after parsing attributes in process `syz.1.66'. [ 35.508666][ T3650] netlink: 48 bytes leftover after parsing attributes in process `syz.1.66'. [ 35.568392][ T3654] loop1: detected capacity change from 0 to 1024 [ 35.583739][ T3654] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.606503][ T3654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.121808][ T3684] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 36.491787][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.660650][ T3708] netlink: 48 bytes leftover after parsing attributes in process `syz.3.89'. [ 36.669789][ T3708] netlink: 48 bytes leftover after parsing attributes in process `syz.3.89'. [ 37.204590][ T3730] netlink: 168 bytes leftover after parsing attributes in process `syz.2.99'. [ 37.259643][ T3734] netlink: 24 bytes leftover after parsing attributes in process `syz.0.101'. [ 37.295308][ T3734] netlink: 24 bytes leftover after parsing attributes in process `syz.0.101'. [ 37.393618][ T3746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.402233][ T3746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.427904][ T3748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.436598][ T3748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.488798][ T3752] 9pnet_fd: Insufficient options for proto=fd [ 37.986187][ T28] nci: nci_rx_work: unknown MT 0x1 [ 38.012557][ T3773] loop4: detected capacity change from 0 to 2048 [ 38.074684][ T3773] EXT4-fs: Ignoring removed nobh option [ 38.089370][ T3777] 9pnet_virtio: no channels available for device [ 38.096363][ T3773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.113978][ T3773] Process accounting resumed [ 38.138417][ T1646] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 38.153917][ T1646] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 38.166143][ T1646] EXT4-fs (loop4): This should not happen!! Data will be lost [ 38.166143][ T1646] [ 38.175301][ T3788] loop1: detected capacity change from 0 to 512 [ 38.175792][ T1646] EXT4-fs (loop4): Total free blocks count 0 [ 38.188144][ T1646] EXT4-fs (loop4): Free/Dirty block details [ 38.194017][ T1646] EXT4-fs (loop4): free_blocks=2415919104 [ 38.199000][ T3788] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.199738][ T1646] EXT4-fs (loop4): dirty_blocks=16 [ 38.218063][ T1646] EXT4-fs (loop4): Block reservation details [ 38.224160][ T1646] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 38.231932][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.232189][ T3788] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 38.255972][ T3788] EXT4-fs (loop1): 1 truncate cleaned up [ 38.262127][ T3788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.320418][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 38.320434][ T29] audit: type=1400 audit(1733060902.333:247): avc: denied { read append } for pid=3789 comm="syz.0.125" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 38.349960][ T29] audit: type=1400 audit(1733060902.333:248): avc: denied { open } for pid=3789 comm="syz.0.125" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 38.389652][ T3798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.398553][ T3798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.409450][ T29] audit: type=1400 audit(1733060902.393:249): avc: denied { ioctl } for pid=3789 comm="syz.0.125" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 38.434226][ T29] audit: type=1400 audit(1733060902.393:250): avc: denied { remount } for pid=3795 comm="syz.4.126" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.457945][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.506528][ T3807] vhci_hcd: invalid port number 36 [ 38.511699][ T3807] vhci_hcd: default hub control req: d301 v0209 i0024 l1 [ 38.527600][ T3810] serio: Serial port ptm0 [ 38.555335][ T3812] 9pnet_virtio: no channels available for device [ 38.733930][ T3824] 9pnet_fd: Insufficient options for proto=fd [ 38.760723][ T3826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.778103][ T3826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.940279][ T3841] netlink: 76 bytes leftover after parsing attributes in process `syz.1.146'. [ 39.269340][ T29] audit: type=1400 audit(1733060903.293:251): avc: denied { setopt } for pid=3860 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.344250][ T3866] 9pnet_fd: Insufficient options for proto=fd [ 39.392841][ T3875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.401555][ T3875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.555372][ T29] audit: type=1400 audit(1733060903.573:252): avc: denied { connect } for pid=3886 comm="syz.0.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 39.575326][ T29] audit: type=1400 audit(1733060903.603:253): avc: denied { write } for pid=3886 comm="syz.0.168" path="socket:[4948]" dev="sockfs" ino=4948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 39.610944][ T29] audit: type=1400 audit(1733060903.633:254): avc: denied { append } for pid=3891 comm="syz.1.171" name="event3" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.650928][ T29] audit: type=1400 audit(1733060903.673:255): avc: denied { mount } for pid=3895 comm="syz.0.172" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 39.672583][ T29] audit: type=1400 audit(1733060903.673:256): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 39.790790][ T3919] loop1: detected capacity change from 0 to 764 [ 39.801841][ T3919] rock: directory entry would overflow storage [ 39.808108][ T3919] rock: sig=0x4654, size=5, remaining=4 [ 40.366407][ T3952] 9pnet_fd: Insufficient options for proto=fd [ 40.429883][ T3958] loop1: detected capacity change from 0 to 8192 [ 40.442298][ T3958] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.612113][ T4017] netlink: 36 bytes leftover after parsing attributes in process `syz.1.225'. [ 41.658321][ T4019] loop1: detected capacity change from 0 to 2048 [ 41.667188][ T4019] EXT4-fs: Ignoring removed nobh option [ 41.735737][ T4019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.750258][ T4019] EXT4-fs (loop1): shut down requested (0) [ 41.815391][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.863556][ T4028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 42.033589][ T4048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.236'. [ 42.158434][ T4055] netlink: 24 bytes leftover after parsing attributes in process `syz.1.239'. [ 42.515324][ T4060] netlink: 20 bytes leftover after parsing attributes in process `syz.1.241'. [ 42.520957][ T4058] loop4: detected capacity change from 0 to 2048 [ 42.524286][ T4060] netlink: 20 bytes leftover after parsing attributes in process `syz.1.241'. [ 42.531540][ T4058] EXT4-fs: Ignoring removed nobh option [ 42.562753][ T4060] netlink: 204 bytes leftover after parsing attributes in process `syz.1.241'. [ 42.651656][ T4058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.669959][ T4058] EXT4-fs (loop4): shut down requested (0) [ 42.692951][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.747140][ T4070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.244'. [ 42.986274][ T4080] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 44.139947][ T4134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.271'. [ 44.161002][ T4138] loop4: detected capacity change from 0 to 512 [ 44.167717][ T4138] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.174706][ T4138] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 44.195448][ T4138] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 44.203898][ T4138] System zones: 1-12 [ 44.211190][ T4138] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.272: corrupted in-inode xattr: e_value size too large [ 44.233266][ T4138] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.272: couldn't read orphan inode 15 (err -117) [ 44.247988][ T4138] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.295548][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.385049][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 44.385063][ T29] audit: type=1400 audit(1733060908.403:266): avc: denied { read } for pid=4159 comm="syz.4.282" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.387290][ T4162] netlink: 48 bytes leftover after parsing attributes in process `syz.2.283'. [ 44.391454][ T29] audit: type=1400 audit(1733060908.413:267): avc: denied { open } for pid=4159 comm="syz.4.282" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.514156][ T29] audit: type=1400 audit(1733060908.523:268): avc: denied { ioctl } for pid=4159 comm="syz.4.282" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.590391][ T4177] netlink: 'syz.1.290': attribute type 1 has an invalid length. [ 44.807371][ T29] audit: type=1400 audit(1733060908.833:269): avc: denied { getopt } for pid=4206 comm="syz.2.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.997380][ T29] audit: type=1400 audit(1733060909.023:270): avc: denied { create } for pid=4227 comm="syz.4.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 44.999015][ T4231] lo speed is unknown, defaulting to 1000 [ 45.046069][ T4231] lo speed is unknown, defaulting to 1000 [ 45.052477][ T4231] lo speed is unknown, defaulting to 1000 [ 45.059989][ T29] audit: type=1400 audit(1733060909.023:271): avc: denied { write } for pid=4227 comm="syz.4.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 45.091814][ T4231] infiniband sz1: set active [ 45.096545][ T4231] infiniband sz1: added lo [ 45.101804][ T3376] lo speed is unknown, defaulting to 1000 [ 45.166185][ T4231] RDS/IB: sz1: added [ 45.191894][ T4231] smc: adding ib device sz1 with port count 1 [ 45.206883][ T4231] smc: ib device sz1 port 1 has pnetid [ 45.213488][ T4231] lo speed is unknown, defaulting to 1000 [ 45.274986][ T4231] lo speed is unknown, defaulting to 1000 [ 45.286808][ T3376] lo speed is unknown, defaulting to 1000 [ 45.385062][ T4231] lo speed is unknown, defaulting to 1000 [ 45.466926][ T4231] lo speed is unknown, defaulting to 1000 [ 45.541384][ T4231] lo speed is unknown, defaulting to 1000 [ 45.597173][ T4258] loop3: detected capacity change from 0 to 512 [ 45.604184][ T4256] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 45.616553][ T4258] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.630001][ T4258] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 45.639523][ T4258] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 45.647529][ T4258] System zones: 1-12 [ 45.651941][ T4258] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.326: corrupted in-inode xattr: e_value size too large [ 45.666936][ T4258] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.326: couldn't read orphan inode 15 (err -117) [ 45.679142][ T4258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.699555][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.419328][ T4289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=4289 comm=syz.2.339 [ 52.466121][ T4297] loop3: detected capacity change from 0 to 512 [ 52.476895][ T4289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=4289 comm=syz.2.339 [ 52.492721][ T4297] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.512736][ T4297] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 52.530445][ T4297] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 52.541127][ T4297] System zones: 1-12 [ 52.546382][ T4297] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.341: corrupted in-inode xattr: e_value size too large [ 52.571081][ T4297] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.341: couldn't read orphan inode 15 (err -117) [ 52.614716][ T4297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.639350][ T4309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.648008][ T4309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.676371][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.774896][ T4331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=4331 comm=syz.3.356 [ 52.792679][ T4331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=4331 comm=syz.3.356 [ 52.835677][ T4337] loop1: detected capacity change from 0 to 512 [ 52.869800][ T4337] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.887070][ T4337] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.923482][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.940936][ T29] audit: type=1400 audit(1733060916.963:272): avc: denied { shutdown } for pid=4354 comm="syz.0.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.976362][ T29] audit: type=1400 audit(1733060916.993:273): avc: denied { getopt } for pid=4359 comm="syz.1.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.012890][ T29] audit: type=1326 audit(1733060917.033:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.0.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e01da0849 code=0x7ffc0000 [ 53.036162][ T29] audit: type=1326 audit(1733060917.033:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.0.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e01da0849 code=0x7ffc0000 [ 53.059996][ T29] audit: type=1326 audit(1733060917.063:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.0.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e01da0849 code=0x7ffc0000 [ 53.077341][ T4371] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=4371 comm=syz.1.371 [ 53.083265][ T29] audit: type=1326 audit(1733060917.063:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.0.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e01da0849 code=0x7ffc0000 [ 53.118868][ T29] audit: type=1326 audit(1733060917.063:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.0.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e01da0849 code=0x7ffc0000 [ 53.120806][ T4371] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=4371 comm=syz.1.371 [ 53.142221][ T29] audit: type=1326 audit(1733060917.063:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.0.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e01da0849 code=0x7ffc0000 [ 53.177563][ T29] audit: type=1326 audit(1733060917.063:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.0.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e01da0849 code=0x7ffc0000 [ 53.201044][ T29] audit: type=1326 audit(1733060917.063:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.0.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f9e01da0849 code=0x7ffc0000 [ 53.283682][ T4380] loop3: detected capacity change from 0 to 2048 [ 53.305111][ T4380] EXT4-fs: Ignoring removed nobh option [ 53.428282][ T4380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.443243][ T4380] Process accounting resumed [ 53.876294][ T55] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 53.891186][ T55] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 53.903432][ T55] EXT4-fs (loop3): This should not happen!! Data will be lost [ 53.903432][ T55] [ 53.913076][ T55] EXT4-fs (loop3): Total free blocks count 0 [ 53.919112][ T55] EXT4-fs (loop3): Free/Dirty block details [ 53.924998][ T55] EXT4-fs (loop3): free_blocks=2415919104 [ 53.930907][ T55] EXT4-fs (loop3): dirty_blocks=16 [ 53.936022][ T55] EXT4-fs (loop3): Block reservation details [ 53.942007][ T55] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 53.953843][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.219071][ T4406] loop3: detected capacity change from 0 to 128 [ 54.460378][ T4419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=4419 comm=syz.1.388 [ 54.513189][ T4419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=4419 comm=syz.1.388 [ 54.715437][ T4432] __nla_validate_parse: 4 callbacks suppressed [ 54.715453][ T4432] netlink: 40 bytes leftover after parsing attributes in process `syz.1.394'. [ 55.026579][ T4452] 9pnet_fd: Insufficient options for proto=fd [ 55.443119][ T4488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.420'. [ 55.910114][ T4518] 9pnet_fd: Insufficient options for proto=fd [ 56.374266][ T4520] 9pnet_fd: Insufficient options for proto=fd [ 56.460787][ T4525] loop3: detected capacity change from 0 to 2048 [ 56.480133][ T4525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.552408][ T4540] loop1: detected capacity change from 0 to 2048 [ 56.568250][ T4540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.650595][ T4552] 9pnet_fd: Insufficient options for proto=fd [ 56.717377][ T4567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.725914][ T4567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.273033][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.302359][ T4583] 9pnet_fd: Insufficient options for proto=fd [ 57.351358][ T4592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.462'. [ 57.390811][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.403384][ T4598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.412766][ T4598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.453932][ T4603] loop1: detected capacity change from 0 to 2048 [ 57.487226][ T4603] loop1: p1 < > p4 [ 57.491835][ T4603] loop1: p4 size 8388608 extends beyond EOD, truncated [ 57.569251][ T2999] loop1: p1 < > p4 [ 57.573695][ T2999] loop1: p4 size 8388608 extends beyond EOD, truncated [ 57.593762][ T4358] udevd[4358]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 57.604498][ T4614] udevd[4614]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 57.807950][ T9] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 57.815490][ T9] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 57.829260][ T9] hid-generic 0000:0003:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 57.956524][ T4687] netlink: 40 bytes leftover after parsing attributes in process `syz.2.501'. [ 58.092401][ T4700] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 58.243120][ T35] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 58.250678][ T35] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 58.278220][ T35] hid-generic 0000:0003:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 58.567189][ T1058] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 58.574637][ T1058] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 58.585345][ T1058] hid-generic 0000:0003:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 58.639482][ T29] kauditd_printk_skb: 320 callbacks suppressed [ 58.639498][ T29] audit: type=1400 audit(1733060922.653:602): avc: denied { ioctl } for pid=4730 comm="syz.3.519" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 58.798868][ T4739] netlink: 40 bytes leftover after parsing attributes in process `syz.1.523'. [ 58.853417][ T4736] loop3: detected capacity change from 0 to 2048 [ 58.900709][ T4736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.951678][ T29] audit: type=1400 audit(1733060922.973:603): avc: denied { block_suspend } for pid=4743 comm="syz.1.526" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 59.024877][ T4751] netlink: 3 bytes leftover after parsing attributes in process `syz.1.526'. [ 59.037355][ T4751] 0ªX¹¦À: renamed from caif0 [ 59.046532][ T4751] 0ªX¹¦À: entered allmulticast mode [ 59.051900][ T4751] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 59.578733][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.624563][ T4776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.634145][ T4776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.732777][ T4780] loop1: detected capacity change from 0 to 2048 [ 59.767779][ T4780] loop1: p1 < > p4 [ 59.772417][ T4780] loop1: p4 size 8388608 extends beyond EOD, truncated [ 59.812589][ T4358] udevd[4358]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 59.823935][ T4614] udevd[4614]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 59.836621][ T4790] netlink: 40 bytes leftover after parsing attributes in process `syz.1.542'. [ 59.841432][ T4614] udevd[4614]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 59.847993][ T4358] udevd[4358]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 60.086978][ T4804] netlink: 3 bytes leftover after parsing attributes in process `syz.4.549'. [ 60.095987][ T4804] 0ªX¹¦À: renamed from caif0 [ 60.103345][ T4804] 0ªX¹¦À: entered allmulticast mode [ 60.108601][ T4804] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 60.292237][ T4818] netlink: 40 bytes leftover after parsing attributes in process `syz.2.554'. [ 60.351786][ T29] audit: type=1400 audit(1733060924.373:604): avc: denied { connect } for pid=4821 comm="syz.4.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 60.371439][ T29] audit: type=1400 audit(1733060924.373:605): avc: denied { write } for pid=4821 comm="syz.4.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 60.463265][ T4826] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 60.586915][ T4830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.606928][ T4830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.769446][ T4834] loop3: detected capacity change from 0 to 512 [ 60.777409][ T4834] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 60.819527][ T4834] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 60.826019][ T4834] EXT4-fs (loop3): mount failed [ 60.843205][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 60.859148][ T29] audit: type=1400 audit(1733060924.863:606): avc: denied { create } for pid=4848 comm="syz.2.569" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 60.872320][ T4855] netlink: 'syz.0.571': attribute type 3 has an invalid length. [ 60.879722][ T29] audit: type=1400 audit(1733060924.863:607): avc: denied { write } for pid=4848 comm="syz.2.569" name="file0" dev="tmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 60.879746][ T29] audit: type=1400 audit(1733060924.863:608): avc: denied { open } for pid=4848 comm="syz.2.569" path="/146/file0" dev="tmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 60.932159][ T4855] netlink: 'syz.0.571': attribute type 3 has an invalid length. [ 60.940071][ T4855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.571'. [ 60.982242][ T4861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.995421][ T4861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.098908][ T4874] loop3: detected capacity change from 0 to 128 [ 61.353576][ T4905] loop4: detected capacity change from 0 to 2048 [ 61.361664][ T8] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0 [ 61.369112][ T8] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0 [ 61.377385][ T8] hid-generic 0000:0003:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 61.439044][ T4905] loop4: p1 < > p4 [ 61.444140][ T4905] loop4: p4 size 8388608 extends beyond EOD, truncated [ 61.477392][ T2999] loop4: p1 < > p4 [ 61.482305][ T2999] loop4: p4 size 8388608 extends beyond EOD, truncated [ 61.511456][ T2999] loop4: p1 < > p4 [ 61.515930][ T2999] loop4: p4 size 8388608 extends beyond EOD, truncated [ 61.549349][ T29] audit: type=1400 audit(1733060925.573:609): avc: denied { open } for pid=4913 comm="syz.3.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 61.568479][ T29] audit: type=1400 audit(1733060925.573:610): avc: denied { kernel } for pid=4913 comm="syz.3.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 61.627781][ T4614] udevd[4614]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 61.642186][ T4358] udevd[4358]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 61.646333][ T4614] udevd[4614]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 61.655312][ T4358] udevd[4358]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 61.667899][ T4923] loop3: detected capacity change from 0 to 128 [ 61.680162][ T29] audit: type=1400 audit(1733060925.693:611): avc: denied { relabelfrom } for pid=4913 comm="syz.3.598" name="" dev="pipefs" ino=8741 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 61.724713][ T4923] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 61.758680][ T4923] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 61.827352][ T35] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 61.827486][ T3297] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.834770][ T35] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 61.852082][ T35] hid-generic 0000:0003:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 61.856265][ T4939] loop4: detected capacity change from 0 to 2048 [ 61.887989][ T4945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.896585][ T4945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.917156][ T4939] loop4: p1 < > p4 [ 61.921712][ T4939] loop4: p4 size 8388608 extends beyond EOD, truncated [ 61.976771][ T2999] loop4: p1 < > p4 [ 61.981207][ T2999] loop4: p4 size 8388608 extends beyond EOD, truncated [ 61.994187][ T4953] netlink: 24 bytes leftover after parsing attributes in process `syz.2.615'. [ 62.202340][ T4982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.628'. [ 62.224694][ T4985] loop1: detected capacity change from 0 to 128 [ 62.484218][ T5007] loop3: detected capacity change from 0 to 2048 [ 62.532505][ T5011] loop4: detected capacity change from 0 to 512 [ 62.539578][ T5011] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 62.548703][ T5007] loop3: p1 < > p4 [ 62.552946][ T5011] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 62.559568][ T5011] EXT4-fs (loop4): mount failed [ 62.559652][ T5007] loop3: p4 size 8388608 extends beyond EOD, truncated [ 62.602534][ T2999] loop3: p1 < > p4 [ 62.607528][ T2999] loop3: p4 size 8388608 extends beyond EOD, truncated [ 62.651734][ T4614] udevd[4614]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 62.668611][ T4358] udevd[4358]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 62.675437][ T5026] netlink: 40 bytes leftover after parsing attributes in process `syz.3.646'. [ 62.713444][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 62.727592][ T8] hid-generic 0000:0003:0000.0007: unknown main item tag 0x0 [ 62.735013][ T8] hid-generic 0000:0003:0000.0007: unknown main item tag 0x0 [ 62.743822][ T8] hid-generic 0000:0003:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 63.011874][ T5037] loop1: detected capacity change from 0 to 2048 [ 63.039008][ T5037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.588954][ T5051] loop3: detected capacity change from 0 to 2048 [ 63.617185][ T5052] dccp_close: ABORT with 29 bytes unread [ 63.647848][ T5051] loop3: p1 < > p4 [ 63.653634][ T5051] loop3: p4 size 8388608 extends beyond EOD, truncated [ 63.690159][ T2999] loop3: p1 < > p4 [ 63.698613][ T2999] loop3: p4 size 8388608 extends beyond EOD, truncated [ 63.727490][ T4358] udevd[4358]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 63.728330][ T4614] udevd[4614]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 63.836610][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.839701][ T8] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 63.853101][ T8] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 63.861989][ T8] hid-generic 0000:0003:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 63.894477][ T5078] netlink: 'syz.1.665': attribute type 3 has an invalid length. [ 63.902208][ T5078] netlink: 24 bytes leftover after parsing attributes in process `syz.1.665'. [ 63.911106][ T5078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.665'. [ 63.935961][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 63.935973][ T29] audit: type=1326 audit(1733060927.953:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.1.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2b2b0849 code=0x7ffc0000 [ 63.966538][ T29] audit: type=1326 audit(1733060927.953:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.1.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2b2b0849 code=0x7ffc0000 [ 63.989890][ T29] audit: type=1326 audit(1733060927.953:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.1.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7b2b2b0849 code=0x7ffc0000 [ 64.013103][ T29] audit: type=1326 audit(1733060927.993:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.1.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2b2b0849 code=0x7ffc0000 [ 64.036339][ T29] audit: type=1326 audit(1733060927.993:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.1.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2b2b0849 code=0x7ffc0000 [ 64.059650][ T29] audit: type=1326 audit(1733060927.993:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.1.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7b2b2b0849 code=0x7ffc0000 [ 64.123665][ T29] audit: type=1326 audit(1733060928.143:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5084 comm="syz.2.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ef500849 code=0x7ffc0000 [ 64.147181][ T29] audit: type=1326 audit(1733060928.143:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5084 comm="syz.2.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ef500849 code=0x7ffc0000 [ 64.170809][ T29] audit: type=1326 audit(1733060928.173:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5084 comm="syz.2.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42ef500849 code=0x7ffc0000 [ 64.194109][ T29] audit: type=1326 audit(1733060928.173:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5084 comm="syz.2.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ef500849 code=0x7ffc0000 [ 64.434230][ T5095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.442891][ T5095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.593845][ T5101] loop4: detected capacity change from 0 to 128 [ 64.602273][ T5101] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.614568][ T5101] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 64.647774][ T3307] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.671737][ T5105] loop4: detected capacity change from 0 to 2048 [ 64.678546][ T5105] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.698821][ T5105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.735482][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.983511][ T5125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.681'. [ 65.601239][ T5146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.610595][ T5146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.663893][ T5150] 9pnet_fd: Insufficient options for proto=fd [ 65.674938][ T5152] ================================================================== [ 65.683049][ T5152] BUG: KCSAN: data-race in rxrpc_input_call_event / rxrpc_send_data [ 65.691050][ T5152] [ 65.693375][ T5152] write to 0xffff8881205d46f4 of 4 bytes by task 5153 on cpu 0: [ 65.701017][ T5152] rxrpc_input_call_event+0x8ef/0x12e0 [ 65.706499][ T5152] rxrpc_io_thread+0x30e/0x1fb0 [ 65.711383][ T5152] kthread+0x1d1/0x210 [ 65.715465][ T5152] ret_from_fork+0x4b/0x60 [ 65.719896][ T5152] ret_from_fork_asm+0x1a/0x30 [ 65.724667][ T5152] [ 65.726985][ T5152] read to 0xffff8881205d46f4 of 4 bytes by task 5152 on cpu 1: [ 65.734546][ T5152] rxrpc_send_data+0x889/0x1820 [ 65.739406][ T5152] rxrpc_do_sendmsg+0xb92/0xc30 [ 65.744245][ T5152] rxrpc_sendmsg+0x417/0x520 [ 65.748829][ T5152] __sock_sendmsg+0x140/0x180 [ 65.753508][ T5152] ____sys_sendmsg+0x312/0x410 [ 65.758276][ T5152] __sys_sendmsg+0x19d/0x230 [ 65.762853][ T5152] __x64_sys_sendmsg+0x46/0x50 [ 65.767612][ T5152] x64_sys_call+0x2734/0x2dc0 [ 65.772287][ T5152] do_syscall_64+0xc9/0x1c0 [ 65.776788][ T5152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.782686][ T5152] [ 65.784993][ T5152] value changed: 0x00000003 -> 0x00000004 [ 65.790692][ T5152] [ 65.793000][ T5152] Reported by Kernel Concurrency Sanitizer on: [ 65.799147][ T5152] CPU: 1 UID: 0 PID: 5152 Comm: syz.1.693 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 65.809420][ T5152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 65.819460][ T5152] ==================================================================