last executing test programs: 4.630620082s ago: executing program 3 (id=1330): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket(0x840000000002, 0x3, 0xff) syz_mount_image$ext4(&(0x7f00000022c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x840, &(0x7f0000001780)={[], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@dont_measure}, {@pcr={'pcr', 0x3d, 0x15}}]}, 0x0, 0x543, &(0x7f0000001200)="$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") timer_create(0xfffffffffffffff4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6(0xa, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents(r4, &(0x7f0000000f40)=""/243, 0xf3) bind$802154_raw(r0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r5, 0x4, 0x40800) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 3.967842737s ago: executing program 4 (id=1336): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x4, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x400, 0x32, 0xffff5cef, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x20009a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x8, 0x3, 0x6, 0x2, 0xffffff87, 0xcfc, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000003, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x6, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x8, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x1000009, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x100003, 0x2, 0x204, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x2de9, 0x9, 0x2, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0xc4d, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8002, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x40, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x5, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x5, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x83fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x4, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0xff, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x7, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x280000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x7, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0xf, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x9, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x1, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = epoll_create(0x200) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, 0x0) epoll_wait(r8, &(0x7f0000000080), 0x0, 0xffffff90) close(r6) openat$hwrng(0xffffffffffffff9c, 0x0, 0x200, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f00000000c0)={[{@init_itable}, {@abort}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r9 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r9, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x400000, 0x2, 0x0, 0x0, 0x2401}) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000500000002000000070000000100", @ANYRES32=0x1, @ANYBLOB="920e00000000000000000000160000", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 3.729576909s ago: executing program 3 (id=1339): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000e7eba5ea024a2ab2556a412c4b300"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5, r0}, 0x38) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef001e000000002c"], 0x66) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r3, &(0x7f0000000000), 0x0}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5000}, @ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210}, 0x22) socket$kcm(0x11, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x6000, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000001000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) socket$kcm(0x10, 0x2, 0x0) 2.846986464s ago: executing program 3 (id=1342): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f0000000040), 0x1003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000100)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@cgroup, 0xffffffffffffffff, 0x11}, 0x10) syz_open_procfs(0x0, &(0x7f0000000280)='gid_map\x00') r4 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x8) r6 = openat$cgroup(r5, 0x0, 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1.994504428s ago: executing program 4 (id=1345): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x300) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 1.94788189s ago: executing program 2 (id=1348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0xffdd) 1.808376167s ago: executing program 3 (id=1351): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r3, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) sendmsg$nl_route(r1, 0x0, 0x400c044) recvmmsg(r0, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{0x0}, {&(0x7f0000001f40)=""/24, 0x18}], 0x2}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, &(0x7f0000000000)=0x100) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.765143769s ago: executing program 4 (id=1352): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200"/29], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xb, 0x0, &(0x7f00000005c0)="a75f04ebffffff6f2f3534", 0x0, 0x400000ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x11, 0xa, 0x300, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 1.76463145s ago: executing program 0 (id=1353): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) sendmsg$nl_route(r1, 0x0, 0x400c044) recvmmsg(r0, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{0x0}, {&(0x7f0000001f40)=""/24, 0x18}], 0x2}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, &(0x7f0000000000)=0x100) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.532362831s ago: executing program 0 (id=1357): socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95524fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x11, 0x2, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x23, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) recvmsg$kcm(r4, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f00000002c0)=""/193, 0xc1}, {&(0x7f0000000500)=""/101, 0x65}, {&(0x7f0000000680)=""/4, 0x4}, {&(0x7f00000006c0)=""/248, 0xf8}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/28, 0x1c}, {&(0x7f0000002c40)=""/144, 0x90}, {&(0x7f0000002d00)=""/58, 0x3a}], 0x9, &(0x7f0000002e00)=""/200, 0xc8}, 0x2003) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r2, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r5}, &(0x7f0000000b40), &(0x7f0000000b80)=r3}, 0x20) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xd, 0x80, 0x5, 0x9, 0x0, 0xffffffff82a1e23b, 0x81200, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0xf6d, 0x8}, 0x6922, 0x7, 0x7f, 0x1, 0x6, 0x1, 0x6, 0x0, 0x8000, 0x0, 0xfff}, 0x0, 0x4, r0, 0x2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000240)={0x0, 0x80, 0x2, 0x5, 0x94, 0x4, 0x0, 0x6, 0x40200, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x10908, 0x8, 0x0, 0x3, 0x8000000000000000, 0x10001, 0x1, 0x0, 0x1, 0x0, 0x80}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x3a, 0x8e, 0x1}, 0x28) r7 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r7}) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x8916, &(0x7f0000000000)={r8}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r7}) 1.502492443s ago: executing program 2 (id=1358): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000006902e7d42668c47120de4393a500e3aa674f2f45465c6debd9426f7faf8559b9878bca4fd12e0a526b0b7793341f38627cb7a06eaf38b599f53c14bb0daa2d1839e4b54eb0fcc6983c972d259430f5de22a010fa5fd83202a9aafd07685a99b93a5ad82a14c0aeca19799f9f7a0f1661ed8c02b37fba148a55d814b21f5189a8effa8441a032100a6b0999fe63e7091b8cd4bbcdd32f2d35807afda501a9238665e65cdd594a1518cc572db6037da052428e999c6", @ANYRES16=0x0, @ANYBLOB="010029bd7000ffffffff390000000c009900020000007500000004000d80"], 0x24}, 0x1, 0x0, 0x0, 0x8040000}, 0x44844) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfd44) 1.484616924s ago: executing program 1 (id=1359): connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r2 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000100)) setsockopt$inet6_int(r2, 0x29, 0x18, &(0x7f0000000140)=0xfffff87c, 0x4) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000000)=@ethtool_test={0x1a, 0x8, 0x7, 0x2, [0x7, 0x0]}}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) r8 = socket(0x1e, 0x1, 0x0) write$nci(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r5, @ANYRES16=r8], 0x14) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010100}}) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000004c0)=ANY=[@ANYBLOB="041d000000000000e4280bb3f5b45c596de4cdae6227c724aca2447a2509c107a7e8ca0a1bf47e3f6e52eab7e39927a59008072800000003085309000100008000000000adcc647e0000000000000000000000000d0000000000000007100000000102270600050f000000000000c910000000000000000000000000000000017f66c41bd414eccce7b1b2bd89bfbd7e1721ed026c5cb05bbf35a591ef52478f4cbe15841706ba19bf4fb21a4c6fd769cf916b029fc2"], 0xf8) 1.420322398s ago: executing program 0 (id=1360): socket(0x10, 0x803, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000004240)=0x40000006, 0x4) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0xa0, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x10004004, &(0x7f0000000140)={0xa, 0x4e21, 0x765, @empty, 0x905e3b80}, 0x1c) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0x82}, 0xdb2c}], 0x1, 0x40002042, 0x0) 1.386503649s ago: executing program 0 (id=1361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f0000000040), 0x1003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000100)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@cgroup, 0xffffffffffffffff, 0x11}, 0x10) syz_open_procfs(0x0, &(0x7f0000000280)='gid_map\x00') fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1.36382549s ago: executing program 2 (id=1362): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000006902e7d42668c47120de4393a500e3aa674f2f45465c6debd9426f7faf8559b9878bca4fd12e0a526b0b7793341f38627cb7a06eaf38b599f53c14bb0daa2d1839e4b54eb0fcc6983c972d259430f5de22a010fa5fd83202a9aafd07685a99b93a5ad82a14c0aeca19799f9f7a0f1661ed8c02b37fba148a55d814b21f5189a8effa8441a032100a6b0999fe63e7091b8cd4bbcdd32f2d35807afda501a9238665e65cdd594a1518cc572db6037da052428e999c6", @ANYRES16=0x0, @ANYBLOB="010029bd7000ffffffff390000000c009900020000007500000004000d80"], 0x24}, 0x1, 0x0, 0x0, 0x8040000}, 0x44844) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfd44) 1.220218037s ago: executing program 2 (id=1363): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000840)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r1, 0x7}, 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x0) 1.205999208s ago: executing program 1 (id=1364): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x24000084) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 1.055042226s ago: executing program 1 (id=1365): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688655887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.005527868s ago: executing program 1 (id=1366): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa15}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffd, 0x1, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') close(0x3) close(0x4) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) 930.522012ms ago: executing program 1 (id=1367): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="0ef4fac981766e796c0a6ead92501b097565c8f6ffa88c029a84371eae4cbbfd340613e53c05ca649bfed413ec7d5800fc11456966fcdc0c06364c8605a0d376f07d842045607c0950e9b7417a86be331db0bf46de5f13424c6372072c9c0150ea9f1a9f6414babe5e0044787afc747a44dd7bd3749565459a8534"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f0000000480)=""/2, 0x2}, 0x101) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000200)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4b50, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000035000b63717a3c4a01d8985b0808aa78", 0x14}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r4, &(0x7f0000000780), 0x2, 0x0) openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f0000000080)='syz1\x00', 0x1ff) 929.870343ms ago: executing program 3 (id=1368): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) sendmsg$nl_route(r1, 0x0, 0x400c044) recvmmsg(r0, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{0x0}, {&(0x7f0000001f40)=""/24, 0x18}], 0x2}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, &(0x7f0000000000)=0x100) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 925.503833ms ago: executing program 4 (id=1369): socket(0x8000000010, 0x2, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r0, 0x0, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) r5 = socket(0x1e, 0x1, 0x0) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r2, @ANYRES16=r5], 0x14) 906.905924ms ago: executing program 1 (id=1370): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x140) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$inet6(0xa, 0x1, 0xe16) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000003, 0xc071, 0xffffffffffffffff, 0x4d392000) madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x3) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_open_dev$loop(&(0x7f0000000440), 0xf, 0x183043) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x33, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x8f, 0x40000) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001280)={r4, 0x212, {0x2a12, 0x80010000, 0x0, 0x3, 0x20000000000006, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7ca64c6a4b4e00d9683dda1af1ea80000000000000000000000deff1200100000000000000000000000000800", "2809a9000000038948224ad54afac11d875375bdb2420000b420a1a93c7540f4767f9e01177d3dd40600000061ac000000800800", "90be8b1c55f96400", [0x5, 0x4]}}) r7 = syz_open_pts(0xffffffffffffffff, 0x2) ioctl$VT_GETMODE(r7, 0x5601, &(0x7f0000000000)) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x20000023896) 865.927066ms ago: executing program 4 (id=1371): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 865.479866ms ago: executing program 4 (id=1372): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x140) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$inet6(0xa, 0x1, 0xe16) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000003, 0xc071, 0xffffffffffffffff, 0x4d392000) madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x3) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_open_dev$loop(&(0x7f0000000440), 0xf, 0x183043) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x33, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x8f, 0x40000) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001280)={r4, 0x212, {0x2a12, 0x80010000, 0x0, 0x3, 0x20000000000006, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7ca64c6a4b4e00d9683dda1af1ea80000000000000000000000deff1200100000000000000000000000000800", "2809a9000000038948224ad54afac11d875375bdb2420000b420a1a93c7540f4767f9e01177d3dd40600000061ac000000800800", "90be8b1c55f96400", [0x5, 0x4]}}) syz_open_pts(0xffffffffffffffff, 0x2) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) 478.557886ms ago: executing program 0 (id=1373): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x8903, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c23003f) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0xf, 0x4, 0x0, &(0x7f0000000140)) socketpair(0x1e, 0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100, 0x2000000, 0xd384ed8852b2f03d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xe, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000200), 0x21) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1b, 0x16, &(0x7f0000001a00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x67}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000006000000080000000800000000000000", @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x2000000000000002, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) write$cgroup_int(r4, &(0x7f0000000100)=0x1, 0x12) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) write$cgroup_int(r2, &(0x7f0000000100)=0x1, 0x12) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)) 378.263461ms ago: executing program 0 (id=1374): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socketpair(0x11, 0xa, 0x300, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 361.094552ms ago: executing program 2 (id=1375): connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r2 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000100)) setsockopt$inet6_int(r2, 0x29, 0x18, &(0x7f0000000140)=0xfffff87c, 0x4) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000000)=@ethtool_test={0x1a, 0x8, 0x7, 0x2, [0x7, 0x0]}}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) r8 = socket(0x1e, 0x1, 0x0) write$nci(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r5, @ANYRES16=r8], 0x14) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010100}}) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xf8) 41.382048ms ago: executing program 3 (id=1376): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa7"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x400000ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x11, 0xa, 0x300, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 0s ago: executing program 2 (id=1377): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688655887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 23.433792][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 23.433810][ T28] audit: type=1400 audit(1777000084.784:57): avc: denied { transition } for pid=3295 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.440037][ T28] audit: type=1400 audit(1777000084.784:58): avc: denied { noatsecure } for pid=3295 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.443318][ T28] audit: type=1400 audit(1777000084.784:59): avc: denied { write } for pid=3295 comm="sh" path="pipe:[2536]" dev="pipefs" ino=2536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 23.446742][ T28] audit: type=1400 audit(1777000084.784:60): avc: denied { rlimitinh } for pid=3295 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.450045][ T28] audit: type=1400 audit(1777000084.784:61): avc: denied { siginh } for pid=3295 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.184' (ED25519) to the list of known hosts. [ 31.617637][ T28] audit: type=1400 audit(1777000092.964:62): avc: denied { mounton } for pid=3308 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.640807][ T28] audit: type=1400 audit(1777000092.994:63): avc: denied { mount } for pid=3308 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.641474][ T3308] cgroup: Unknown subsys name 'net' [ 31.668682][ T28] audit: type=1400 audit(1777000093.014:64): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.810313][ T3308] cgroup: Unknown subsys name 'cpuset' [ 31.816546][ T3308] cgroup: Unknown subsys name 'rlimit' [ 31.926312][ T28] audit: type=1400 audit(1777000093.274:65): avc: denied { setattr } for pid=3308 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.949791][ T28] audit: type=1400 audit(1777000093.274:66): avc: denied { create } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.970449][ T28] audit: type=1400 audit(1777000093.274:67): avc: denied { write } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.991056][ T28] audit: type=1400 audit(1777000093.274:68): avc: denied { read } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.998498][ T3313] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 32.011402][ T28] audit: type=1400 audit(1777000093.274:69): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 32.041232][ T28] audit: type=1400 audit(1777000093.274:70): avc: denied { mounton } for pid=3308 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 32.066252][ T28] audit: type=1400 audit(1777000093.274:71): avc: denied { mount } for pid=3308 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 32.106870][ T3308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.294476][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 33.308122][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 33.329545][ T3327] chnl_net:caif_netlink_parms(): no params data found [ 33.376052][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 33.386949][ T3326] chnl_net:caif_netlink_parms(): no params data found [ 33.428683][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.437629][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.444994][ T3320] bridge_slave_0: entered allmulticast mode [ 33.451364][ T3320] bridge_slave_0: entered promiscuous mode [ 33.478743][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.486053][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.493263][ T3320] bridge_slave_1: entered allmulticast mode [ 33.499828][ T3320] bridge_slave_1: entered promiscuous mode [ 33.514949][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.522166][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.529300][ T3327] bridge_slave_0: entered allmulticast mode [ 33.535900][ T3327] bridge_slave_0: entered promiscuous mode [ 33.548900][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.556250][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.563506][ T3319] bridge_slave_0: entered allmulticast mode [ 33.570113][ T3319] bridge_slave_0: entered promiscuous mode [ 33.576720][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.583818][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.590991][ T3319] bridge_slave_1: entered allmulticast mode [ 33.597888][ T3319] bridge_slave_1: entered promiscuous mode [ 33.606625][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.613800][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.621291][ T3327] bridge_slave_1: entered allmulticast mode [ 33.627783][ T3327] bridge_slave_1: entered promiscuous mode [ 33.657153][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.667547][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.699085][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.708345][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.715940][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.723160][ T3322] bridge_slave_0: entered allmulticast mode [ 33.729832][ T3322] bridge_slave_0: entered promiscuous mode [ 33.737445][ T3327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.755957][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.769749][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.776908][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.784033][ T3322] bridge_slave_1: entered allmulticast mode [ 33.790480][ T3322] bridge_slave_1: entered promiscuous mode [ 33.797832][ T3327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.811387][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.818595][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.825928][ T3326] bridge_slave_0: entered allmulticast mode [ 33.832602][ T3326] bridge_slave_0: entered promiscuous mode [ 33.839699][ T3320] team0: Port device team_slave_0 added [ 33.858133][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.865397][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.873145][ T3326] bridge_slave_1: entered allmulticast mode [ 33.879558][ T3326] bridge_slave_1: entered promiscuous mode [ 33.886828][ T3320] team0: Port device team_slave_1 added [ 33.893378][ T3319] team0: Port device team_slave_0 added [ 33.904620][ T3327] team0: Port device team_slave_0 added [ 33.918832][ T3319] team0: Port device team_slave_1 added [ 33.925476][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.935314][ T3327] team0: Port device team_slave_1 added [ 33.955053][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.973324][ T3326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.982738][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.989752][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.017550][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.042410][ T3326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.056607][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.063696][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.090314][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.101678][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.108655][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.135067][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.146869][ T3322] team0: Port device team_slave_0 added [ 34.152929][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.160035][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.186115][ T3327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.203782][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.210798][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.236939][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.248931][ T3322] team0: Port device team_slave_1 added [ 34.259443][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.266596][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.292503][ T3327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.303940][ T3326] team0: Port device team_slave_0 added [ 34.310770][ T3326] team0: Port device team_slave_1 added [ 34.340279][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.347266][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.374077][ T3326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.385649][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.392872][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.419004][ T3326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.430180][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.437390][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.463417][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.475111][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.482091][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.508108][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.539201][ T3320] hsr_slave_0: entered promiscuous mode [ 34.545217][ T3320] hsr_slave_1: entered promiscuous mode [ 34.570617][ T3327] hsr_slave_0: entered promiscuous mode [ 34.576510][ T3327] hsr_slave_1: entered promiscuous mode [ 34.582616][ T3327] debugfs: 'hsr0' already exists in 'hsr' [ 34.588332][ T3327] Cannot create hsr debugfs directory [ 34.605726][ T3319] hsr_slave_0: entered promiscuous mode [ 34.611748][ T3319] hsr_slave_1: entered promiscuous mode [ 34.617519][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 34.623266][ T3319] Cannot create hsr debugfs directory [ 34.646467][ T3322] hsr_slave_0: entered promiscuous mode [ 34.652704][ T3322] hsr_slave_1: entered promiscuous mode [ 34.658662][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 34.664740][ T3322] Cannot create hsr debugfs directory [ 34.672905][ T3326] hsr_slave_0: entered promiscuous mode [ 34.678883][ T3326] hsr_slave_1: entered promiscuous mode [ 34.684694][ T3326] debugfs: 'hsr0' already exists in 'hsr' [ 34.690448][ T3326] Cannot create hsr debugfs directory [ 34.888276][ T3320] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.896667][ T3320] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.904512][ T3320] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.913083][ T3320] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.923167][ T3320] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.931558][ T3320] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.941573][ T3320] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.950207][ T3320] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.969153][ T3327] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.977693][ T3327] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.985373][ T3327] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.993870][ T3327] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.001397][ T3327] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.010135][ T3327] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.017883][ T3327] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.026340][ T3327] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.058180][ T3319] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.067014][ T3319] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.074672][ T3319] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.083606][ T3319] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.091328][ T3319] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.100267][ T3319] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.107850][ T3319] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.116314][ T3319] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.157380][ T3326] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.166191][ T3326] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.174758][ T3326] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.183310][ T3326] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.191040][ T3326] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.199462][ T3326] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.213291][ T3326] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.221853][ T3326] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.240281][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.270424][ T3322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.279198][ T3322] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.287043][ T3322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.296246][ T3322] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.304135][ T3322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.312658][ T3322] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.320880][ T3322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.329598][ T3322] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.343589][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.360458][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.367628][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.382274][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.389528][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.400688][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.411783][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.434406][ T3327] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.450785][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.458056][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.467902][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.478763][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.485983][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.498169][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.505258][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.519048][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.526168][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.570788][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.606617][ T3326] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.619310][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.637093][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.644429][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.653802][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.660966][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.677713][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.694126][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.712034][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.719207][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.731918][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.739085][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.757716][ T3327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.787091][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.873114][ T3320] veth0_vlan: entered promiscuous mode [ 35.901122][ T3326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.911466][ T3320] veth1_vlan: entered promiscuous mode [ 35.950939][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.965838][ T3320] veth0_macvtap: entered promiscuous mode [ 35.981527][ T3320] veth1_macvtap: entered promiscuous mode [ 35.997743][ T3319] veth0_vlan: entered promiscuous mode [ 36.005675][ T3327] veth0_vlan: entered promiscuous mode [ 36.021528][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.032982][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.041968][ T3319] veth1_vlan: entered promiscuous mode [ 36.051527][ T3327] veth1_vlan: entered promiscuous mode [ 36.066517][ T310] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.079959][ T310] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.096988][ T310] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.105858][ T310] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.121016][ T3326] veth0_vlan: entered promiscuous mode [ 36.130757][ T3326] veth1_vlan: entered promiscuous mode [ 36.138933][ T3319] veth0_macvtap: entered promiscuous mode [ 36.155028][ T3319] veth1_macvtap: entered promiscuous mode [ 36.186753][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.197726][ T3327] veth0_macvtap: entered promiscuous mode [ 36.207068][ T3327] veth1_macvtap: entered promiscuous mode [ 36.220522][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.237105][ T3326] veth0_macvtap: entered promiscuous mode [ 36.243982][ T3320] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.246098][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.269198][ T3326] veth1_macvtap: entered promiscuous mode [ 36.277756][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.300486][ T142] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.321796][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.329574][ T142] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.338378][ T142] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.358740][ T3322] veth0_vlan: entered promiscuous mode [ 36.365999][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.373829][ T142] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.383052][ T142] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.397263][ T142] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.406301][ T142] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.422371][ T3322] veth1_vlan: entered promiscuous mode [ 36.429219][ T142] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.450813][ T142] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.459748][ T142] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.485497][ T142] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.500204][ T142] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.532730][ T3322] veth0_macvtap: entered promiscuous mode [ 36.558209][ T3322] veth1_macvtap: entered promiscuous mode [ 36.571267][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.583534][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.601539][ T366] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.617576][ T366] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.628135][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 36.628151][ T28] audit: type=1400 audit(1777000097.984:107): avc: denied { create } for pid=3503 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 36.660663][ T28] audit: type=1400 audit(1777000098.004:108): avc: denied { perfmon } for pid=3503 comm="syz.3.7" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 36.665513][ T366] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.683855][ T28] audit: type=1400 audit(1777000098.034:109): avc: denied { connect } for pid=3512 comm="syz.1.9" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.691574][ T3513] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 36.717301][ T366] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.757878][ T28] audit: type=1400 audit(1777000098.064:110): avc: denied { write } for pid=3512 comm="syz.1.9" laddr=fe80::13 lport=60 faddr=fe80::d fport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.786159][ T28] audit: type=1400 audit(1777000098.134:111): avc: denied { ioctl } for pid=3508 comm="syz.0.1" path="socket:[4063]" dev="sockfs" ino=4063 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.808013][ T3519] netlink: 'syz.3.11': attribute type 4 has an invalid length. [ 36.826519][ T3517] syzkaller0: entered promiscuous mode [ 36.835854][ T3517] syzkaller0: entered allmulticast mode [ 36.881090][ T28] audit: type=1400 audit(1777000098.214:112): avc: denied { write } for pid=3515 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.927204][ T28] audit: type=1400 audit(1777000098.264:113): avc: denied { ioctl } for pid=3521 comm="syz.4.5" path="socket:[4081]" dev="sockfs" ino=4081 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.952413][ T28] audit: type=1400 audit(1777000098.274:114): avc: denied { prog_run } for pid=3523 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 36.972633][ T28] audit: type=1400 audit(1777000098.304:115): avc: denied { create } for pid=3523 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 37.005312][ T3526] syzkaller0: entered promiscuous mode [ 37.011160][ T3526] syzkaller0: entered allmulticast mode [ 37.017173][ T28] audit: type=1400 audit(1777000098.304:116): avc: denied { open } for pid=3523 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 37.802654][ T3532] netlink: 'syz.0.16': attribute type 12 has an invalid length. [ 38.020532][ T3540] syzkaller0: entered promiscuous mode [ 38.026187][ T3540] syzkaller0: entered allmulticast mode [ 38.962344][ T3544] loop3: detected capacity change from 0 to 2048 [ 39.093625][ T3544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.135921][ T3544] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 39.347283][ T3491] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 39.781098][ T3569] syzkaller0: entered promiscuous mode [ 39.786840][ T3569] syzkaller0: entered allmulticast mode [ 40.004786][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.329013][ T3583] syzkaller0: entered promiscuous mode [ 40.339679][ T3583] syzkaller0: entered allmulticast mode [ 40.376404][ T3584] loop3: detected capacity change from 0 to 2048 [ 40.405538][ T3584] ext4: Unknown parameter '' [ 40.428741][ T3589] syzkaller0: entered promiscuous mode [ 40.445533][ T3589] syzkaller0: entered allmulticast mode [ 40.607300][ T3595] netlink: 'syz.4.36': attribute type 1 has an invalid length. [ 40.620739][ T3595] netlink: 'syz.4.36': attribute type 2 has an invalid length. [ 40.713503][ T3600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.38'. [ 40.937630][ T3605] syzkaller0: entered promiscuous mode [ 40.950895][ T3605] syzkaller0: entered allmulticast mode [ 41.042520][ T3614] syzkaller0: entered promiscuous mode [ 41.056848][ T3614] syzkaller0: entered allmulticast mode [ 41.075812][ T3616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=3616 comm=syz.4.45 [ 41.131570][ T3620] netlink: 64 bytes leftover after parsing attributes in process `syz.1.47'. [ 41.182390][ T3623] tipc: Started in network mode [ 41.189426][ T3623] tipc: Node identity 1ee6ebd96736, cluster identity 4711 [ 41.199563][ T3623] tipc: Enabled bearer , priority 0 [ 41.208494][ T3625] syzkaller0: entered promiscuous mode [ 41.215139][ T3625] syzkaller0: entered allmulticast mode [ 41.221830][ T3628] netlink: 'syz.0.50': attribute type 1 has an invalid length. [ 41.232435][ T3623] syzkaller0: entered promiscuous mode [ 41.238391][ T3623] syzkaller0: entered allmulticast mode [ 41.244278][ T3628] netlink: 'syz.0.50': attribute type 2 has an invalid length. [ 41.267553][ T3623] tipc: Resetting bearer [ 41.286257][ T3622] tipc: Resetting bearer [ 41.310533][ T3622] tipc: Disabling bearer [ 41.336271][ T3631] Zero length message leads to an empty skb [ 41.531586][ T3650] netlink: 64 bytes leftover after parsing attributes in process `syz.0.58'. [ 41.591872][ T3656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=3656 comm=syz.0.61 [ 41.592583][ T3652] syzkaller0: entered promiscuous mode [ 41.608680][ T3654] loop2: detected capacity change from 0 to 1024 [ 41.616997][ T3654] ======================================================= [ 41.616997][ T3654] WARNING: The mand mount option has been deprecated and [ 41.616997][ T3654] and is ignored by this kernel. Remove the mand [ 41.616997][ T3654] option from the mount to silence this warning. [ 41.616997][ T3654] ======================================================= [ 41.639675][ T3652] syzkaller0: entered allmulticast mode [ 41.657163][ T3654] EXT4-fs: test_dummy_encryption option not supported [ 41.802157][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 41.802176][ T28] audit: type=1400 audit(1777000103.154:143): avc: denied { write } for pid=3660 comm="syz.1.62" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.044326][ T3662] loop2: detected capacity change from 0 to 512 [ 42.076084][ T3662] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.205761][ T3662] EXT4-fs (loop2): 1 orphan inode deleted [ 42.232058][ T3662] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.249657][ T3662] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.446385][ T28] audit: type=1400 audit(1777000103.154:144): avc: denied { ioctl } for pid=3660 comm="syz.1.62" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.492020][ T366] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 42.517290][ T3415] IPVS: starting estimator thread 0... [ 42.578196][ T3662] syz.2.60 (3662) used greatest stack depth: 10128 bytes left [ 42.614876][ T366] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 1 [ 42.654575][ T28] audit: type=1400 audit(1777000104.004:145): avc: denied { create } for pid=3671 comm="syz.4.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 42.680960][ T3670] IPVS: using max 2832 ests per chain, 141600 per kthread [ 42.698315][ T3674] syzkaller0: entered promiscuous mode [ 42.741201][ T3674] syzkaller0: entered allmulticast mode [ 42.780505][ T28] audit: type=1400 audit(1777000104.004:146): avc: denied { getopt } for pid=3671 comm="syz.4.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 42.867541][ T28] audit: type=1400 audit(1777000104.124:147): avc: denied { name_bind } for pid=3675 comm="syz.4.65" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 42.995251][ T3688] netlink: 76 bytes leftover after parsing attributes in process `syz.0.69'. [ 43.025383][ T28] audit: type=1400 audit(1777000104.374:148): avc: denied { ioctl } for pid=3689 comm="syz.1.70" path="socket:[6176]" dev="sockfs" ino=6176 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.058231][ T3688] syzkaller0: entered promiscuous mode [ 43.073416][ T3688] syzkaller0: entered allmulticast mode [ 43.105960][ T28] audit: type=1400 audit(1777000104.374:149): avc: denied { setopt } for pid=3689 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.149399][ T3694] netlink: 64 bytes leftover after parsing attributes in process `syz.1.71'. [ 43.196018][ T28] audit: type=1400 audit(1777000104.374:150): avc: denied { bind } for pid=3689 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.218610][ T3696] syzkaller0: entered promiscuous mode [ 43.232195][ T3696] syzkaller0: entered allmulticast mode [ 43.273338][ T28] audit: type=1400 audit(1777000104.424:151): avc: denied { write } for pid=3689 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.400094][ T3700] syzkaller0: entered promiscuous mode [ 43.421929][ T3700] syzkaller0: entered allmulticast mode [ 43.475992][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.694619][ T3718] netlink: 76 bytes leftover after parsing attributes in process `syz.4.82'. [ 43.716946][ T3718] syzkaller0: entered promiscuous mode [ 43.730234][ T3718] syzkaller0: entered allmulticast mode [ 43.771031][ T3722] syzkaller0: entered promiscuous mode [ 43.788529][ T3722] syzkaller0: entered allmulticast mode [ 44.218044][ T3746] netlink: 76 bytes leftover after parsing attributes in process `syz.3.95'. [ 44.228123][ T3746] syzkaller0: entered promiscuous mode [ 44.233865][ T3746] syzkaller0: entered allmulticast mode [ 44.633393][ T3769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=3769 comm=syz.1.106 [ 45.282159][ T3816] syzkaller0: entered promiscuous mode [ 45.288066][ T3816] syzkaller0: entered allmulticast mode [ 45.591116][ T3839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=3839 comm=syz.4.136 [ 45.665921][ T3844] syzkaller0: entered promiscuous mode [ 45.671796][ T3844] syzkaller0: entered allmulticast mode [ 45.877573][ T3871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'. [ 45.888491][ T3873] netlink: 'syz.3.148': attribute type 1 has an invalid length. [ 45.897024][ T3873] netlink: 'syz.3.148': attribute type 2 has an invalid length. [ 45.961930][ T3879] syzkaller0: entered promiscuous mode [ 45.967657][ T3879] syzkaller0: entered allmulticast mode [ 46.198761][ T3888] syzkaller0: entered promiscuous mode [ 46.208978][ T3888] syzkaller0: entered allmulticast mode [ 46.594376][ T3906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.160'. [ 46.893695][ T3927] syzkaller0: entered promiscuous mode [ 46.899358][ T3927] syzkaller0: entered allmulticast mode [ 47.036421][ T3948] syzkaller0: entered promiscuous mode [ 47.047016][ T3948] syzkaller0: entered allmulticast mode [ 47.060315][ T3950] syzkaller0: entered promiscuous mode [ 47.066531][ T3950] syzkaller0: entered allmulticast mode [ 47.392462][ T3970] syzkaller0: entered promiscuous mode [ 47.403770][ T3970] syzkaller0: entered allmulticast mode [ 47.626655][ T3985] syzkaller0: entered promiscuous mode [ 47.632195][ T3985] syzkaller0: entered allmulticast mode [ 47.648605][ T3987] syzkaller0: entered promiscuous mode [ 47.654185][ T3987] syzkaller0: entered allmulticast mode [ 47.848399][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 47.848418][ T28] audit: type=1400 audit(1777000109.194:164): avc: denied { bind } for pid=3996 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 47.913381][ T4002] netlink: 'syz.1.198': attribute type 12 has an invalid length. [ 48.123894][ T4012] syzkaller0: entered promiscuous mode [ 48.129500][ T4012] syzkaller0: entered allmulticast mode [ 48.172236][ T4016] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=4016 comm=syz.4.202 [ 48.217106][ T4022] syzkaller0: entered promiscuous mode [ 48.222848][ T4022] syzkaller0: entered allmulticast mode [ 48.525477][ T4038] netlink: 'syz.4.210': attribute type 12 has an invalid length. [ 48.620848][ T4053] syzkaller0: entered promiscuous mode [ 48.626548][ T4053] syzkaller0: entered allmulticast mode [ 48.768001][ T4060] syzkaller0: entered promiscuous mode [ 48.773557][ T4060] syzkaller0: entered allmulticast mode [ 48.809068][ T4063] syzkaller0: entered promiscuous mode [ 48.814700][ T4063] syzkaller0: entered allmulticast mode [ 48.989048][ T4071] netlink: 76 bytes leftover after parsing attributes in process `syz.2.222'. [ 49.000088][ T4071] syzkaller0: entered promiscuous mode [ 49.005700][ T4071] syzkaller0: entered allmulticast mode [ 49.017674][ T4073] netlink: 'syz.1.223': attribute type 12 has an invalid length. [ 49.581497][ T4110] syzkaller0: entered promiscuous mode [ 49.600322][ T4110] syzkaller0: entered allmulticast mode [ 50.029757][ T4145] netlink: 'syz.0.251': attribute type 12 has an invalid length. [ 50.275678][ T4152] loop1: detected capacity change from 0 to 2048 [ 50.303074][ T4152] ext4: Unknown parameter '' [ 50.619376][ T4161] syzkaller0: entered promiscuous mode [ 50.629741][ T4161] syzkaller0: entered allmulticast mode [ 51.089505][ T4182] syzkaller0: entered promiscuous mode [ 51.116044][ T4182] syzkaller0: entered allmulticast mode [ 51.591180][ T4213] netlink: 'syz.2.276': attribute type 12 has an invalid length. [ 51.654510][ T4211] syzkaller0: entered promiscuous mode [ 51.670575][ T4211] syzkaller0: entered allmulticast mode [ 52.299513][ T4255] netlink: 76 bytes leftover after parsing attributes in process `syz.0.291'. [ 52.316619][ T4255] syzkaller0: entered promiscuous mode [ 52.323298][ T4255] syzkaller0: entered allmulticast mode [ 52.368087][ T4257] syzkaller0: entered promiscuous mode [ 52.373735][ T4257] syzkaller0: entered allmulticast mode [ 52.425157][ T4259] netlink: 'syz.0.293': attribute type 12 has an invalid length. [ 52.472622][ T4261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.294'. [ 52.501526][ T4261] bond1: entered promiscuous mode [ 52.514424][ T4261] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.560923][ T4261] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.576175][ T4261] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 52.600168][ T4261] bond1: (slave sit1): Error -95 calling set_mac_address [ 52.688443][ T4270] syzkaller0: entered promiscuous mode [ 52.694023][ T4270] syzkaller0: entered allmulticast mode [ 52.868172][ T4281] syzkaller0: entered promiscuous mode [ 52.873885][ T4281] syzkaller0: entered allmulticast mode [ 52.881961][ T4283] syzkaller0: entered promiscuous mode [ 52.887593][ T4283] syzkaller0: entered allmulticast mode [ 53.241207][ T4289] syzkaller0: entered promiscuous mode [ 53.246738][ T4289] syzkaller0: entered allmulticast mode [ 53.274275][ T4294] syzkaller0: entered promiscuous mode [ 53.280172][ T4294] syzkaller0: entered allmulticast mode [ 53.288300][ T4302] syzkaller0: entered promiscuous mode [ 53.298578][ T4302] syzkaller0: entered allmulticast mode [ 53.425132][ T4320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.312'. [ 53.456932][ T28] audit: type=1400 audit(1777000114.804:165): avc: denied { create } for pid=4323 comm="syz.4.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.477538][ T28] audit: type=1400 audit(1777000114.804:166): avc: denied { write } for pid=4323 comm="syz.4.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.480499][ T4326] netlink: 'syz.4.315': attribute type 12 has an invalid length. [ 53.498523][ T28] audit: type=1400 audit(1777000114.804:167): avc: denied { nlmsg_write } for pid=4323 comm="syz.4.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.644514][ T28] audit: type=1400 audit(1777000114.994:168): avc: denied { create } for pid=4341 comm="syz.3.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 53.653187][ T4345] syzkaller0: entered promiscuous mode [ 53.675794][ T4345] syzkaller0: entered allmulticast mode [ 53.765570][ T4354] netlink: 76 bytes leftover after parsing attributes in process `syz.3.325'. [ 53.776916][ T4354] syzkaller0: entered promiscuous mode [ 53.787900][ T4354] syzkaller0: entered allmulticast mode [ 54.056010][ T4372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=4372 comm=syz.3.332 [ 54.081199][ T4373] syzkaller0: entered promiscuous mode [ 54.086820][ T4373] syzkaller0: entered allmulticast mode [ 54.115303][ T4377] loop1: detected capacity change from 0 to 1024 [ 54.122147][ T4377] EXT4-fs: test_dummy_encryption option not supported [ 54.178758][ T4380] netlink: 40 bytes leftover after parsing attributes in process `syz.0.335'. [ 54.598699][ T4391] loop1: detected capacity change from 0 to 512 [ 54.709725][ T4391] EXT4-fs (loop1): 1 orphan inode deleted [ 54.732676][ T4391] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.751654][ T4391] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.925367][ T3383] IPVS: starting estimator thread 0... [ 54.988426][ T4399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 55.005867][ T4399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.339'. [ 55.037164][ T4402] netlink: 76 bytes leftover after parsing attributes in process `syz.2.340'. [ 55.059029][ T4402] syzkaller0: entered promiscuous mode [ 55.076688][ T4402] syzkaller0: entered allmulticast mode [ 55.082394][ T4398] IPVS: using max 2832 ests per chain, 141600 per kthread [ 55.283290][ T142] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 55.294520][ T142] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:5: Failed to release dquot type 1 [ 55.349077][ T4418] netlink: 'syz.3.346': attribute type 12 has an invalid length. [ 55.642612][ T4430] syzkaller0: entered promiscuous mode [ 55.654422][ T4430] syzkaller0: entered allmulticast mode [ 55.779687][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.906354][ T4437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=4437 comm=syz.1.353 [ 55.943202][ T28] audit: type=1400 audit(1777000117.294:169): avc: denied { tracepoint } for pid=4440 comm="syz.4.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 55.985011][ T28] audit: type=1400 audit(1777000117.334:170): avc: denied { mount } for pid=4440 comm="syz.4.356" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 56.043993][ T4447] netlink: 'syz.0.358': attribute type 12 has an invalid length. [ 56.057589][ T28] audit: type=1400 audit(1777000117.404:171): avc: denied { unmount } for pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 56.096316][ T4451] syzkaller0: entered promiscuous mode [ 56.104436][ T4451] syzkaller0: entered allmulticast mode [ 56.448077][ T4458] netlink: 76 bytes leftover after parsing attributes in process `syz.2.361'. [ 56.493319][ T4468] syzkaller0: entered promiscuous mode [ 56.499037][ T4468] syzkaller0: entered allmulticast mode [ 56.552897][ T4481] syzkaller0: entered promiscuous mode [ 56.558511][ T4481] syzkaller0: entered allmulticast mode [ 56.930794][ T4506] syzkaller0: entered promiscuous mode [ 56.936356][ T4506] syzkaller0: entered allmulticast mode [ 56.963209][ T4510] netlink: 20 bytes leftover after parsing attributes in process `syz.3.378'. [ 57.051459][ T4514] syzkaller0: entered promiscuous mode [ 57.057700][ T4514] syzkaller0: entered allmulticast mode [ 57.071820][ T4517] syzkaller0: entered promiscuous mode [ 57.077573][ T4517] syzkaller0: entered allmulticast mode [ 57.368117][ T4525] syzkaller0: entered promiscuous mode [ 57.378773][ T4525] syzkaller0: entered allmulticast mode [ 57.504163][ T28] audit: type=1400 audit(1777000118.854:172): avc: denied { create } for pid=4542 comm="syz.2.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 57.563363][ T4547] syzkaller0: entered promiscuous mode [ 57.569526][ T4547] syzkaller0: entered allmulticast mode [ 57.651705][ T4554] syzkaller0: entered promiscuous mode [ 57.657305][ T4554] syzkaller0: entered allmulticast mode [ 57.841802][ T4557] syzkaller0: entered promiscuous mode [ 57.847371][ T4557] syzkaller0: entered allmulticast mode [ 58.091764][ T4573] __nla_validate_parse: 1 callbacks suppressed [ 58.091784][ T4573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.402'. [ 58.107104][ T4573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.402'. [ 58.251061][ T4583] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 58.274390][ T4583] syzkaller0: entered promiscuous mode [ 58.281914][ T4583] syzkaller0: entered allmulticast mode [ 58.350951][ T4591] syzkaller0: entered promiscuous mode [ 58.352763][ T4589] netlink: 'syz.0.410': attribute type 1 has an invalid length. [ 58.356657][ T4591] syzkaller0: entered allmulticast mode [ 58.364395][ T4589] netlink: 'syz.0.410': attribute type 2 has an invalid length. [ 58.561760][ T4601] netlink: 32 bytes leftover after parsing attributes in process `syz.4.414'. [ 58.699312][ T4620] netlink: 'syz.4.422': attribute type 1 has an invalid length. [ 58.710927][ T4620] netlink: 'syz.4.422': attribute type 2 has an invalid length. [ 58.725501][ T4623] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 58.765268][ T4623] syzkaller0: entered promiscuous mode [ 58.771103][ T4623] syzkaller0: entered allmulticast mode [ 58.792635][ T4627] netlink: 32 bytes leftover after parsing attributes in process `syz.4.425'. [ 58.937201][ T4629] syzkaller0: entered promiscuous mode [ 58.949700][ T4629] syzkaller0: entered allmulticast mode [ 59.157133][ T4647] netlink: 76 bytes leftover after parsing attributes in process `syz.2.430'. [ 59.183174][ T4636] syzkaller0: entered promiscuous mode [ 59.188677][ T4636] syzkaller0: entered allmulticast mode [ 59.233038][ T4638] syzkaller0: entered promiscuous mode [ 59.238755][ T4638] syzkaller0: entered allmulticast mode [ 59.294087][ T4662] netlink: 'syz.3.435': attribute type 1 has an invalid length. [ 59.301982][ T4662] netlink: 'syz.3.435': attribute type 2 has an invalid length. [ 59.342699][ T4665] netlink: 32 bytes leftover after parsing attributes in process `syz.1.436'. [ 59.440435][ T4676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 59.449859][ T4676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 59.478381][ T4678] syzkaller0: entered promiscuous mode [ 59.484263][ T4678] syzkaller0: entered allmulticast mode [ 59.543568][ T4687] netlink: 'syz.1.447': attribute type 1 has an invalid length. [ 59.560019][ T4687] netlink: 'syz.1.447': attribute type 2 has an invalid length. [ 59.825891][ T4695] netlink: 76 bytes leftover after parsing attributes in process `syz.1.449'. [ 59.862000][ T4694] syzkaller0: entered promiscuous mode [ 59.867930][ T4694] syzkaller0: entered allmulticast mode [ 60.006678][ T4713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.457'. [ 60.063226][ T4717] netlink: 'syz.1.459': attribute type 1 has an invalid length. [ 60.073542][ T4717] netlink: 'syz.1.459': attribute type 2 has an invalid length. [ 60.130996][ T4723] syzkaller0: entered promiscuous mode [ 60.140505][ T4723] syzkaller0: entered allmulticast mode [ 60.395271][ T4744] syzkaller0: entered promiscuous mode [ 60.401520][ T4744] syzkaller0: entered allmulticast mode [ 60.574059][ T4767] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 60.772067][ T4775] syzkaller0: entered promiscuous mode [ 60.778109][ T4775] syzkaller0: entered allmulticast mode [ 60.806513][ T4779] syzkaller0: entered promiscuous mode [ 60.812378][ T4779] syzkaller0: entered allmulticast mode [ 61.274995][ T4811] syzkaller0: entered promiscuous mode [ 61.284785][ T4811] syzkaller0: entered allmulticast mode [ 61.493381][ T4822] loop1: detected capacity change from 0 to 2048 [ 61.533666][ T4822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.614113][ T4832] syzkaller0: entered promiscuous mode [ 61.623839][ T4832] syzkaller0: entered allmulticast mode [ 62.050493][ T4862] syzkaller0: entered promiscuous mode [ 62.058791][ T4862] syzkaller0: entered allmulticast mode [ 62.802328][ T4871] syzkaller0: entered promiscuous mode [ 62.808609][ T4871] syzkaller0: entered allmulticast mode [ 62.936474][ T4881] syzkaller0: entered promiscuous mode [ 62.945687][ T4881] syzkaller0: entered allmulticast mode [ 63.281372][ T4902] __nla_validate_parse: 4 callbacks suppressed [ 63.281389][ T4902] netlink: 24 bytes leftover after parsing attributes in process `syz.0.538'. [ 63.711839][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.718254][ T4917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 63.729935][ T4917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.545'. [ 64.115982][ T4956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'. [ 64.125374][ T4956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.559'. [ 64.250941][ T4973] syzkaller0: entered promiscuous mode [ 64.256735][ T4973] syzkaller0: entered allmulticast mode [ 64.491984][ T4980] syzkaller0: entered promiscuous mode [ 64.497537][ T4980] syzkaller0: entered allmulticast mode [ 64.580249][ T4987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.570'. [ 64.589274][ T4987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.570'. [ 64.949893][ T5008] syzkaller0: entered promiscuous mode [ 64.955477][ T5008] syzkaller0: entered allmulticast mode [ 65.005517][ T5010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.581'. [ 65.014501][ T5010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.581'. [ 65.428369][ T5050] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5050 comm=syz.2.594 [ 65.475823][ T5054] syzkaller0: entered promiscuous mode [ 65.485140][ T5054] syzkaller0: entered allmulticast mode [ 66.165886][ T5085] syzkaller0: entered promiscuous mode [ 66.171578][ T5085] syzkaller0: entered allmulticast mode [ 67.183409][ T28] audit: type=1400 audit(1777000128.534:173): avc: denied { setopt } for pid=5118 comm="syz.4.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.233494][ T28] audit: type=1400 audit(1777000128.584:174): avc: denied { create } for pid=5120 comm="syz.4.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 68.288242][ T5153] syzkaller0: entered promiscuous mode [ 68.293818][ T5153] syzkaller0: entered allmulticast mode [ 68.362583][ T5041] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 68.769215][ T5202] syzkaller0: entered promiscuous mode [ 68.775040][ T5202] syzkaller0: entered allmulticast mode [ 68.884683][ T28] audit: type=1400 audit(1777000130.234:175): avc: denied { setopt } for pid=5205 comm="syz.1.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.386291][ T5216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5216 comm=syz.0.654 [ 69.922327][ T5225] validate_nla: 3 callbacks suppressed [ 69.922346][ T5225] netlink: 'syz.1.656': attribute type 12 has an invalid length. [ 71.585844][ T5178] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 71.676858][ T5238] syzkaller0: entered promiscuous mode [ 71.697883][ T5238] syzkaller0: entered allmulticast mode [ 71.844745][ T5253] syzkaller0: entered promiscuous mode [ 71.853348][ T5253] syzkaller0: entered allmulticast mode [ 71.879424][ T5260] netlink: 24 bytes leftover after parsing attributes in process `syz.0.669'. [ 71.891042][ T5259] netlink: 'syz.4.668': attribute type 12 has an invalid length. [ 73.338500][ T5285] loop2: detected capacity change from 0 to 2048 [ 73.530744][ T5285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.560794][ T5285] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 74.079100][ T5301] syzkaller0: entered promiscuous mode [ 74.084862][ T5301] syzkaller0: entered allmulticast mode [ 74.230241][ T5305] syzkaller0: entered promiscuous mode [ 74.235798][ T5305] syzkaller0: entered allmulticast mode [ 74.414302][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.636555][ T28] audit: type=1400 audit(1777000135.984:176): avc: denied { create } for pid=5313 comm="syz.2.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 74.659503][ T28] audit: type=1400 audit(1777000136.004:177): avc: denied { write } for pid=5313 comm="syz.2.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 74.926750][ T5262] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 75.032981][ T28] audit: type=1400 audit(1777000136.384:178): avc: denied { relabelfrom } for pid=5336 comm="syz.4.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 75.086308][ T28] audit: type=1400 audit(1777000136.384:179): avc: denied { relabelto } for pid=5336 comm="syz.4.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 76.653136][ T5381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.712'. [ 76.668987][ T5381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.712'. [ 76.691998][ T5381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.712'. [ 78.309321][ T5359] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 78.772372][ T5436] loop0: detected capacity change from 0 to 2048 [ 78.826867][ T5436] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.113905][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.204650][ T5469] syzkaller0: entered promiscuous mode [ 82.212041][ T5469] syzkaller0: entered allmulticast mode [ 82.275112][ T5481] netlink: 'syz.2.751': attribute type 12 has an invalid length. [ 82.424367][ T5498] netlink: 'syz.1.755': attribute type 12 has an invalid length. [ 83.023657][ T5525] netlink: 830 bytes leftover after parsing attributes in process `syz.1.764'. [ 83.105726][ T5531] syzkaller0: entered promiscuous mode [ 83.111352][ T5531] syzkaller0: entered allmulticast mode [ 83.257443][ T28] audit: type=1400 audit(1777000144.604:180): avc: denied { setopt } for pid=5541 comm="syz.3.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 83.261628][ T5542] netlink: 'syz.3.772': attribute type 27 has an invalid length. [ 83.287662][ T5542] netlink: 'syz.3.772': attribute type 4 has an invalid length. [ 83.299496][ T5542] netlink: 152 bytes leftover after parsing attributes in process `syz.3.772'. [ 83.634707][ T5563] netlink: 'syz.3.780': attribute type 12 has an invalid length. [ 83.659406][ T5565] netlink: 'syz.0.781': attribute type 12 has an invalid length. [ 83.714269][ T5570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 83.747412][ T5570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.782'. [ 83.797474][ T5570] netlink: 232 bytes leftover after parsing attributes in process `syz.2.782'. [ 83.837042][ T5570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.782'. [ 84.023771][ T5585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.787'. [ 84.539496][ T5607] netlink: 'syz.0.798': attribute type 27 has an invalid length. [ 84.556308][ T5607] netlink: 'syz.0.798': attribute type 4 has an invalid length. [ 84.579684][ T5607] netlink: 152 bytes leftover after parsing attributes in process `syz.0.798'. [ 84.639002][ T28] audit: type=1400 audit(1777000145.984:181): avc: denied { remount } for pid=5619 comm="syz.4.802" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 84.675549][ T28] audit: type=1400 audit(1777000146.024:182): avc: denied { unmount } for pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 84.696163][ T5622] loop2: detected capacity change from 0 to 1024 [ 84.707012][ T5622] EXT4-fs: test_dummy_encryption option not supported [ 84.925885][ T5633] loop2: detected capacity change from 0 to 512 [ 84.975899][ T5633] EXT4-fs (loop2): 1 orphan inode deleted [ 84.985498][ T5633] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.998678][ T49] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 84.998709][ T49] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 1 [ 84.998733][ T49] loop2: lost filesystem error report for type 5 error -117 [ 85.022348][ T5633] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.320627][ T5656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.816'. [ 85.331685][ T28] audit: type=1400 audit(1777000146.684:183): avc: denied { connect } for pid=5652 comm="syz.0.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.353447][ T28] audit: type=1400 audit(1777000146.684:184): avc: denied { name_connect } for pid=5652 comm="syz.0.814" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 85.441389][ T5663] syzkaller0: entered promiscuous mode [ 85.447026][ T5663] syzkaller0: entered allmulticast mode [ 85.581824][ T5668] netlink: 'syz.3.822': attribute type 12 has an invalid length. [ 85.678401][ T5673] syzkaller0: entered promiscuous mode [ 85.684312][ T5673] syzkaller0: entered allmulticast mode [ 85.714519][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.960932][ T5694] syzkaller0: entered promiscuous mode [ 85.966463][ T5694] syzkaller0: entered allmulticast mode [ 86.069828][ T5696] syzkaller0: entered promiscuous mode [ 86.075469][ T5696] syzkaller0: entered allmulticast mode [ 86.211373][ T5708] netlink: 'syz.0.838': attribute type 12 has an invalid length. [ 86.376336][ T5729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.844'. [ 86.451836][ T5737] syzkaller0: entered promiscuous mode [ 86.457434][ T5737] syzkaller0: entered allmulticast mode [ 86.549202][ T5747] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 86.567011][ T5747] syzkaller0: entered promiscuous mode [ 86.572837][ T5747] syzkaller0: entered allmulticast mode [ 86.591046][ T28] audit: type=1400 audit(1777000147.944:185): avc: denied { read } for pid=5750 comm="syz.0.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.643395][ T28] audit: type=1400 audit(1777000147.994:186): avc: denied { write } for pid=5750 comm="syz.0.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.683306][ T28] audit: type=1400 audit(1777000147.994:187): avc: denied { cpu } for pid=5750 comm="syz.0.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 86.718974][ T28] audit: type=1400 audit(1777000147.994:188): avc: denied { create } for pid=5750 comm="syz.0.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 86.840718][ T5773] syzkaller0: entered promiscuous mode [ 86.847317][ T5773] syzkaller0: entered allmulticast mode [ 86.877251][ T5776] syzkaller0: entered promiscuous mode [ 86.884149][ T5776] syzkaller0: entered allmulticast mode [ 87.070152][ T5797] syzkaller0: entered promiscuous mode [ 87.075819][ T5797] syzkaller0: entered allmulticast mode [ 87.193637][ T5816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=5816 comm=syz.4.879 [ 87.472513][ T5832] syzkaller0: entered promiscuous mode [ 87.478342][ T5832] syzkaller0: entered allmulticast mode [ 89.915688][ T5860] validate_nla: 2 callbacks suppressed [ 89.915718][ T5860] netlink: 'syz.1.893': attribute type 27 has an invalid length. [ 89.929250][ T5860] netlink: 'syz.1.893': attribute type 4 has an invalid length. [ 89.937193][ T5860] netlink: 152 bytes leftover after parsing attributes in process `syz.1.893'. [ 90.160183][ T5818] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 90.257690][ T5878] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 90.273292][ T5878] syzkaller0: entered promiscuous mode [ 90.279065][ T5878] syzkaller0: entered allmulticast mode [ 91.599918][ T5873] Driver unsupported XDP return value 0 on prog (id 315) dev N/A, expect packet loss! [ 91.636806][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 91.636892][ T28] audit: type=1400 audit(1777000152.984:191): avc: denied { create } for pid=5881 comm="syz.3.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 91.816080][ T5896] netlink: 'syz.3.908': attribute type 27 has an invalid length. [ 91.826794][ T5896] netlink: 'syz.3.908': attribute type 4 has an invalid length. [ 91.836018][ T5896] netlink: 152 bytes leftover after parsing attributes in process `syz.3.908'. [ 91.846132][ T5893] delete_channel: no stack [ 91.914630][ T5917] syzkaller0: entered promiscuous mode [ 91.933022][ T5917] syzkaller0: entered allmulticast mode [ 91.951492][ T5911] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 91.973925][ T5911] syzkaller0: entered promiscuous mode [ 91.979551][ T5911] syzkaller0: entered allmulticast mode [ 92.172329][ T5936] delete_channel: no stack [ 92.210438][ T5941] syzkaller0: entered promiscuous mode [ 92.219839][ T5941] syzkaller0: entered allmulticast mode [ 92.476855][ T5974] syzkaller0: entered promiscuous mode [ 92.482745][ T5974] syzkaller0: entered allmulticast mode [ 92.841398][ T28] audit: type=1400 audit(1777000154.194:192): avc: denied { ioctl } for pid=5994 comm="syz.4.949" path="socket:[13995]" dev="sockfs" ino=13995 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.417384][ T6059] syzkaller0: entered promiscuous mode [ 94.423119][ T6059] syzkaller0: entered allmulticast mode [ 94.468391][ T6065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=6065 comm=syz.1.979 [ 94.602627][ T6072] syzkaller0: entered promiscuous mode [ 94.608535][ T6072] syzkaller0: entered allmulticast mode [ 94.779552][ T6079] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6079 comm=syz.1.984 [ 95.869854][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.992'. [ 95.907538][ T6099] syzkaller0: entered promiscuous mode [ 95.920691][ T6099] syzkaller0: entered allmulticast mode [ 96.262014][ T6095] loop0: detected capacity change from 0 to 2048 [ 96.407425][ T6112] loop3: detected capacity change from 0 to 1024 [ 96.426400][ T6112] EXT4-fs: test_dummy_encryption option not supported [ 96.762436][ T6125] loop3: detected capacity change from 0 to 512 [ 96.905273][ T6125] EXT4-fs (loop3): 1 orphan inode deleted [ 96.929100][ T6125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.952608][ T6125] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.081339][ T3408] IPVS: starting estimator thread 0... [ 97.209860][ T6130] IPVS: using max 2784 ests per chain, 139200 per kthread [ 97.252777][ T6125] syz.3.998 (6125) used greatest stack depth: 9984 bytes left [ 97.493661][ T6095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.541352][ T49] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 97.551734][ T6136] delete_channel: no stack [ 97.561643][ T49] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 1 [ 98.285213][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.452914][ T6173] syzkaller0: entered promiscuous mode [ 98.479666][ T6173] syzkaller0: entered allmulticast mode [ 98.593414][ T6182] syzkaller0: entered promiscuous mode [ 98.609700][ T6182] syzkaller0: entered allmulticast mode [ 99.235082][ T6192] syzkaller0: entered promiscuous mode [ 99.249686][ T6192] syzkaller0: entered allmulticast mode [ 100.389786][ T6128] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 100.986321][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.150404][ T6211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1032'. [ 101.267884][ T6212] syzkaller0: entered promiscuous mode [ 101.273776][ T6212] syzkaller0: entered allmulticast mode [ 101.440884][ T6233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=6233 comm=syz.1.1041 [ 101.572711][ T6241] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 101.701775][ T6262] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 101.724215][ T6262] syzkaller0: entered promiscuous mode [ 101.730077][ T6262] syzkaller0: entered allmulticast mode [ 101.776428][ T28] audit: type=1400 audit(1777000163.124:193): avc: denied { write } for pid=6270 comm="syz.2.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 101.807697][ T28] audit: type=1400 audit(1777000163.154:194): avc: denied { ioctl } for pid=6270 comm="syz.2.1055" path="socket:[15577]" dev="sockfs" ino=15577 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 101.808528][ T6271] netlink: 'syz.2.1055': attribute type 21 has an invalid length. [ 101.890073][ T6271] lo: entered promiscuous mode [ 101.895881][ T6276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1057'. [ 101.907481][ T6278] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=6278 comm=syz.4.1059 [ 102.203861][ T6310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1071'. [ 102.291006][ T6319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=6319 comm=syz.3.1075 [ 103.118100][ T6341] netlink: 'syz.2.1082': attribute type 1 has an invalid length. [ 103.126241][ T6341] netlink: 'syz.2.1082': attribute type 2 has an invalid length. [ 103.404711][ T6346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1083'. [ 103.490129][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1089'. [ 103.886305][ T28] audit: type=1400 audit(1777000165.234:195): avc: denied { map } for pid=6390 comm="syz.3.1102" path="socket:[15734]" dev="sockfs" ino=15734 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 103.897420][ T6387] syzkaller0: entered promiscuous mode [ 103.936740][ T6387] syzkaller0: entered allmulticast mode [ 104.737012][ T6413] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 104.781972][ T6413] syzkaller0: entered promiscuous mode [ 104.797934][ T6413] syzkaller0: entered allmulticast mode [ 104.829874][ T6417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1112'. [ 104.973050][ T6421] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 105.038198][ T6421] syzkaller0: entered promiscuous mode [ 105.057305][ T6421] syzkaller0: entered allmulticast mode [ 105.211216][ T6435] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 105.230639][ T6435] syzkaller0: entered promiscuous mode [ 105.238551][ T6435] syzkaller0: entered allmulticast mode [ 105.450621][ T6373] loop1: detected capacity change from 0 to 2048 [ 105.525454][ T6445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1124'. [ 105.833431][ T6373] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.971666][ T6464] netlink: 'syz.0.1131': attribute type 1 has an invalid length. [ 105.989689][ T6464] netlink: 'syz.0.1131': attribute type 2 has an invalid length. [ 106.138995][ T6473] loop4: detected capacity change from 0 to 1024 [ 106.167297][ T6473] EXT4-fs: test_dummy_encryption option not supported [ 106.240078][ T6458] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 107.339725][ T6484] loop4: detected capacity change from 0 to 512 [ 107.680355][ T6484] EXT4-fs (loop4): 1 orphan inode deleted [ 107.709274][ T6484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.726602][ T366] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 107.741419][ T6484] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.886036][ T3415] IPVS: starting estimator thread 0... [ 107.944028][ T366] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 1 [ 108.069665][ T6497] IPVS: using max 2496 ests per chain, 124800 per kthread [ 108.149693][ T28] audit: type=1400 audit(1777000169.414:196): avc: denied { write } for pid=6504 comm="syz.3.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 109.695625][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.711248][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.905171][ T6536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=6536 comm=syz.0.1159 [ 110.631659][ T6550] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 110.645632][ T6550] syzkaller0: entered promiscuous mode [ 110.651775][ T6550] syzkaller0: entered allmulticast mode [ 111.315493][ T28] audit: type=1400 audit(1777000172.664:197): avc: denied { bind } for pid=6573 comm="syz.3.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.355576][ T6578] netlink: 'syz.4.1176': attribute type 12 has an invalid length. [ 111.594293][ T6587] netlink: 'syz.2.1175': attribute type 21 has an invalid length. [ 112.068280][ T6596] loop2: detected capacity change from 0 to 1024 [ 112.088277][ T49] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 112.409070][ T28] audit: type=1400 audit(1777000173.754:198): avc: denied { create } for pid=6595 comm="syz.2.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.454350][ T6615] loop3: detected capacity change from 0 to 512 [ 112.515030][ T6615] ext4: Unknown parameter 'func' [ 112.530504][ T28] audit: type=1400 audit(1777000173.754:199): avc: denied { ioctl } for pid=6595 comm="syz.2.1178" path="socket:[16071]" dev="sockfs" ino=16071 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.967616][ T28] audit: type=1400 audit(1777000174.274:200): avc: denied { bind } for pid=6614 comm="syz.3.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 114.291251][ T6648] netlink: 'syz.2.1200': attribute type 21 has an invalid length. [ 114.967099][ T6589] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 115.007875][ T6674] loop0: detected capacity change from 0 to 512 [ 115.016814][ T6674] ext4: Unknown parameter 'func' [ 115.709279][ T366] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 115.926267][ T6703] netlink: 'syz.3.1222': attribute type 12 has an invalid length. [ 116.349605][ T6738] loop2: detected capacity change from 0 to 512 [ 116.356612][ T6738] ext4: Unknown parameter 'func' [ 117.157355][ T6748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.166273][ T6748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.404855][ T6767] loop2: detected capacity change from 0 to 512 [ 117.412403][ T6767] ext4: Unknown parameter 'func' [ 118.551450][ T6804] netlink: 'syz.2.1263': attribute type 12 has an invalid length. [ 118.581685][ T6682] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 118.686655][ T6816] loop3: detected capacity change from 0 to 512 [ 118.693734][ T6816] ext4: Unknown parameter 'func' [ 118.711900][ T6820] netlink: 'syz.4.1269': attribute type 21 has an invalid length. [ 118.725651][ T6820] lo: entered promiscuous mode [ 118.760012][ T6823] loop1: detected capacity change from 0 to 512 [ 118.778595][ T6823] ext4: Unknown parameter 'func' [ 118.832516][ T6826] loop4: detected capacity change from 0 to 512 [ 118.842047][ T6826] ext4: Unknown parameter 'func' [ 120.488705][ T6849] syzkaller0: entered promiscuous mode [ 120.494537][ T6849] syzkaller0: entered allmulticast mode [ 120.653373][ T6859] netlink: 'syz.4.1282': attribute type 12 has an invalid length. [ 121.348872][ T6875] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1287'. [ 121.376449][ T6877] syzkaller0: entered promiscuous mode [ 121.382189][ T6877] syzkaller0: entered allmulticast mode [ 121.505549][ T6887] loop0: detected capacity change from 0 to 512 [ 121.514174][ T6887] ext4: Unknown parameter 'func' [ 122.580193][ T6925] loop0: detected capacity change from 0 to 1024 [ 122.834606][ T310] Bluetooth: hci0: Frame reassembly failed (-84) [ 123.331841][ T6930] loop1: detected capacity change from 0 to 512 [ 123.338565][ T6930] ext4: Unknown parameter 'func' [ 123.402998][ T6843] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 123.488905][ T6936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.501987][ T6936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.081165][ T28] audit: type=1400 audit(1777000185.424:201): avc: denied { mount } for pid=6940 comm="syz.2.1312" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 124.117060][ T28] audit: type=1400 audit(1777000185.424:202): avc: denied { mount } for pid=6940 comm="syz.2.1312" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 124.229900][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1313'. [ 124.799755][ T6972] loop4: detected capacity change from 0 to 512 [ 124.806357][ T6972] ext4: Unknown parameter 'func' [ 124.869719][ T6928] Bluetooth: hci0: command 0x1003 tx timeout [ 124.876093][ T5760] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 125.591077][ T6989] loop3: detected capacity change from 0 to 512 [ 125.601038][ T6989] ext4: Unknown parameter 'func' [ 125.796807][ T6998] syzkaller0: entered promiscuous mode [ 125.806214][ T6998] syzkaller0: entered allmulticast mode [ 125.990237][ T28] audit: type=1400 audit(1777000187.244:203): avc: denied { bind } for pid=7000 comm="syz.1.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 127.001860][ T7016] loop4: detected capacity change from 0 to 2048 [ 127.107104][ T7016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.139008][ T7016] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 127.192213][ T7017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1339'. [ 127.532294][ T7029] netlink: 'syz.1.1344': attribute type 21 has an invalid length. [ 127.551596][ T7029] lo: entered promiscuous mode [ 128.199956][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.283269][ T7034] syzkaller0: entered promiscuous mode [ 128.289059][ T7034] syzkaller0: entered allmulticast mode [ 128.436497][ T7039] syzkaller0: entered promiscuous mode [ 128.450828][ T7039] syzkaller0: entered allmulticast mode [ 128.527849][ T7060] netlink: 'syz.1.1355': attribute type 21 has an invalid length. [ 128.716256][ T7071] netlink: 'syz.1.1359': attribute type 12 has an invalid length. [ 128.741344][ T28] audit: type=1400 audit(1777000190.094:204): avc: denied { load_policy } for pid=7068 comm="syz.2.1358" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 128.746016][ T7069] SELinux: failed to load policy [ 128.943755][ T7081] SELinux: failed to load policy [ 129.015794][ T7087] syzkaller0: entered promiscuous mode [ 129.021757][ T7087] syzkaller0: entered allmulticast mode [ 129.844998][ T7116] netlink: 'syz.2.1375': attribute type 12 has an invalid length. [ 130.147878][ T7110] ================================================================== [ 130.156115][ T7110] BUG: KCSAN: data-race in hrtimer_interrupt / print_cpu [ 130.163210][ T7110] [ 130.165595][ T7110] write to 0xffff888237c1b8e8 of 8 bytes by interrupt on cpu 0: [ 130.173242][ T7110] hrtimer_interrupt+0x1ea/0x850 [ 130.178214][ T7110] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 130.184145][ T7110] sysvec_apic_timer_interrupt+0x6f/0x80 [ 130.189907][ T7110] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 130.195919][ T7110] __zap_vma_range+0x13a4/0x2c10 [ 130.200894][ T7110] unmap_vmas+0x22a/0x340 [ 130.205242][ T7110] exit_mmap+0x1ab/0x5f0 [ 130.209591][ T7110] __mmput+0x28/0x1c0 [ 130.213632][ T7110] mmput+0x40/0x50 [ 130.217455][ T7110] exit_mm+0x113/0x1a0 [ 130.221543][ T7110] do_exit+0x442/0x1530 [ 130.225719][ T7110] do_group_exit+0x138/0x140 [ 130.230326][ T7110] __x64_sys_exit_group+0x1f/0x20 [ 130.235386][ T7110] x64_sys_call+0x3008/0x3020 [ 130.240075][ T7110] do_syscall_64+0x12c/0x3b0 [ 130.244851][ T7110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.250836][ T7110] [ 130.253163][ T7110] read to 0xffff888237c1b8e8 of 8 bytes by task 7110 on cpu 1: [ 130.260714][ T7110] print_cpu+0x2fb/0x670 [ 130.264982][ T7110] timer_list_show+0x107/0x170 [ 130.269758][ T7110] seq_read_iter+0x636/0x940 [ 130.274370][ T7110] proc_reg_read_iter+0x110/0x180 [ 130.279491][ T7110] copy_splice_read+0x471/0x6c0 [ 130.284346][ T7110] splice_direct_to_actor+0x26e/0x670 [ 130.289730][ T7110] do_splice_direct+0x119/0x1a0 [ 130.294595][ T7110] do_sendfile+0x382/0x650 [ 130.299113][ T7110] __x64_sys_sendfile64+0x105/0x150 [ 130.304766][ T7110] x64_sys_call+0x2dc4/0x3020 [ 130.309483][ T7110] do_syscall_64+0x12c/0x3b0 [ 130.314084][ T7110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.319986][ T7110] [ 130.322311][ T7110] value changed: 0x0000001e4ba6a354 -> 0x7fffffffffffffff [ 130.329465][ T7110] [ 130.331787][ T7110] Reported by Kernel Concurrency Sanitizer on: [ 130.338202][ T7110] CPU: 1 UID: 0 PID: 7110 Comm: syz.4.1372 Not tainted syzkaller #0 PREEMPT(full) [ 130.347756][ T7110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 130.357816][ T7110] ==================================================================