last executing test programs: 4.121632461s ago: executing program 2 (id=4363): io_setup(0x400, &(0x7f0000001080)=0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) socket(0x1e, 0x80004, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) io_destroy(0x0) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) uname(&(0x7f0000000080)=""/31) r2 = socket(0x40000000015, 0x5, 0x0) r3 = gettid() r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000480)=""/237) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) 3.069417886s ago: executing program 2 (id=4372): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x3, @mcast2, 0x1861, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x400, 0x2d, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$eventfd(r6, &(0x7f0000000240), 0xffffff14) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r7, 0x80044940, &(0x7f0000000280)=0x14) read(r7, &(0x7f00000019c0)=""/4097, 0x1001) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r8, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x48, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x414}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 3.003063947s ago: executing program 0 (id=4373): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000100000004000000000000000000000000000084a35bba5b14d076316a05703e02e6f18c6d3d57cdf170245e1d6a660cd4e9c30fbe0816a8048443f40000d8a36ae5cf6aa4845e583e3cb1ad707da045c5a706febc6e532c16a951acaa1bfc175d0dd5c67270a517c81f823e05eb93174d80"], 0x50) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c00)=@bpf_ext={0x1c, 0x11, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {}, {}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='syzkaller\x00', 0x7d, 0x1000, &(0x7f0000000b00)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001b40)={0x5, 0xa, 0x3, 0x6d1}, 0x10, 0x1680e, 0xffffffffffffffff, 0x1, &(0x7f0000001b80)=[0x1, 0x1], &(0x7f0000001bc0)=[{0x4, 0x1, 0x8, 0x2}], 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d00)={{r0}, &(0x7f0000000780), &(0x7f0000001cc0)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() rename(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000003c0)='./file1\x00') io_getevents(0x0, 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) r3 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r3, @ANYRESDEC, @ANYRESHEX=r3], 0x1, 0x522, &(0x7f0000000a80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='macvlan0\x00', 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x5}, 0x0, 0x8, 0x6, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32514, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r4, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r5, 0x2007ffc) sendfile(r5, r5, 0x0, 0x800000009) 2.324297957s ago: executing program 1 (id=4378): bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9feb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 2.112652019s ago: executing program 2 (id=4379): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r1, r0}, 0xc) 2.04954745s ago: executing program 2 (id=4380): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x7, 0x89208, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x4}, 0x112258, 0x8, 0x7ffffefc, 0x3, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x80000001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r5, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000000080001000300000005000200000000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) exit(0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281a56e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001400604040006040c009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) 2.04221728s ago: executing program 1 (id=4381): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket(0x0, 0x1, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000100)='$^\x00', 0x0) 2.025993091s ago: executing program 0 (id=4382): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x50, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@nogrpid}, {@nogrpid}]}, 0x1, 0x3ed, &(0x7f0000001240)="$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") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000410, &(0x7f00000001c0)={[{@noauto_da_alloc}, {@prjquota}, {@resgid}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@dioread_nolock}]}, 0x81, 0x7b0, &(0x7f00000007c0)="$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") openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) io_uring_setup(0x3cb8, &(0x7f0000000140)={0x0, 0x88f5, 0x4, 0x3, 0x21d}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x4d10, 0x2, 0x2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) write$tun(r2, &(0x7f0000000500)={@val={0x0, 0x2}, @void, @x25={0x1, 0x83, 0xfb, "28f00be6d4a466f5e3f59a7e90f4d619488a1919ff71458525a46b8648975deea979ce0e076882a34b5df2dd625165b891c08102647b11784f0ba271b83a9a26187ba747fb9bb7bf87b5c0f16798e23de44453b70147e38cd025d9de430e650b7344a43be2838ee9fddd728273d00bb594889655cf87d17a5ec795833a0297cf91dc40c0a0c947a35876235540c59629bea70c8d61ededfe40e0454ef1a912bd6fa3a4e5dea7e81b0aaf6aec6a95cbdb01e041fe03fc1ee8fb38ee7b6e33f0f46319757ce7dd84c09afce71a85b781eb7a4038a813da1c082174c4c2d00463ee2a6b978b"}}, 0xeb) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00001b00"/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000ae868eb9e5806e2513883e51e688c955000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7028000010000008500000084000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r4}, 0x10) memfd_create(&(0x7f0000000580)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r5}, 0x10) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) close(r6) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 1.799231504s ago: executing program 4 (id=4386): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x7, 0x89208, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x4}, 0x112258, 0x8, 0x7ffffefc, 0x3, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x80000001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r5, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000000080001000300000005000200000000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) exit(0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281a56e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001400604040006040c009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)=r8}, 0x20) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) 1.40188227s ago: executing program 3 (id=4389): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d10bfe150a7487535f7866907dc6751dfb261a0e3ccae669e173a649c1cfd6587d452d46b7c57d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3ff03fe3e26e7a23129d6606fd28a7f9105f82317874b33d96b39fa4e045469989d552af6200000003a00000000000000abecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f1623ed38ae89d24e14b40234756ddcebfba2f87925bfacba83109753f543ad027edd68149ee99eebc6f7d6dd4aed4afe1f44ccb19e810879b70a70900000000000000000000d7900a820b6327944e9a217b9800e02a92895614cd50cbf83a1ed25268816b004519c9c5cff097d8000000000009d27d753a30a147b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d6209000000c773713a66b223fa8b148871c8d31d24000025449f106b99893ed20fa7a050fbbef90327e827e513e9606800000000e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e69ee52b59d13182e1f24ed208ada12f7a1525320e71666f472a972d5eb1affb87ba55b2d72078e9f40b4ae7dc3b2aeb0d11cd22c35d32940f19dff00ffffffff080000ff003853e59de7621e348955735264f34b1046a1813668297a7edad187ef106ae7fcbb25090f17d0baadeb8ae190a1fb5a315f8347fb0379659500000000000000000000000000000000000000002fdf0193ec79c90ed210ebc2fbed6d4216770c1b0dec886b388d138c2b69c6aacb714e7264093061c660a5100b7cc165889eb94c8d7c77b6fa06f1a4d8e4a6b6cb37e319c5c22f276b03cae853f42b07ca0b03b1eb32a6b1a81cd511fd0b59d57a11c6a3ebf9731464ad21f07f618efc31023ac60007426162b57e803519954d7c952197b0a508c0e16fda392fa84be38e937d36af1c35138e05a9e8d6dc0272de72c41500000000304402e22af23437126f330f8eb4075daaeae3134ece35cd86d95bd9836bd186c4b6565e967a4e3e86f299b7400994ba136b4eccf3b0f001a266c0d160b3ce1182001d64b52a5ce7f506295d59eea6903b84ffbabf5a5b91c1d6ecce8728a224aec66c610e3becd60a35e848c224f8251947eed20e2b612cb099bfe8924d33ba7f0691fed04a43e9c64b7a1e3165e86cdb9871c678a6bbb14821f441c6c14d1bd78d8ffdfea12c19ea04264335d60b6b7a7da6fb83f33101db32f6ab137d943dd3c1e8db9f3e1263573dc721ae82fe0bc63598751a5092c9f7dbfc39d564834e3703492c2a651643d8ce5c36d97a4812cf73fc8ea0d6"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f00000005c0)={0x8, 0x2, 0x6, 0x0, 0x0, [{{r3}, 0x4}, {{r3}, 0x401}, {{r4}, 0x1}, {{r2}, 0x6}, {{r3}, 0x5}, {{r8}, 0x90b}]}) 1.293626421s ago: executing program 3 (id=4390): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r1, r0}, 0xc) 1.293183091s ago: executing program 3 (id=4391): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000180)={[], [{@seclabel}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x36, 0x64, 0x36, 0x38, 0x32, 0x38, 0x34], 0x2d, [0x62, 0x32, 0x66, 0x32], 0x2d, [0x30, 0x39, 0x0, 0x66], 0x2d, [0x37, 0x34, 0x38, 0x37], 0x2d, [0x37, 0x65, 0x35, 0x30, 0x39, 0xcf91be4f0fd6da2c, 0x62, 0x31]}}}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpi8Ezi3Xg03jTxqkfjyT8ADx5MDAkxXABPa2Z3pt3ur+7CtqXs55Ns+zwzz8zzPDPzzD77PDsbwMAaS/8kEf+LiFsR8VQtujLBWO3f/btXZx7cvToTi5XKqX+Sarp7aTyTb7c9i4wXIgpfJg07rJm/fOXcdLk8dymLTy6c/2xy/vKV18+enz4zd2buwtSJE8eOHjn+5tQbvVeqRX5pve7t/eLivj3vnr75/kwxXz6S/a+vR1vF3oox1mHdK73t6rG3oy6cNB+na+taGLo2kl3WpbT9Xy0fPL3RBQLWTaVSqQy3X71YaXS9aQmwaSWx0SUANkb+Rp9+/s1f69T1eCzcOVn7AJTW+372qq0pRiFLU2r4fNtPYxHx8eK/36Sv6DQO8ecaFQAAGDi/nMx7go39v0Lsrkv3/2wOZTQino6InRHxTETsiohnI6ppn4uI5xszSCIqHfLf1RBfzv/HbBahcPuRK9lB2v97K5vbWtn/y3t/MTqUxXZE5B3mucPZMRmP0vAnZ8tzR9rsf8sq+df3/9JXmn/eF8zKcbvYMEA3O70w/XC1bXbnesTeYmP9k2J64vJpnCQi9kTE3h72O1oXPvvad/uWIqWV6Vavf1WlxZRez/NxrVS+jXi1dv4XY8X5X84x6Tw/OTkS5bnDk+lVcLhlHr/9fuODdvmvWv+f/mrc5J3jP5961GovSc//trrrP/L52+X6jyYRydJ87XxEZai3PG788VV1v2OHmtc97PW/JfmoGs7b1+fTCwuXjkRsSd5rXj61vG0ez9On9R8/1Lr978y2SY/ECxGRXsQvRsRLEbE/K/uBiDgYES2qtuTXt1/+tN26Lq//NZPWf7bl/W/F+V+er+8ykG+cLhk6d+DWgzY3j+7O/7FqaDxb0vr+l6y4RXRb0kc7egAAALA5FKL63f/CxFK4UJiYqI0B7YpthfLF+YX9EXFhtvaMwGiUCvlIV208uJTk45+jdfGphvjRbNz466Gt1fjEzMXy7EZXHgbc9mqbT5raf+rvHsd5gU2oD/NowCa1WvvffXOdCgKsO+//MLjq2v9imySLvikDTybv/zC4WrX/a/F9x2cX3DNg86toyzDQtH8YXMX4cClcfey55dO2wJPI+z8MpF6f6+8tUBluvWokWvxiwMjaFGNri7w2JJD2rPq4w1JEdJd468NkkXcB2//CQ6G3HQ5H86qh6LRV0sPvOOSB9KismvjM7r5f/PlvovT7svlhuZ2WujzdfQpsyO0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7/4LAAD///QJ1ng=") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x1ff}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001cc0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0240000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000004c0)='kfree\x00'}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x4000001) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB="00000000000000000000130b0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) r6 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r7 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r7, r6, r6, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) 1.235136502s ago: executing program 2 (id=4392): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b400039ec4da800000000000000080000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="05000000040000000100"/28], 0x50) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000480)={@initdev, @remote}, &(0x7f00000004c0)=0xc) r2 = dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101, @void, @value}, 0x94) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x42, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x3, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x2004, &(0x7f0000000680)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_setup(0xf447, &(0x7f0000000280)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000480), 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) 1.115234464s ago: executing program 3 (id=4393): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x7, 0x89208, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x4}, 0x112258, 0x8, 0x7ffffefc, 0x3, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x80000001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r5, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000000080001000300000005000200000000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) exit(0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) socket$kcm(0x10, 0x2, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)=r7}, 0x20) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) 1.023122675s ago: executing program 0 (id=4394): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0xb) mount_setattr(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x20000}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r7, 0x0, 0x25, 0x2, @void}, 0x10) ioctl$FIDEDUPERANGE(r9, 0xc0189436, &(0x7f00000005c0)={0x8, 0x2, 0x6, 0x0, 0x0, [{{r5}, 0x4}, {{r5}, 0x401}, {{r6}, 0x1}, {{r4}, 0x6}, {{r5}, 0x5}, {{r11}, 0x90b}]}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r10, r3}, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000030167e583af7d5b1b3270ef01080000000000000000020000052400028014000180080001007785c52808000600000000000000028005000ea83a000000"], 0x38}, 0x1, 0x0, 0x0, 0x20040005}, 0x8080) 934.511816ms ago: executing program 4 (id=4395): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x0, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xd5e93709d453f02a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value}, 0x94) flock(r0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(0xffffffffffffffff, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getpriority(0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00'}, 0x10) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000019c0)=@newtaction={0xeb0, 0x30, 0xb, 0x70bd28, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x8, 0x4, 0x7, 0x2, 0xfffffff0}, 0x0, 0x5}, [{0x7, 0x1, 0xb2, 0x6, 0x8001, 0xa43e}, {0xb, 0x2, 0xa, 0x7, 0x401, 0x4d4f7022}, {0x17fa, 0x305c, 0x7, 0x3, 0x36, 0xe48}, {0x18f, 0x9, 0x0, 0x6, 0xb, 0x5}, {0x8d14, 0x3, 0x3, 0x0, 0xfffff6a0, 0xd}, {0x7fff, 0x0, 0x3, 0x4, 0x3, 0x9}, {0x80, 0xffffffff, 0x9, 0x4, 0x7fff, 0x927d}, {0x3, 0x6, 0x3, 0x8, 0x41, 0x100}, {0x5, 0x0, 0x1, 0xdf, 0x80, 0x7fff}, {0x1, 0xfffffffa, 0x1ff, 0x6, 0xfffffff0, 0x1000}, {0x8a10, 0x8, 0x7f, 0x1, 0x5, 0x9}, {0x3e, 0x9, 0x4, 0x3, 0x7, 0x8}, {0x9, 0x101, 0x3, 0x0, 0x6bc, 0x7fffffff}, {0x80000001, 0x1, 0x4, 0x1, 0x7a, 0x30000000}, {0x21, 0x9, 0x80, 0x2, 0x81, 0x2}, {0x9, 0x0, 0x7, 0x3, 0x80, 0x1}, {0x5, 0x1, 0x6de6761d, 0x800, 0xf, 0x80000001}, {0x7, 0xfaf8, 0x80000001, 0x4, 0x1, 0xc0}, {0x5, 0x0, 0x83925e1, 0x8, 0xc80, 0xe4}, {0x2, 0xfffffff7, 0x80000000, 0x700, 0xf, 0x6}, {0x0, 0x7fff, 0x0, 0x6, 0x2, 0xa5}, {0x1, 0x1, 0xfffffff8, 0x4, 0x7fffffff, 0x6}, {0x7f, 0x5, 0x6, 0x7f, 0x8c2b, 0xc54}, {0x6, 0x6, 0x34d, 0x7, 0x101, 0x23}, {0x653, 0x0, 0x6, 0x7ff, 0x8, 0x4bf}, {0x1000, 0x0, 0x3, 0x8, 0x7, 0x2}, {0x0, 0xb, 0x9, 0x1, 0x9, 0x7}, {0xd, 0x4, 0x6, 0x4, 0xff}, {0x5, 0x400, 0x5, 0x1, 0x4, 0x5}, {0x4, 0x6, 0x0, 0x1ff, 0x878, 0x3}, {0x2, 0xffff, 0x7, 0x30, 0x1ff, 0x8}, {0x7, 0x6, 0x3, 0x8f, 0x1, 0x1}, {0xbb, 0x8001, 0x5, 0xbd, 0x1, 0x8}, {0xfffffffe, 0x1, 0x5, 0x9, 0x89, 0x5}, {0x0, 0xa, 0x9, 0x5, 0x7, 0x3}, {0x7, 0x2, 0x9, 0x7fffffff, 0xe, 0x100}, {0x3ff, 0xb2f5, 0xfffffff8, 0x6, 0x3, 0x2}, {0x0, 0x9, 0x2, 0xfffffffa, 0xffff0000, 0x8}, {0x10, 0x1, 0x10, 0x5, 0x7, 0x8}, {0x9, 0x7, 0x7ce, 0xfffffffc, 0x81, 0x2}, {0x4, 0x80000000, 0x3, 0x618, 0x5, 0x400}, {0xe, 0x401, 0x7, 0x8001, 0xfffffffb, 0x6}, {0xe, 0x4, 0xabcb, 0x8, 0x7, 0x7fff}, {0x0, 0x3, 0x87, 0x4bd, 0x8, 0x9}, {0x5ec00000, 0x7, 0x0, 0x7, 0x9, 0x2}, {0x8, 0x7, 0xe, 0x1, 0x3, 0x83e}, {0xfffffff8, 0x5, 0x5, 0x2000000, 0x620d, 0x7}, {0x6, 0x6, 0x7, 0x3ff, 0xdbf, 0xe1}, {0x1, 0x0, 0x3, 0x400, 0x4, 0x7}, {0x7790a4, 0x0, 0x3, 0x4a, 0xfffffffe, 0xd4d4de7}, {0xe, 0x401, 0x4, 0x7, 0xda67, 0x4}, {0x1b46, 0x0, 0x3, 0x10000, 0x8, 0x8}, {0x0, 0x100, 0x9, 0x7fff, 0x800, 0xd7da}, {0xfffffffe, 0xe4e6, 0x3, 0x132, 0x8, 0x4}, {0x1ff, 0x7f, 0x3, 0x1, 0x9, 0x6}, {0x10, 0x8000, 0x51, 0x2, 0x1}, {0x0, 0x3, 0x7, 0x7fff, 0x2, 0x9}, {0x5, 0x9, 0x56dc, 0x0, 0xe25, 0x5}, {0x7f, 0x6, 0x3131, 0x9, 0x0, 0x6}, {0x295f, 0x6ad, 0x9, 0x0, 0x4}, {0x9, 0x8, 0x9, 0x9, 0x6, 0x2}, {0x9, 0xa75b, 0x4, 0x6, 0x57cd, 0xc2}, {0x4, 0xb7, 0x4, 0x2, 0x3, 0xc2}, {0x80000001, 0x1000, 0x1, 0x1a24, 0x1, 0x3}, {0x56, 0x0, 0xffff8001, 0x5, 0x8001, 0xf}, {0x2, 0x2000, 0x6800000, 0x4e, 0x3, 0xdf}, {0x1, 0x3, 0x5, 0x0, 0xed52, 0x401}, {0x5, 0xffffffff, 0x4, 0x7, 0x1, 0x9}, {0x9, 0x7, 0x4, 0xfffffffb, 0x0, 0x1}, {0xffff0000, 0x100, 0x6, 0x995, 0xc, 0x9}, {0x9, 0x100, 0x7, 0x1, 0x81, 0x6}, {0x0, 0xade, 0xf73, 0x8, 0xb, 0x2}, {0x80, 0x4, 0x7, 0x6, 0x6, 0x7}, {0x7fd, 0xedb, 0x5, 0x101, 0x10, 0x8}, {0x2, 0x0, 0xd6, 0x5ad, 0x8, 0x8}, {0x400, 0x40, 0x78, 0x0, 0x100, 0x8}, {0x7ff, 0xe5, 0x80000000, 0x401, 0x2}, {0x2, 0x3, 0x5, 0x3ff, 0x9, 0x8}, {0xfff, 0x4, 0x401, 0x121, 0x80000001, 0x6854}, {0x1, 0x4, 0x9, 0x1, 0x80, 0x9}, {0x2, 0x0, 0x6, 0x9, 0xfffff1a2, 0x8}, {0x9, 0x3, 0x42, 0x7aa1, 0x7, 0xfffffff7}, {0x7, 0x6, 0x800, 0x53, 0x3, 0x9}, {0xf, 0xd, 0x9, 0x9ed, 0xfff, 0xfffffd1d}, {0x7fffffff, 0xfffffff8, 0x4, 0x2, 0x7, 0xf}, {0x9, 0x8, 0x5, 0x9, 0x800, 0xb4}, {0x615, 0x1, 0xa0000000, 0x4, 0x7fff00, 0x1}, {0xc7f, 0x100, 0x9, 0x6, 0x59, 0x2}, {0x6216, 0xfffffffc, 0x4, 0x4, 0x1, 0x2}, {0x8, 0x3941, 0x0, 0x101, 0xadac, 0xe19}, {0x2, 0xe94, 0xd, 0xa576, 0x3, 0xfffffff8}, {0x2000, 0x8000, 0xffff7fff, 0x1, 0xd, 0x800}, {0x2, 0x80000001, 0x0, 0x7, 0x6, 0xffffffff}, {0x2, 0x2, 0x3, 0x1, 0x3, 0x1}, {0xfffffffd, 0x7, 0x1, 0x69a, 0x2, 0x9}, {0xf6, 0x6, 0x200, 0x6, 0x4, 0xfff}, {0x8, 0x10001, 0x9, 0x1aa, 0x7ff, 0x2}, {0x3, 0x0, 0x7fffffff, 0x9, 0xe8b, 0xe8f}, {0xffffffff, 0x401, 0x2, 0xfffffffb, 0x48, 0xfff}, {0x80000001, 0xfffffff8, 0x2, 0x78786fbd, 0x6, 0x6}, {0x2, 0xbf, 0x200, 0x2, 0x7, 0x4f5}, {0x41d, 0x7fffffff, 0xfffffff7, 0x401, 0x5, 0x4}, {0xfffffffe, 0x5, 0x8af0, 0x6, 0x1, 0x100}, {0xa9, 0xffff, 0x3, 0x1, 0x1, 0x4}, {0x8, 0x5, 0xe, 0x5, 0x7}, {0xd6, 0x8, 0xff, 0x2, 0x8, 0x7}, {0x8000, 0x5, 0xb74, 0x9, 0x4, 0xffff}, {0x9, 0xfffffa7c, 0x1000, 0x3ff, 0x3ff, 0x2}, {0x1, 0x8, 0x860, 0x7fff, 0x7, 0x11ca31c8}, {0x1, 0x0, 0x3, 0x5, 0x80000001, 0x9}, {0xff, 0x800, 0x5, 0xe, 0x9, 0x80000000}, {0x83, 0xcd, 0x401, 0xfffffffe, 0x32, 0x4}, {0x8, 0x1, 0xc, 0x2, 0xfffffe00, 0x7}, {0x0, 0x7, 0x80000000, 0x87, 0x1, 0xfff}, {0x8, 0x69, 0x9, 0x5e34, 0x0, 0x2}, {0x5e2, 0x7ff, 0x0, 0x101, 0x1, 0x6afd}, {0x8, 0x10000, 0x8, 0x100, 0x5, 0x3}, {0x0, 0x9, 0x1, 0x9, 0x7, 0x8}, {0xa, 0x200e, 0x0, 0x0, 0x7fffffff, 0x3}, {0x7684b0e, 0xfff, 0x6, 0x7fff, 0x2, 0x2}, {0x8001, 0x3ff, 0x3af, 0xe51, 0x200, 0x7}, {0x77, 0x80, 0x3, 0x2, 0x5, 0xd1}, {0x81, 0x5, 0x3, 0xde3b, 0x7, 0x8}, {0x10001, 0x9, 0x23b, 0x8, 0xf, 0x2}, {0x1a, 0x400, 0xffffffff, 0x2, 0x73284025, 0x6f0c}, {0x7ff, 0xfffffff8, 0x6, 0x1, 0x800, 0x4}, {0x7f, 0x64e711c2, 0xa, 0x8, 0x8, 0x40}, {0x8, 0x1, 0x0, 0xc, 0x8, 0x7}], [{0x3}, {}, {0x3, 0x1}, {}, {0x4}, {0x3, 0x1}, {0x278f368abc85dbb6, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0xdfe08ac3f89e5f13}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x4}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4ab62d5eed333453, 0x19c9da1097a52c8d}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x2}, {0x5497fac8595ca4ae}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x2}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {0x3}, {0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x2}, {0x4}, {0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x2}, {}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x3}, {0x3}, {0x5, 0x1}, {0x7, 0x1}, {0x3}, {0x4}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv0\x00'}) 693.03725ms ago: executing program 4 (id=4396): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x80, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r8}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x8f}, @TCA_FLOW_KEYS={0x8, 0x1, 0xdd96}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x1}}]}, 0x80}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1f, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 665.07017ms ago: executing program 4 (id=4397): openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x1a1040, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000580)={0x1d, r1}, 0x10, &(0x7f0000000100)={&(0x7f00000005c0)=@canfd={{}, 0x2, 0x2, 0x0, 0x0, "0e7692fddc9d8ba5a0ac79669b2947a81f2e3c8973fc2af2a7fa10b9126ea28baed9b57d82ab23db557c307ae88da9c6c68d8ceae8e69b06707297b87f8c925a"}, 0x48}, 0x2, 0x0, 0x0, 0x44905}, 0x4040005) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000300000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xc3, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, 0x0, 0x0) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x19) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0xdb, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000200), &(0x7f0000000280), 0x8, 0xc7, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r8, &(0x7f0000000140)="f4", 0x1, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x7fffffff, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x5}, 0x8) 660.334641ms ago: executing program 1 (id=4398): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) getpeername$netlink(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/16], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000240), &(0x7f00000003c0)=r9}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0x5e25ed804c4cd5b4}}}}, 0x0) 568.423442ms ago: executing program 1 (id=4399): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = dup(r0) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0xf, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000280)={{0xa, 0x4e24, 0xffffffff, @mcast1, 0x89a5}, {0xa, 0x4e23, 0xdeb, @mcast2, 0x56}, 0x0, {[0x5, 0x1, 0x0, 0x2, 0x5, 0x142, 0x2, 0x8]}}, 0x5c) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, 0x1, 0x7}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) read$watch_queue(r1, &(0x7f0000000580)=""/102, 0x66) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) r6 = syz_io_uring_setup(0xd79, &(0x7f0000000480)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000001500)=0x0, &(0x7f0000003580)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0xb, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x2}, 0x0, 0x44}) select(0x40, &(0x7f0000000300)={0x1, 0xff, 0x2, 0x0, 0x800, 0x72822164, 0x1, 0x9}, &(0x7f0000000380)={0x2, 0x8, 0x100, 0x2, 0x8, 0x1, 0x8001}, &(0x7f0000000400)={0xa, 0x4, 0x5, 0x80000000, 0x4, 0xffffffff, 0xfffffffffffff3ff, 0xbd6}, &(0x7f0000000440)={0x77359400}) io_uring_enter(r6, 0x64f7, 0x32aa, 0xc, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}}, 0x0) r9 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r9, r9, 0x0, 0x800000009) 399.891054ms ago: executing program 0 (id=4400): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r5, 0x0, 0x25, 0x2, @void}, 0x10) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f00000005c0)={0x8, 0x2, 0x6, 0x0, 0x0, [{{r3}, 0x4}, {{r3}, 0x401}, {{r4}, 0x1}, {{r2}, 0x6}, {{r3}, 0x5}, {{r8}, 0x90b}]}) 273.546756ms ago: executing program 1 (id=4401): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r1, r0}, 0xc) 272.986796ms ago: executing program 0 (id=4402): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) flistxattr(r1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) syz_init_net_socket$x25(0x9, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x13, r5, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x40, &(0x7f0000000600)=ANY=[]) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x20000}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x37c}]}]}, 0xfc}}, 0x0) 253.274496ms ago: executing program 0 (id=4403): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x7, 0x89208, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x4}, 0x112258, 0x8, 0x7ffffefc, 0x3, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x80000001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r5, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000000080001000300000005000200000000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) exit(0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281a56e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001400604040006040c009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)=r8}, 0x20) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) 231.765276ms ago: executing program 3 (id=4404): r0 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2f8) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) socket$packet(0x11, 0x2, 0x300) r4 = socket(0x2, 0x80806, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x2, @mcast1, 0x80}]}, &(0x7f0000000180)=0x10) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r5, 0xf507, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r6) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000002e80)={0x0, 0x59, &(0x7f0000002e40)={&(0x7f00000003c0)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x400c) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000001080)={0x6, 0x76, 0x110b, 0x2b1b, 0x3}) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000340)="00ec66f93451fb23b640bd4bd848c26c8b7d458767b275ae582f245a96288a2e016f057084c7b3eed090b14e7b404d31b65e9ca5d6ffb909daefe2f3040d84c70f2ff4e2f2455865779d298da8cc5238b51f71f2ca7c3cfa243cf83702e100"/105, 0x69, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a, 0x0, 0x0, 0x56}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000401, 0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 177.514927ms ago: executing program 2 (id=4405): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x7, 0x89208, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x4}, 0x112258, 0x8, 0x7ffffefc, 0x3, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x80000001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r5, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000000080001000300000005000200000000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) exit(0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281a56e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001400604040006040c009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)=r8}, 0x20) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) 177.120367ms ago: executing program 1 (id=4406): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000540)='kfree\x00'}, 0x18) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b0000000000114b22b09d4e0b"], 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b33200000000000000015000000080003e4", @ANYRES32=0x0, @ANYBLOB="0c009900fcffffff0000000010001d800c00008008000d8004000080"], 0x38}}, 0x0) r5 = fcntl$getown(r0, 0x9) timer_create(0x2, &(0x7f0000000040)={0x0, 0x1b, 0x4, @tid=r5}, &(0x7f0000001080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000140), 0x10) recvmsg$can_bcm(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x42) read(r7, &(0x7f0000001480)=""/4096, 0x1000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xbd}], 0x1, 0x33, 0x0) 158.067107ms ago: executing program 4 (id=4407): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x80, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r8}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x8f}, @TCA_FLOW_KEYS={0x8, 0x1, 0xdd96}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x1}}]}, 0x80}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1f, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 25.278309ms ago: executing program 3 (id=4408): mknod$loop(0x0, 0x6000, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0xfffffdfd) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_submit(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x410c84, &(0x7f00000003c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}]}, 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000000)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file2', 0x3a, [0x46, 0x43, 0x43]}, 0x32) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2b, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 4 (id=4409): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000010000000800000c0400000000615f"], 0x0, 0x28, 0x0, 0x1, 0xf, 0x0, @void, @value}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) iopl(0x3) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4040810}, 0x4040050) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="5c9dcc47d133f41f114653ff6ca454647062d5f0f6c36845e91df4941c073fbb5598f1ed3fa1e4f8398c865b990803011610cfc4df349006b29e4b551e90d90e847eeff116a232", @ANYRES64=0x0], 0x10) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ssive=1 [ 334.056927][ T29] audit: type=1400 audit(23337692.876:55024): avc: denied { open } for pid=15629 comm="syz.1.3910" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 334.216939][T15636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3909'. [ 334.319175][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.928478][T15644] futex_wake_op: syz.0.3915 tries to shift op by -1; fix this program [ 334.938370][ T29] audit: type=1326 audit(23337693.786:55025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15643 comm="syz.0.3915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f9c3e969 code=0x7ffc0000 [ 334.977205][ T29] audit: type=1326 audit(23337693.816:55026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15643 comm="syz.0.3915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe5f9c3e969 code=0x7ffc0000 [ 335.000695][ T29] audit: type=1326 audit(23337693.816:55027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15643 comm="syz.0.3915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f9c3e969 code=0x7ffc0000 [ 335.024190][ T29] audit: type=1326 audit(23337693.816:55028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15643 comm="syz.0.3915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe5f9c3e969 code=0x7ffc0000 [ 335.047673][ T29] audit: type=1326 audit(23337693.816:55029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15643 comm="syz.0.3915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f9c3e969 code=0x7ffc0000 [ 335.148366][T15650] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3917'. [ 335.178628][T15653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3918'. [ 335.188783][T15653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3918'. [ 335.225999][T15657] loop4: detected capacity change from 0 to 512 [ 335.233022][T15657] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 335.241121][T15655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3927'. [ 335.255072][T15657] EXT4-fs (loop4): 1 truncate cleaned up [ 335.261509][T15657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.269603][T15651] bond3: entered promiscuous mode [ 335.279104][T15651] bond3: entered allmulticast mode [ 335.284743][ T3395] usb usb6-port7: attempt power cycle [ 335.285905][T15651] 8021q: adding VLAN 0 to HW filter on device bond3 [ 335.405650][T15667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=15667 comm=syz.1.3920 [ 335.485552][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.487814][T15669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15669 comm=syz.2.3922 [ 335.518766][T15669] netlink: 'syz.2.3922': attribute type 1 has an invalid length. [ 335.542116][T15669] 8021q: adding VLAN 0 to HW filter on device bond4 [ 335.559072][T15676] program syz.4.3925 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 335.570614][T15676] loop4: detected capacity change from 0 to 128 [ 335.590064][T15676] bio_check_eod: 8 callbacks suppressed [ 335.590080][T15676] syz.4.3925: attempt to access beyond end of device [ 335.590080][T15676] loop4: rw=2049, sector=131, nr_sectors = 1 limit=128 [ 335.609276][T15676] buffer_io_error: 2 callbacks suppressed [ 335.609292][T15676] Buffer I/O error on dev loop4, logical block 131, lost async page write [ 335.623651][T15676] syz.4.3925: attempt to access beyond end of device [ 335.623651][T15676] loop4: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 335.637143][T15676] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 335.649004][T15676] syz.4.3925: attempt to access beyond end of device [ 335.649004][T15676] loop4: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 335.662486][T15676] Buffer I/O error on dev loop4, logical block 133, lost async page write [ 335.672027][T15676] syz.4.3925: attempt to access beyond end of device [ 335.672027][T15676] loop4: rw=2049, sector=134, nr_sectors = 1 limit=128 [ 335.685526][T15676] Buffer I/O error on dev loop4, logical block 134, lost async page write [ 335.822154][T15676] syz.4.3925: attempt to access beyond end of device [ 335.822154][T15676] loop4: rw=2049, sector=135, nr_sectors = 1 limit=128 [ 335.835730][T15676] Buffer I/O error on dev loop4, logical block 135, lost async page write [ 335.845904][T15676] syz.4.3925: attempt to access beyond end of device [ 335.845904][T15676] loop4: rw=2049, sector=136, nr_sectors = 1 limit=128 [ 335.859369][T15676] Buffer I/O error on dev loop4, logical block 136, lost async page write [ 335.868267][T15676] syz.4.3925: attempt to access beyond end of device [ 335.868267][T15676] loop4: rw=2049, sector=137, nr_sectors = 64 limit=128 [ 335.882100][T15676] syz.4.3925: attempt to access beyond end of device [ 335.882100][T15676] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 335.922940][T15676] syz.4.3925: attempt to access beyond end of device [ 335.922940][T15676] loop4: rw=2049, sector=225, nr_sectors = 9 limit=128 [ 336.460203][T15701] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 336.805672][T15688] xt_hashlimit: size too large, truncated to 1048576 [ 337.081033][T15708] bond5: entered promiscuous mode [ 337.086197][T15708] bond5: entered allmulticast mode [ 337.093303][T15708] 8021q: adding VLAN 0 to HW filter on device bond5 [ 337.180060][T15715] loop2: detected capacity change from 0 to 1764 [ 337.278875][T15723] loop2: detected capacity change from 0 to 512 [ 337.300041][T15723] EXT4-fs: test_dummy_encryption option not supported [ 337.346992][T15723] blktrace: Concurrent blktraces are not allowed on loop4 [ 337.444272][ T3395] usb usb6-port7: unable to enumerate USB device [ 337.555168][T15735] loop4: detected capacity change from 0 to 1024 [ 337.566313][T15735] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 337.578906][T15735] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 337.703776][T15735] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 337.717601][T15735] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 2: comm syz.4.3945: lblock 2 mapped to illegal pblock 2 (length 1) [ 337.943640][T15749] loop3: detected capacity change from 0 to 512 [ 337.950497][T15749] EXT4-fs: Ignoring removed nomblk_io_submit option [ 337.961661][T15749] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 337.974775][T15735] EXT4-fs (loop4): Remounting filesystem read-only [ 337.982975][T15749] EXT4-fs (loop3): orphan cleanup on readonly fs [ 337.992076][T15735] EXT4-fs (loop4): 1 orphan inode deleted [ 338.001261][T15749] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.3946: Failed to acquire dquot type 1 [ 338.020551][T15749] EXT4-fs (loop3): 1 truncate cleaned up [ 338.030806][T15749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 338.053999][T15749] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.111691][T15735] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.228251][T15735] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.297481][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 338.297496][ T29] audit: type=1326 audit(23337697.136:55183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15733 comm="syz.4.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9fac8d2d0 code=0x7ffc0000 [ 339.240017][ T29] audit: type=1326 audit(23337697.176:55184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15733 comm="syz.4.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa9fac8e56b code=0x7ffc0000 [ 339.263562][ T29] audit: type=1326 audit(23337697.226:55185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15733 comm="syz.4.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa9fac8d5ca code=0x7ffc0000 [ 339.287031][ T29] audit: type=1326 audit(23337697.236:55186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15733 comm="syz.4.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fac8e969 code=0x7ffc0000 [ 339.310463][ T29] audit: type=1326 audit(23337697.236:55187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15733 comm="syz.4.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fac8e969 code=0x7ffc0000 [ 339.334076][ T29] audit: type=1326 audit(23337698.016:55188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15733 comm="syz.4.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9fac8e969 code=0x7ffc0000 [ 339.357660][ T29] audit: type=1326 audit(23337698.016:55189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15733 comm="syz.4.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fac8e969 code=0x7ffc0000 [ 339.381391][ T29] audit: type=1326 audit(23337698.016:55190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15733 comm="syz.4.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fac8e969 code=0x7ffc0000 [ 339.404821][ T29] audit: type=1326 audit(23337698.016:55191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15733 comm="syz.4.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9fac8e969 code=0x7ffc0000 [ 339.428375][ T29] audit: type=1326 audit(23337698.016:55192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15733 comm="syz.4.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fac8e969 code=0x7ffc0000 [ 339.457768][T15768] loop2: detected capacity change from 0 to 512 [ 339.468608][T15768] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 339.480872][T15768] EXT4-fs (loop2): 1 truncate cleaned up [ 339.491413][T15768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.561274][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.603675][T15783] __nla_validate_parse: 6 callbacks suppressed [ 339.603695][T15783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3955'. [ 339.767594][T15795] loop4: detected capacity change from 0 to 512 [ 339.795736][T15795] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 339.804061][T15795] EXT4-fs (loop4): orphan cleanup on readonly fs [ 339.810701][T15795] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 339.826964][T15795] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 339.834229][T15795] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3958: bg 0: block 40: padding at end of block bitmap is not set [ 339.858857][T15795] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 339.870238][T15795] EXT4-fs (loop4): 1 truncate cleaned up [ 339.876299][T15795] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 339.947493][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.969199][T15801] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3959'. [ 339.983677][T15801] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 339.990387][T15801] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 339.998174][T15801] vhci_hcd vhci_hcd.0: Device attached [ 340.071267][T15808] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3960'. [ 340.322537][T15816] loop3: detected capacity change from 0 to 512 [ 340.344659][T15816] EXT4-fs: Ignoring removed mblk_io_submit option [ 340.394154][T15816] EXT4-fs: Invalid want_extra_isize 2 [ 340.491646][T15816] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3963'. [ 340.823090][T15802] vhci_hcd: connection closed [ 340.824173][ T3423] vhci_hcd: stop threads [ 340.833199][ T3423] vhci_hcd: release socket [ 340.837705][ T3423] vhci_hcd: disconnect device [ 341.001093][T15821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15821 comm=syz.0.3964 [ 341.014519][T15821] netlink: 'syz.0.3964': attribute type 1 has an invalid length. [ 341.035657][T15821] 8021q: adding VLAN 0 to HW filter on device bond7 [ 341.048951][T15819] loop2: detected capacity change from 0 to 1024 [ 341.072557][T15819] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 341.090556][T15819] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 341.105793][T15819] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 341.119722][T15819] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 2: comm syz.2.3965: lblock 2 mapped to illegal pblock 2 (length 1) [ 341.134455][T15819] EXT4-fs (loop2): Remounting filesystem read-only [ 341.141250][T15819] EXT4-fs (loop2): 1 orphan inode deleted [ 341.147639][T15819] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.165906][T15819] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.187636][T15830] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 341.351971][T15836] netlink: 388 bytes leftover after parsing attributes in process `syz.4.3969'. [ 341.386949][T15839] loop3: detected capacity change from 0 to 512 [ 341.407963][T15839] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 341.418161][T15839] EXT4-fs (loop3): orphan cleanup on readonly fs [ 341.425168][T15839] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 341.441201][T15839] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 341.449473][T15839] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3973: bg 0: block 40: padding at end of block bitmap is not set [ 341.465230][T15839] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 341.476882][T15839] EXT4-fs (loop3): 1 truncate cleaned up [ 341.483073][T15839] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 341.585149][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.780346][T15891] bond2 (unregistering): Released all slaves [ 342.310028][T15925] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3978'. [ 342.328434][T15927] futex_wake_op: syz.2.3979 tries to shift op by -1; fix this program [ 342.665144][T15964] loop2: detected capacity change from 0 to 512 [ 342.680923][T15964] EXT4-fs: Ignoring removed mblk_io_submit option [ 342.695157][T15964] EXT4-fs: Invalid want_extra_isize 2 [ 342.713328][T15964] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3981'. [ 343.203123][T15990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15990 comm=syz.4.3982 [ 343.216343][T15990] netlink: 'syz.4.3982': attribute type 1 has an invalid length. [ 343.230444][T15990] 8021q: adding VLAN 0 to HW filter on device bond2 [ 344.336240][ T29] kauditd_printk_skb: 534 callbacks suppressed [ 344.336257][ T29] audit: type=1326 audit(23337703.186:55723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16017 comm="syz.0.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f9c3e969 code=0x7ffc0000 [ 344.366506][T16018] set match dimension is over the limit! [ 344.410984][ T29] audit: type=1326 audit(23337703.186:55724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16020 comm="syz.4.4000" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa9fac8e969 code=0x0 [ 344.434038][ T29] audit: type=1326 audit(23337703.186:55725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16017 comm="syz.0.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe5f9c3d2d0 code=0x7ffc0000 [ 344.457586][ T29] audit: type=1326 audit(23337703.186:55726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16017 comm="syz.0.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f9c3e969 code=0x7ffc0000 [ 344.481044][ T29] audit: type=1326 audit(23337703.186:55727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16017 comm="syz.0.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f9c3e969 code=0x7ffc0000 [ 344.504558][ T29] audit: type=1326 audit(23337703.186:55728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16017 comm="syz.0.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5f9c3e969 code=0x7ffc0000 [ 344.528094][ T29] audit: type=1326 audit(23337703.186:55729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16017 comm="syz.0.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f9c3e969 code=0x7ffc0000 [ 344.551824][ T29] audit: type=1326 audit(23337703.186:55730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16017 comm="syz.0.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f9c3e969 code=0x7ffc0000 [ 344.575311][ T29] audit: type=1326 audit(23337703.186:55731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16017 comm="syz.0.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5f9c3e969 code=0x7ffc0000 [ 344.599137][ T29] audit: type=1326 audit(23337703.186:55732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16017 comm="syz.0.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f9c3e969 code=0x7ffc0000 [ 344.617317][T16026] netlink: 'syz.2.3990': attribute type 1 has an invalid length. [ 344.848318][T16031] lo speed is unknown, defaulting to 1000 [ 345.274931][T16034] delete_channel: no stack [ 345.317933][T16038] futex_wake_op: syz.4.4005 tries to shift op by -1; fix this program [ 345.463135][T16043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16043 comm=syz.1.3994 [ 345.477198][T16043] netlink: 'syz.1.3994': attribute type 1 has an invalid length. [ 345.579418][T16043] 8021q: adding VLAN 0 to HW filter on device bond4 [ 345.984874][T16056] loop4: detected capacity change from 0 to 256 [ 346.136730][T16064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4001'. [ 346.203001][T16066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4001'. [ 346.249479][T16070] program syz.3.4003 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 346.267602][T16070] loop3: detected capacity change from 0 to 128 [ 346.370862][T16072] syz.3.4003: attempt to access beyond end of device [ 346.370862][T16072] loop3: rw=2049, sector=131, nr_sectors = 1 limit=128 [ 346.384755][T16072] Buffer I/O error on dev loop3, logical block 131, lost async page write [ 346.416144][T16072] syz.3.4003: attempt to access beyond end of device [ 346.416144][T16072] loop3: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 346.429921][T16072] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 346.522078][T16070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4003'. [ 346.662791][T16072] syz.3.4003: attempt to access beyond end of device [ 346.662791][T16072] loop3: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 346.676464][T16072] Buffer I/O error on dev loop3, logical block 133, lost async page write [ 346.734067][T16072] syz.3.4003: attempt to access beyond end of device [ 346.734067][T16072] loop3: rw=2049, sector=134, nr_sectors = 1 limit=128 [ 346.747549][T16072] Buffer I/O error on dev loop3, logical block 134, lost async page write [ 346.756297][T16072] syz.3.4003: attempt to access beyond end of device [ 346.756297][T16072] loop3: rw=2049, sector=135, nr_sectors = 1 limit=128 [ 346.769745][T16072] Buffer I/O error on dev loop3, logical block 135, lost async page write [ 346.786770][T16072] syz.3.4003: attempt to access beyond end of device [ 346.786770][T16072] loop3: rw=2049, sector=136, nr_sectors = 1 limit=128 [ 346.800282][T16072] Buffer I/O error on dev loop3, logical block 136, lost async page write [ 346.825920][T16072] syz.3.4003: attempt to access beyond end of device [ 346.825920][T16072] loop3: rw=2049, sector=137, nr_sectors = 64 limit=128 [ 346.840920][T16072] syz.3.4003: attempt to access beyond end of device [ 346.840920][T16072] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 346.856667][T16072] syz.3.4003: attempt to access beyond end of device [ 346.856667][T16072] loop3: rw=2049, sector=225, nr_sectors = 9 limit=128 [ 347.004068][T16096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=16096 comm=syz.4.4007 [ 347.165224][T16103] loop2: detected capacity change from 0 to 128 [ 347.176813][T16103] FAT-fs (loop2): Directory bread(block 32) failed [ 347.183538][T16103] FAT-fs (loop2): Directory bread(block 33) failed [ 347.190380][T16103] FAT-fs (loop2): Directory bread(block 34) failed [ 347.197308][T16103] FAT-fs (loop2): Directory bread(block 35) failed [ 347.203925][T16103] FAT-fs (loop2): Directory bread(block 36) failed [ 347.210909][T16103] FAT-fs (loop2): Directory bread(block 37) failed [ 347.217968][T16103] FAT-fs (loop2): Directory bread(block 38) failed [ 348.010115][T16103] FAT-fs (loop2): Directory bread(block 39) failed [ 348.043616][T16103] FAT-fs (loop2): Directory bread(block 40) failed [ 348.143772][T16107] lo speed is unknown, defaulting to 1000 [ 348.181682][T16103] FAT-fs (loop2): Directory bread(block 41) failed [ 348.221253][T16110] loop3: detected capacity change from 0 to 1764 [ 348.372228][T16113] futex_wake_op: syz.1.4011 tries to shift op by -1; fix this program [ 348.381871][T16103] syz.2.4009: attempt to access beyond end of device [ 348.381871][T16103] loop2: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 348.397415][T16103] FAT-fs (loop2): Filesystem has been set read-only [ 348.405460][T16103] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 348.548701][T16117] lo speed is unknown, defaulting to 1000 [ 349.302683][T16139] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4020'. [ 349.312054][T16139] 0ªX¹¦À: renamed from 61ªX¹¦À [ 349.320231][T16139] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 349.907598][T16139] lo speed is unknown, defaulting to 1000 [ 349.930228][T16149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=16149 comm=syz.3.4023 [ 350.416047][T16155] loop2: detected capacity change from 0 to 512 [ 350.440760][T16155] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 350.499011][T16155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.573090][T16155] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 350.705230][T16155] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.723034][ T29] kauditd_printk_skb: 598 callbacks suppressed [ 350.723070][ T29] audit: type=1326 audit(23337709.566:56331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16161 comm="syz.3.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e086fe969 code=0x7ffc0000 [ 350.753583][ T29] audit: type=1326 audit(23337709.596:56332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16161 comm="syz.3.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f1e086fe969 code=0x7ffc0000 [ 350.777229][ T29] audit: type=1326 audit(23337709.596:56333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16161 comm="syz.3.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e086fe969 code=0x7ffc0000 [ 350.800699][ T29] audit: type=1326 audit(23337709.596:56334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16161 comm="syz.3.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e086fe969 code=0x7ffc0000 [ 350.826586][T16165] bond6: entered promiscuous mode [ 350.831667][T16165] bond6: entered allmulticast mode [ 350.848064][T16165] 8021q: adding VLAN 0 to HW filter on device bond6 [ 350.864335][T16165] bridge2: port 1(bond6) entered blocking state [ 350.870762][T16165] bridge2: port 1(bond6) entered disabled state [ 350.920516][ T29] audit: type=1326 audit(23337709.676:56335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16161 comm="syz.3.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f1e086fe969 code=0x7ffc0000 [ 350.944023][ T29] audit: type=1326 audit(23337709.676:56336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16161 comm="syz.3.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e086fe969 code=0x7ffc0000 [ 350.967593][ T29] audit: type=1326 audit(23337709.676:56337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16161 comm="syz.3.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e086fe969 code=0x7ffc0000 [ 350.991297][ T29] audit: type=1326 audit(23337709.726:56338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16161 comm="syz.3.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1e086fe969 code=0x7ffc0000 [ 351.014675][ T29] audit: type=1326 audit(23337709.726:56339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16161 comm="syz.3.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e086fe969 code=0x7ffc0000 [ 351.038309][ T29] audit: type=1326 audit(23337709.726:56340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16161 comm="syz.3.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1e086fe969 code=0x7ffc0000 [ 351.107905][T16171] xt_connbytes: Forcing CT accounting to be enabled [ 351.115690][T16171] set match dimension is over the limit! [ 351.194819][T16172] lo speed is unknown, defaulting to 1000 [ 351.395075][T16176] netlink: 'syz.1.4031': attribute type 13 has an invalid length. [ 351.477395][T16165] infiniband syz!: set down [ 351.482010][T16165] infiniband syz!: added team_slave_0 [ 351.508325][T16181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4031'. [ 351.607318][T16165] RDS/IB: syz!: added [ 351.615411][T16186] ip6t_rpfilter: unknown options [ 351.627116][T16165] smc: adding ib device syz! with port count 1 [ 351.647387][T16176] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 351.650835][T16165] smc: ib device syz! port 1 has pnetid [ 351.791737][T16163] loop4: detected capacity change from 0 to 8192 [ 351.798744][T16194] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4037'. [ 351.814588][T16163] vfat: Unknown parameter 'GPL' [ 351.819819][T16194] 0ªX¹¦À: renamed from 61ªX¹¦À [ 351.879081][T16163] futex_wake_op: syz.4.4027 tries to shift op by -1; fix this program [ 351.919840][T16194] 0ªX¹¦À: entered allmulticast mode [ 351.925219][T16194] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 352.662691][T16195] lo speed is unknown, defaulting to 1000 [ 353.625996][T16210] loop2: detected capacity change from 0 to 512 [ 353.632521][T16210] EXT4-fs: Ignoring removed nomblk_io_submit option [ 353.642140][T16210] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 353.710050][T16205] loop4: detected capacity change from 0 to 512 [ 353.762673][T16210] EXT4-fs (loop2): orphan cleanup on readonly fs [ 353.770415][T16210] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.4039: Failed to acquire dquot type 1 [ 353.783333][T16210] EXT4-fs (loop2): 1 truncate cleaned up [ 353.790183][T16210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 353.803945][T16210] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.866308][T16205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.978805][T16215] xt_hashlimit: size too large, truncated to 1048576 [ 354.265395][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.307423][T16232] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 354.379449][T16234] loop4: detected capacity change from 0 to 4096 [ 354.419412][T16234] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.421852][T16240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4048'. [ 354.473021][T16232] +}[@ (16232): attempted to duplicate a private mapping with mremap. This is not supported. [ 354.486386][T16242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4048'. [ 354.590345][T16252] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4051'. [ 354.600927][T16247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4050'. [ 354.612096][T16252] 1ªX¹¦À: renamed from 60ªX¹¦À [ 354.632069][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.656346][T16252] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 354.682450][T16256] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4052'. [ 354.691679][T16256] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4052'. [ 354.761319][T16252] lo speed is unknown, defaulting to 1000 [ 354.917196][T16261] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 355.026431][T16274] netlink: 'syz.3.4060': attribute type 27 has an invalid length. [ 355.045810][T16279] loop4: detected capacity change from 0 to 512 [ 355.052422][T16279] EXT4-fs: Ignoring removed nomblk_io_submit option [ 355.059988][T16279] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 355.071075][T16279] EXT4-fs (loop4): orphan cleanup on readonly fs [ 355.081492][T16279] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.4058: Failed to acquire dquot type 1 [ 355.094147][T16279] EXT4-fs (loop4): 1 truncate cleaned up [ 355.101120][T16279] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 355.114456][T16279] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.126890][T16274] geneve0: left allmulticast mode [ 355.132268][T16274] bridge2: left promiscuous mode [ 355.137266][T16274] bridge2: left allmulticast mode [ 355.166424][T16274] veth7: left promiscuous mode [ 355.172303][T16274] bond5: left promiscuous mode [ 355.210236][T16283] loop2: detected capacity change from 0 to 512 [ 355.267560][T16283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.427990][T16274] bond6: left promiscuous mode [ 355.566055][T16274] batadv0: left promiscuous mode [ 355.571084][T16274] batadv0: left allmulticast mode [ 355.669256][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.810922][T16294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4061'. [ 355.826017][T16294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4061'. [ 355.976585][T16303] loop3: detected capacity change from 0 to 512 [ 356.024107][T16303] ext3: Bad value for 'sb' [ 356.040144][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 356.040161][ T29] audit: type=1400 audit(23337714.886:56498): avc: denied { create } for pid=16302 comm="syz.3.4065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 356.303642][T16313] loop3: detected capacity change from 0 to 512 [ 356.350452][T16313] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 356.375921][T16313] EXT4-fs (loop3): 1 truncate cleaned up [ 356.382017][T16313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.454607][T16317] vlan0: entered allmulticast mode [ 356.459785][T16317] : entered allmulticast mode [ 356.657406][T16313] vhci_hcd: invalid port number 15 [ 356.662602][T16313] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 356.962990][T16321] lo speed is unknown, defaulting to 1000 [ 357.155571][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.187843][T16327] $Hÿ: renamed from bond0 [ 357.195364][T16327] $Hÿ: entered promiscuous mode [ 357.246056][T16307] Set syz1 is full, maxelem 65536 reached [ 357.266183][ T29] audit: type=1326 audit(23337716.116:56499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16336 comm="syz.3.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e086fe969 code=0x7ffc0000 [ 357.275554][T16334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.289839][ T29] audit: type=1326 audit(23337716.116:56500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16336 comm="syz.3.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e086fe969 code=0x7ffc0000 [ 357.298174][T16334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.321532][ T29] audit: type=1326 audit(23337716.116:56501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16336 comm="syz.3.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e086fe969 code=0x7ffc0000 [ 357.352768][ T29] audit: type=1326 audit(23337716.116:56502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16336 comm="syz.3.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e086fe969 code=0x7ffc0000 [ 357.376259][ T29] audit: type=1326 audit(23337716.116:56503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16336 comm="syz.3.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e086fe969 code=0x7ffc0000 [ 357.388124][T16334] loop4: detected capacity change from 0 to 256 [ 357.400999][ T29] audit: type=1326 audit(23337716.186:56504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16336 comm="syz.3.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1e086fe969 code=0x7ffc0000 [ 357.429842][ T29] audit: type=1326 audit(23337716.186:56505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16336 comm="syz.3.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e086fe969 code=0x7ffc0000 [ 357.453355][ T29] audit: type=1326 audit(23337716.186:56506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16336 comm="syz.3.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e086fe969 code=0x7ffc0000 [ 357.476853][ T29] audit: type=1326 audit(23337716.186:56507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16336 comm="syz.3.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1e086fe969 code=0x7ffc0000 [ 357.477147][T16330] xt_hashlimit: size too large, truncated to 1048576 [ 357.507444][T16340] loop2: detected capacity change from 0 to 128 [ 357.530228][T16334] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20000 [ 357.542183][T16340] vfat: Unexpected value for 'discard' [ 358.206541][T16351] vlan0: entered promiscuous mode [ 358.211663][T16351] veth0: entered promiscuous mode [ 358.239592][T16355] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4080'. [ 358.285153][T16358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4082'. [ 358.294191][T16358] netlink: 'syz.2.4082': attribute type 30 has an invalid length. [ 358.305394][T16358] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.313945][T16358] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.322481][T16358] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.330762][T16358] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.340085][T16358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4082'. [ 358.349089][T16358] netlink: 'syz.2.4082': attribute type 30 has an invalid length. [ 358.433721][T16362] lo speed is unknown, defaulting to 1000 [ 359.031725][T16380] loop4: detected capacity change from 0 to 512 [ 359.117165][T16380] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 359.140263][T16386] loop3: detected capacity change from 0 to 256 [ 359.187080][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 359.839017][T16392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4101'. [ 359.851346][T16392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4101'. [ 359.888711][T16399] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16399 comm=syz.0.4094 [ 360.613826][T16414] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4097'. [ 360.633793][T16397] loop2: detected capacity change from 0 to 8192 [ 360.640996][T16397] vfat: Unknown parameter 'GPL' [ 360.657939][T16414] 1ªX¹¦À: renamed from 60ªX¹¦À [ 360.667904][T16397] futex_wake_op: syz.2.4093 tries to shift op by -1; fix this program [ 360.731445][T16414] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 360.750527][T16416] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4110'. [ 360.759938][T16416] 1ªX¹¦À: renamed from 60ªX¹¦À [ 360.766793][T16416] 1ªX¹¦À: entered allmulticast mode [ 360.772341][T16416] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 360.801299][T16422] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4112'. [ 360.814445][T16422] 0ªX¹¦À: renamed from 61ªX¹¦À [ 360.824443][T16422] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 360.845489][T16418] loop2: detected capacity change from 0 to 512 [ 360.854037][T16418] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 360.881525][T16418] EXT4-fs (loop2): 1 truncate cleaned up [ 360.889171][T16418] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.906403][T16416] lo speed is unknown, defaulting to 1000 [ 361.000208][T16420] xt_hashlimit: size too large, truncated to 1048576 [ 361.011507][T16422] lo speed is unknown, defaulting to 1000 [ 361.088935][T16430] vhci_hcd: invalid port number 15 [ 361.094153][T16430] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 361.291133][ T29] kauditd_printk_skb: 391 callbacks suppressed [ 361.291151][ T29] audit: type=1400 audit(23337720.136:56899): avc: denied { bind } for pid=16440 comm="syz.3.4104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 361.406381][T16444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4105'. [ 361.441553][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.457695][T16445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4105'. [ 361.606437][T16455] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 361.608841][ T29] audit: type=1326 audit(23337720.446:56900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16453 comm="syz.2.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4c6ee969 code=0x7ffc0000 [ 361.637040][ T29] audit: type=1326 audit(23337720.446:56901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16453 comm="syz.2.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4c6ee969 code=0x7ffc0000 [ 361.660589][ T29] audit: type=1326 audit(23337720.456:56902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16453 comm="syz.2.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec4c6ee969 code=0x7ffc0000 [ 361.684136][ T29] audit: type=1326 audit(23337720.456:56903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16453 comm="syz.2.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4c6ee969 code=0x7ffc0000 [ 361.707748][ T29] audit: type=1326 audit(23337720.456:56904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16453 comm="syz.2.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4c6ee969 code=0x7ffc0000 [ 361.731363][ T29] audit: type=1326 audit(23337720.456:56905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16453 comm="syz.2.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fec4c6ee969 code=0x7ffc0000 [ 361.754864][ T29] audit: type=1326 audit(23337720.456:56906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16453 comm="syz.2.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4c6ee969 code=0x7ffc0000 [ 361.778377][ T29] audit: type=1326 audit(23337720.456:56907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16453 comm="syz.2.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4c6ee969 code=0x7ffc0000 [ 361.788015][T16456] loop2: detected capacity change from 0 to 8192 [ 361.801906][ T29] audit: type=1326 audit(23337720.456:56908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16453 comm="syz.2.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fec4c6ee969 code=0x7ffc0000 [ 361.823668][T16459] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 361.838283][T16459] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 361.846024][T16459] vhci_hcd vhci_hcd.0: Device attached [ 362.104228][ T3392] usb 7-1: new high-speed USB device number 5 using vhci_hcd [ 362.253705][T16464] loop4: detected capacity change from 0 to 256 [ 362.301929][T16460] vhci_hcd: connection reset by peer [ 362.308761][ T3507] vhci_hcd: stop threads [ 362.313082][ T3507] vhci_hcd: release socket [ 362.317577][ T3507] vhci_hcd: disconnect device [ 362.425089][T16474] 1ªX¹¦À: renamed from 60ªX¹¦À [ 362.431976][T16474] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 362.502947][T16472] loop2: detected capacity change from 0 to 2048 [ 362.530459][T16474] lo speed is unknown, defaulting to 1000 [ 362.556926][T16472] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.591315][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.679852][T16481] 1ªX¹¦À: renamed from 60ªX¹¦À [ 362.686869][T16481] 1ªX¹¦À: entered allmulticast mode [ 362.692235][T16481] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 362.840515][T16481] lo speed is unknown, defaulting to 1000 [ 362.879190][T16466] futex_wake_op: syz.1.4111 tries to shift op by -1; fix this program [ 363.030540][T16497] vxcan1: entered promiscuous mode [ 363.124380][T16505] vhci_hcd: invalid port number 15 [ 363.129588][T16505] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 363.680676][T16503] __nla_validate_parse: 11 callbacks suppressed [ 363.680697][T16503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4123'. [ 364.133532][T16525] loop2: detected capacity change from 0 to 512 [ 364.147766][T16525] ext4: Unknown parameter 'nouser_xattr' [ 364.155647][T16503] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 364.165018][T16503] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 364.178152][T16524] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 364.282467][T16527] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4128'. [ 364.299270][T16527] 0ªX¹¦À: renamed from 61ªX¹¦À [ 364.303315][T16527] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 364.370383][T16527] lo speed is unknown, defaulting to 1000 [ 364.404896][T16533] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4131'. [ 364.428240][T16533] loop2: detected capacity change from 0 to 512 [ 364.451248][T16536] ˆyz!: rxe_newlink: already configured on team_slave_0 [ 364.455184][T16533] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 364.484182][T16533] EXT4-fs (loop2): mount failed [ 364.549433][T16544] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4134'. [ 364.558924][T16544] 1ªX¹¦À: renamed from 60ªX¹¦À [ 364.566196][T16544] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 364.641487][T16544] lo speed is unknown, defaulting to 1000 [ 364.758868][T16558] loop3: detected capacity change from 0 to 128 [ 364.844548][T16553] lo speed is unknown, defaulting to 1000 [ 365.055433][T16558] syz.3.4139: attempt to access beyond end of device [ 365.055433][T16558] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 365.123178][T16558] syz.3.4139: attempt to access beyond end of device [ 365.123178][T16558] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 365.151587][T16558] syz.3.4139: attempt to access beyond end of device [ 365.151587][T16558] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 365.186204][T16558] syz.3.4139: attempt to access beyond end of device [ 365.186204][T16558] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 365.202178][T16558] syz.3.4139: attempt to access beyond end of device [ 365.202178][T16558] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 365.216149][T16558] syz.3.4139: attempt to access beyond end of device [ 365.216149][T16558] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 365.266356][T16558] syz.3.4139: attempt to access beyond end of device [ 365.266356][T16558] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 365.284982][T16566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4141'. [ 365.295996][T16566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4141'. [ 365.305549][T16558] syz.3.4139: attempt to access beyond end of device [ 365.305549][T16558] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 365.320653][T16558] syz.3.4139: attempt to access beyond end of device [ 365.320653][T16558] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 365.334694][T16558] syz.3.4139: attempt to access beyond end of device [ 365.334694][T16558] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 365.359443][T16564] loop2: detected capacity change from 0 to 2048 [ 365.521616][T16564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.682089][T16579] vlan0: entered allmulticast mode [ 365.702835][T16581] $Hÿ: renamed from bond0 [ 365.709332][T16581] $Hÿ: entered promiscuous mode [ 365.811345][T16585] loop4: detected capacity change from 0 to 512 [ 365.881479][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.888018][T16585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.972623][T16598] loop2: detected capacity change from 0 to 256 [ 366.067812][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.167272][T16608] loop4: detected capacity change from 0 to 1024 [ 366.189232][T16608] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 366.361418][T16611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4153'. [ 366.386127][T16611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4153'. [ 366.430830][ T29] kauditd_printk_skb: 415 callbacks suppressed [ 366.430846][ T29] audit: type=1326 audit(23337725.276:57323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16612 comm="syz.4.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fac8e969 code=0x7ffc0000 [ 366.461930][ T29] audit: type=1326 audit(23337725.276:57324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16612 comm="syz.4.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fac8e969 code=0x7ffc0000 [ 366.485627][ T29] audit: type=1326 audit(23337725.276:57325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16612 comm="syz.4.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa9fac8e969 code=0x7ffc0000 [ 366.509239][ T29] audit: type=1326 audit(23337725.276:57326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16612 comm="syz.4.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fac8e969 code=0x7ffc0000 [ 366.532912][ T29] audit: type=1326 audit(23337725.276:57327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16612 comm="syz.4.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fac8e969 code=0x7ffc0000 [ 366.556452][ T29] audit: type=1326 audit(23337725.276:57328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16612 comm="syz.4.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa9fac8e969 code=0x7ffc0000 [ 366.579958][ T29] audit: type=1326 audit(23337725.276:57329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16612 comm="syz.4.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fac8e969 code=0x7ffc0000 [ 366.603453][ T29] audit: type=1326 audit(23337725.276:57330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16612 comm="syz.4.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fac8e969 code=0x7ffc0000 [ 366.627094][ T29] audit: type=1326 audit(23337725.276:57331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16612 comm="syz.4.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa9fac8e969 code=0x7ffc0000 [ 366.650710][ T29] audit: type=1326 audit(23337725.276:57332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16612 comm="syz.4.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fac8e969 code=0x7ffc0000 [ 366.697437][T16616] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4155'. [ 366.714355][T16616] 0ªX¹¦À: renamed from 61ªX¹¦À [ 366.725704][T16616] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 366.796547][T16616] lo speed is unknown, defaulting to 1000 [ 366.825477][T16617] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4155'. [ 368.156395][T16634] block device autoloading is deprecated and will be removed. [ 368.164395][ T3392] vhci_hcd: vhci_device speed not set [ 368.224189][T16634] loop2: detected capacity change from 0 to 1024 [ 368.230986][T16634] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 368.466234][T16648] vlan0: entered allmulticast mode [ 368.577295][ T3456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 368.584817][ T3456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 368.592408][ T3456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 368.709284][ T3456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 368.717001][ T3456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 368.724488][ T3456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 368.731969][ T3456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 368.739577][ T3456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 368.747029][ T3456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 368.754450][ T3456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 368.762001][ T3456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 368.769437][ T3456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 368.776972][ T3456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 368.790537][T16657] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 368.831898][T16657] SELinux: failed to load policy [ 368.889398][ T3456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 368.896987][ T3456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 368.904452][ T3456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 368.911869][ T3456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 368.919404][ T3456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 368.926839][ T3456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 368.934279][ T3456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 368.941723][ T3456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 368.949181][ T3456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 368.956612][ T3456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 368.964077][ T3456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 368.971535][ T3456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 368.978973][ T3456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 368.986472][ T3456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 368.997189][ T3456] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 369.130243][T16661] random: crng reseeded on system resumption [ 369.135676][T16660] netlink: 'syz.0.4176': attribute type 29 has an invalid length. [ 369.144388][T16663] loop4: detected capacity change from 0 to 512 [ 369.151689][T16663] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 369.164466][T16663] EXT4-fs (loop4): 1 truncate cleaned up [ 369.170621][T16663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.265389][T16668] vhci_hcd: invalid port number 15 [ 369.270575][T16668] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 369.374800][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.442777][T16672] __nla_validate_parse: 1 callbacks suppressed [ 369.442796][T16672] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4179'. [ 369.503856][T16677] netlink: 'syz.3.4167': attribute type 32 has an invalid length. [ 369.517942][T16683] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4170'. [ 369.527747][T16677] random: crng reseeded on system resumption [ 369.583140][T16683] 0ªX¹¦À: renamed from 61ªX¹¦À [ 369.642258][T16683] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 369.673496][T16689] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 369.673496][T16689] program syz.1.4171 not setting count and/or reply_len properly [ 369.686046][T16683] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4170'. [ 369.699828][T16677] loop3: detected capacity change from 0 to 1024 [ 369.823429][T16685] lo speed is unknown, defaulting to 1000 [ 369.827443][T16677] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.4167: Failed to acquire dquot type 0 [ 369.841560][T16677] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 369.882138][T16677] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.4167: corrupted inode contents [ 369.921436][T16677] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #13: comm syz.3.4167: mark_inode_dirty error [ 369.963996][T16677] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.4167: corrupted inode contents [ 369.995635][T16677] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.4167: mark_inode_dirty error [ 370.012404][T16677] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.4167: corrupted inode contents [ 370.065385][T16677] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 370.079695][T16677] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.4167: corrupted inode contents [ 370.102696][T16677] EXT4-fs error (device loop3): ext4_truncate:4255: inode #13: comm syz.3.4167: mark_inode_dirty error [ 370.193214][T16677] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 370.212301][T16677] EXT4-fs (loop3): 1 truncate cleaned up [ 370.221161][T16677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.270619][T16708] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4181'. [ 370.754408][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.008719][T16726] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4186'. [ 371.434683][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 371.434697][ T29] audit: type=1326 audit(23337730.286:57539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16735 comm="syz.4.4189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fac8e969 code=0x7ffc0000 [ 371.474931][ T29] audit: type=1326 audit(23337730.316:57540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16735 comm="syz.4.4189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9fac8e969 code=0x7ffc0000 [ 371.498630][ T29] audit: type=1326 audit(23337730.316:57541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16735 comm="syz.4.4189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fac8e969 code=0x7ffc0000 [ 371.522231][ T29] audit: type=1326 audit(23337730.316:57542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16735 comm="syz.4.4189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fac8e969 code=0x7ffc0000 [ 371.654324][T16742] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4190'. [ 371.663643][T16742] 1ªX¹¦À: renamed from 60ªX¹¦À [ 371.671230][ T29] audit: type=1326 audit(23337730.406:57543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16735 comm="syz.4.4189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fa9fac8e969 code=0x7ffc0000 [ 371.694726][ T29] audit: type=1326 audit(23337730.406:57544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16735 comm="syz.4.4189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fac8e969 code=0x7ffc0000 [ 371.722565][ T29] audit: type=1326 audit(23337730.406:57545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16735 comm="syz.4.4189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fac8e969 code=0x7ffc0000 [ 371.746027][ T29] audit: type=1326 audit(23337730.406:57546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16735 comm="syz.4.4189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fac8e969 code=0x7ffc0000 [ 371.769696][ T29] audit: type=1326 audit(23337730.406:57547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16735 comm="syz.4.4189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fac8e969 code=0x7ffc0000 [ 371.793246][ T29] audit: type=1326 audit(23337730.406:57548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16735 comm="syz.4.4189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fa9fac8e969 code=0x7ffc0000 [ 371.816929][T16742] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 371.843516][T16749] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4192'. [ 371.865192][T16749] 0ªX¹¦À: renamed from caif0 [ 371.887121][T16749] 0ªX¹¦À: entered allmulticast mode [ 371.892383][T16749] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 371.964318][T16722] bio_check_eod: 98 callbacks suppressed [ 371.964338][T16722] syz.3.4184: attempt to access beyond end of device [ 371.964338][T16722] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 372.056997][T16750] lo speed is unknown, defaulting to 1000 [ 372.058199][T16757] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4193'. [ 372.072039][T16757] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4193'. [ 372.081304][T16757] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4193'. [ 372.344680][T16749] lo speed is unknown, defaulting to 1000 [ 372.366678][T16769] 0ªX¹¦À: renamed from 61ªX¹¦À [ 372.375296][T16769] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 372.977526][T16772] vlan0: entered allmulticast mode [ 372.982843][T16772] $Hÿ: entered allmulticast mode [ 372.998524][T16769] lo speed is unknown, defaulting to 1000 [ 373.196975][T16782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.263195][T16782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.300809][T16776] netlink: 'syz.4.4197': attribute type 4 has an invalid length. [ 373.384483][T16786] 9pnet_fd: Insufficient options for proto=fd [ 373.459527][T16798] 0ªX¹¦À: renamed from 61ªX¹¦À [ 373.466494][T16798] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 373.483575][T16796] usb usb8: usbfs: process 16796 (syz.4.4200) did not claim interface 0 before use [ 373.632549][T16798] lo speed is unknown, defaulting to 1000 [ 373.650618][ T3392] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 373.658122][ T3392] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 373.665572][ T3392] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 373.692630][ T3392] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 373.700230][ T3392] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 373.707753][ T3392] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 373.715193][ T3392] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 373.722603][ T3392] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 373.730119][ T3392] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 373.737832][ T3392] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 373.745353][ T3392] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 373.752774][ T3392] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 373.760235][ T3392] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 373.767793][ T3392] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 373.775333][ T3392] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 373.782748][ T3392] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 373.790361][ T3392] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 373.797914][ T3392] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 373.805468][ T3392] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 373.812924][ T3392] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 373.820529][ T3392] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 373.828054][ T3392] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 373.835493][ T3392] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 373.842893][ T3392] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 373.850330][ T3392] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 373.857829][ T3392] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 373.865305][ T3392] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 373.873245][ T3392] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 373.910792][T16806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.950589][T16806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.980591][T16806] loop2: detected capacity change from 0 to 256 [ 374.001128][T16806] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20000 [ 374.057737][ T3543] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 374.065355][ T3543] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 374.072792][ T3543] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 374.076246][T16806] unsupported nla_type 52263 [ 374.105182][ T3543] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 374.112668][ T3543] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 374.120205][ T3543] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 374.127696][ T3543] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 374.135156][ T3543] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 374.142568][ T3543] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 374.150117][ T3543] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 374.157620][ T3543] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 374.165208][ T3543] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 374.172705][ T3543] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 374.183416][ T3543] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 374.191051][ T3543] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 374.198504][ T3543] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 374.206031][ T3543] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 374.213529][ T3543] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 374.220989][ T3543] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 374.228625][ T3543] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 374.236139][ T3543] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 374.243564][ T3543] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 374.251076][ T3543] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 374.258601][ T3543] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 374.266072][ T3543] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 374.273493][ T3543] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 374.280992][ T3543] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 374.295371][ T3543] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 374.618080][T16818] __nla_validate_parse: 9 callbacks suppressed [ 374.618100][T16818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4210'. [ 374.635789][T16818] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4210'. [ 374.670529][ T3543] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 374.678203][ T3543] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 374.685702][ T3543] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 374.693213][ T3543] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 374.700671][ T3543] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 374.708184][ T3543] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 374.715627][ T3543] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 374.723130][ T3543] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 374.723815][T16821] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4211'. [ 374.730613][ T3543] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 374.730643][ T3543] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 374.730671][ T3543] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 374.762216][ T3543] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 374.769691][ T3543] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 374.777295][ T3543] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 374.784730][ T3543] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 374.792134][ T3543] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 374.799808][ T3543] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 374.807271][ T3543] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 374.814737][ T3543] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 374.822131][ T3543] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 374.829558][ T3543] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 374.837027][ T3543] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 374.844515][ T3543] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 374.851924][ T3543] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 374.859451][ T3543] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 374.866984][ T3543] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 374.874673][ T3543] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 374.884264][ T3543] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 375.082705][T16829] loop3: detected capacity change from 0 to 512 [ 375.089471][T16829] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 375.404237][ T4573] usb usb8-port5: attempt power cycle [ 375.762669][T16836] lo speed is unknown, defaulting to 1000 [ 376.270500][T16849] bond_slave_1: entered promiscuous mode [ 376.276856][T16849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4216'. [ 376.287400][T16849] bond_slave_1 (unregistering): left promiscuous mode [ 376.508100][T16857] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4221'. [ 376.531872][T16857] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4221'. [ 376.611689][ T29] kauditd_printk_skb: 488 callbacks suppressed [ 376.611707][ T29] audit: type=1326 audit(23337735.456:58037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16860 comm="syz.1.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c726e969 code=0x7ffc0000 [ 376.641643][ T29] audit: type=1326 audit(23337735.456:58038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16860 comm="syz.1.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c726e969 code=0x7ffc0000 [ 376.665278][ T29] audit: type=1326 audit(23337735.456:58039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16860 comm="syz.1.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f14c726e969 code=0x7ffc0000 [ 376.686811][T16853] Set syz1 is full, maxelem 65536 reached [ 376.688939][ T29] audit: type=1326 audit(23337735.456:58040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16860 comm="syz.1.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c726e969 code=0x7ffc0000 [ 376.702145][T16855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4221'. [ 376.718063][ T29] audit: type=1326 audit(23337735.456:58041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16860 comm="syz.1.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c726e969 code=0x7ffc0000 [ 376.750607][ T29] audit: type=1326 audit(23337735.456:58042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16860 comm="syz.1.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14c726e969 code=0x7ffc0000 [ 376.774137][ T29] audit: type=1326 audit(23337735.456:58043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16860 comm="syz.1.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c726e969 code=0x7ffc0000 [ 376.797681][ T29] audit: type=1326 audit(23337735.456:58044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16860 comm="syz.1.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c726e969 code=0x7ffc0000 [ 376.821228][T16857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4221'. [ 376.830378][ T29] audit: type=1326 audit(23337735.456:58045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16860 comm="syz.1.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14c726e969 code=0x7ffc0000 [ 376.853878][ T29] audit: type=1326 audit(23337735.456:58046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16860 comm="syz.1.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c726e969 code=0x7ffc0000 [ 376.861785][ T3392] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 376.885144][ T3392] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 376.892650][ T3392] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 376.947624][ T3392] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 376.955110][ T3392] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 376.962607][ T3392] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 376.970136][ T3392] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 376.977676][ T3392] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 376.985356][ T3392] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 376.992874][ T3392] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 377.000319][ T3392] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 377.007745][ T3392] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 377.015154][ T3392] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 377.022624][ T3392] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 377.022670][T16868] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4223'. [ 377.030103][ T3392] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 377.030154][ T3392] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 377.054303][ T3392] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 377.061727][ T3392] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 377.069163][ T3392] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 377.076640][ T3392] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 377.084092][ T3392] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 377.091606][ T3392] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 377.099044][ T3392] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 377.106538][ T3392] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 377.113941][ T3392] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 377.121422][ T3392] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 377.128897][ T3392] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 377.137083][ T3392] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 377.214128][T16876] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 377.314890][T16876] loop2: detected capacity change from 0 to 8192 [ 377.381517][T16878] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4227'. [ 377.390739][T16878] 1ªX¹¦À: renamed from 60ªX¹¦À [ 377.397816][T16878] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 377.458233][T16878] lo speed is unknown, defaulting to 1000 [ 377.584929][T16883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.593574][T16883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.896154][T16896] 1ªX¹¦À: renamed from 60ªX¹¦À [ 377.912712][T16896] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 378.136826][T16896] lo speed is unknown, defaulting to 1000 [ 378.406179][ T4573] usb usb8-port5: unable to enumerate USB device [ 378.695730][T16912] loop3: detected capacity change from 0 to 128 [ 378.872901][T16914] netlink: 'syz.0.4239': attribute type 16 has an invalid length. [ 378.880974][T16914] netlink: 'syz.0.4239': attribute type 17 has an invalid length. [ 379.106225][T16914] 8021q: adding VLAN 0 to HW filter on device  [ 379.163293][T16914] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.178224][T16914] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 379.201676][T16920] loop2: detected capacity change from 0 to 1024 [ 379.227389][T16920] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 379.338694][T16922] netem: incorrect ge model size [ 379.343726][T16922] netem: change failed [ 379.350006][T16928] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 379.484317][T16936] 1ªX¹¦À: renamed from 60ªX¹¦À [ 379.515993][T16936] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 379.649213][T16936] lo speed is unknown, defaulting to 1000 [ 379.682302][T16930] __nla_validate_parse: 5 callbacks suppressed [ 379.682320][T16930] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.4243'. [ 379.965425][T16954] loop3: detected capacity change from 0 to 512 [ 379.981063][T16954] EXT4-fs: Ignoring removed nomblk_io_submit option [ 380.055206][T16954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.176194][T16967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4256'. [ 380.186710][T16967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4256'. [ 380.215558][T16969] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 380.233174][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.284740][T16972] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4258'. [ 380.295176][T16973] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4259'. [ 380.304707][T16975] No such timeout policy "syz0" [ 380.316490][T16973] 0ªX¹¦À: renamed from 61ªX¹¦À [ 380.323533][T16973] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 380.412239][T16973] lo speed is unknown, defaulting to 1000 [ 380.521857][T16980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.524517][T16982] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4262'. [ 380.530521][T16980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.687350][T16980] loop2: detected capacity change from 0 to 256 [ 380.924363][T16991] netlink: 'syz.3.4264': attribute type 10 has an invalid length. [ 380.936785][T16991] ip6gretap2: entered promiscuous mode [ 380.942308][T16991] ip6gretap2: entered allmulticast mode [ 380.953386][T16991] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4264'. [ 380.962688][T16991] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4264'. [ 380.971872][T16991] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4264'. [ 381.002466][T16991] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4264'. [ 381.063720][T16998] lo: entered allmulticast mode [ 381.124806][T16997] lo: left allmulticast mode [ 381.244722][ T3456] usb usb6-port7: attempt power cycle [ 381.359901][T17010] syz.3.4267: attempt to access beyond end of device [ 381.359901][T17010] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 381.385625][T17010] loop3: detected capacity change from 0 to 1024 [ 381.392677][T17010] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 381.811070][ T29] kauditd_printk_skb: 439 callbacks suppressed [ 381.811089][ T29] audit: type=1400 audit(23337740.656:58486): avc: denied { create } for pid=17014 comm="syz.2.4271" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 381.907217][ T29] audit: type=1400 audit(23337740.696:58487): avc: denied { write } for pid=17014 comm="syz.2.4271" name="file2" dev="tmpfs" ino=4434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 381.929793][ T29] audit: type=1400 audit(23337740.696:58488): avc: denied { open } for pid=17014 comm="syz.2.4271" path="/830/file2" dev="tmpfs" ino=4434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 381.952800][ T29] audit: type=1400 audit(23337740.726:58489): avc: denied { ioctl } for pid=17014 comm="syz.2.4271" path="/830/file2" dev="tmpfs" ino=4434 ioctlcmd=0x4c06 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 382.085057][T17015] lo speed is unknown, defaulting to 1000 [ 382.175930][T17018] 1ªX¹¦À: renamed from 60ªX¹¦À [ 382.192904][ T29] audit: type=1326 audit(23337740.926:58490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17014 comm="syz.2.4271" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec4c6ee969 code=0x0 [ 382.215914][ T29] audit: type=1326 audit(23337740.976:58491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17014 comm="syz.2.4271" exe="/root/syz-executor" sig=31 arch=c000003e syscall=230 compat=0 ip=0x7fec4c721225 code=0x0 [ 382.240924][T17018] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 382.261145][ T29] audit: type=1400 audit(23337741.106:58492): avc: denied { ioctl } for pid=17019 comm="syz.3.4273" path="socket:[46959]" dev="sockfs" ino=46959 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 382.288354][T17020] bond6: (slave batadv0): Releasing active interface [ 382.350617][ T29] audit: type=1326 audit(23337741.196:58493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17014 comm="syz.2.4271" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec4c6ee969 code=0x0 [ 382.369996][T17018] lo speed is unknown, defaulting to 1000 [ 382.440501][ T29] audit: type=1400 audit(23337741.336:58494): avc: denied { bind } for pid=17023 comm="syz.3.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 382.460017][ T29] audit: type=1400 audit(23337741.336:58495): avc: denied { name_bind } for pid=17023 comm="syz.3.4274" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 382.667572][T17050] loop3: detected capacity change from 0 to 1024 [ 382.735950][T17050] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.4278: Failed to acquire dquot type 0 [ 382.814387][T17050] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 382.844031][T17050] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.4278: corrupted inode contents [ 382.874399][T17050] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #13: comm syz.3.4278: mark_inode_dirty error [ 382.897251][T17050] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.4278: corrupted inode contents [ 382.934144][T17050] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.4278: mark_inode_dirty error [ 382.965585][T17050] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.4278: corrupted inode contents [ 382.993703][T17050] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 383.028076][T17050] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.4278: corrupted inode contents [ 383.046586][T17050] EXT4-fs error (device loop3): ext4_truncate:4255: inode #13: comm syz.3.4278: mark_inode_dirty error [ 383.058536][T17050] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 383.078311][T17050] EXT4-fs (loop3): 1 truncate cleaned up [ 383.094524][T17050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.120074][T17050] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 383.184345][ T3456] usb usb6-port7: unable to enumerate USB device [ 384.282135][T17155] loop4: detected capacity change from 0 to 512 [ 384.296406][T17155] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 384.320964][T17155] EXT4-fs (loop4): invalid journal inode [ 384.329781][T17155] EXT4-fs (loop4): can't get journal size [ 384.364601][T17155] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c119, mo2=0002] [ 384.399692][T17155] System zones: 1-12, 13-13 [ 384.426789][T17155] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.4289: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 384.487417][T17155] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4289: couldn't read orphan inode 15 (err -117) [ 384.513788][T17155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.528581][T17155] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.795687][T17191] loop4: detected capacity change from 0 to 512 [ 384.803333][T17191] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 384.814500][T17191] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 384.822962][T17191] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.4292: corrupted in-inode xattr: e_value size too large [ 384.839575][T17191] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4292: couldn't read orphan inode 15 (err -117) [ 384.873635][T17191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.902588][T17196] loop2: detected capacity change from 0 to 164 [ 384.928370][T17196] syz.2.4293: attempt to access beyond end of device [ 384.928370][T17196] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 384.965509][T17196] syz.2.4293: attempt to access beyond end of device [ 384.965509][T17196] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 385.090686][T17191] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.4292: corrupted in-inode xattr: e_value size too large [ 385.123490][T17191] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.4292: corrupted in-inode xattr: e_value size too large [ 385.159248][ T3543] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 385.166908][ T3543] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 385.174507][ T3543] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 385.202614][ T3543] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 385.210188][ T3543] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 385.217767][ T3543] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 385.225257][ T3543] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 385.232654][ T3543] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 385.240095][ T3543] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 385.247510][ T3543] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 385.254998][ T3543] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 385.262419][ T3543] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 385.269925][ T3543] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 385.283178][T17204] __nla_validate_parse: 18 callbacks suppressed [ 385.283197][T17204] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4294'. [ 385.307827][ T3543] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 385.315370][ T3543] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 385.322986][ T3543] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 385.330443][ T3543] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 385.337898][ T3543] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 385.345323][ T3543] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 385.352722][ T3543] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 385.360181][ T3543] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 385.367602][ T3543] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 385.375125][ T3543] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 385.382517][ T3543] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 385.390078][ T3543] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 385.397681][ T3543] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 385.405121][ T3543] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 385.417790][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.428549][ T3543] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 385.512826][T17208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4295'. [ 385.532288][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.632052][T17215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4298'. [ 385.691624][T17224] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 385.727036][T17226] loop3: detected capacity change from 0 to 512 [ 385.734576][T17226] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 385.743675][T17226] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 385.754611][T17226] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 385.769931][T17226] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 385.779604][T17226] System zones: 0-2, 18-18, 34-35 [ 385.785556][T17226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.820479][T17233] netlink: 'syz.1.4304': attribute type 1 has an invalid length. [ 385.828401][T17233] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.4304'. [ 385.869905][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.889991][T17239] netlink: 'syz.4.4306': attribute type 1 has an invalid length. [ 385.904242][T17239] loop4: detected capacity change from 0 to 512 [ 385.920697][T17239] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 385.942468][T17241] bridge0: port 2(macsec1) entered blocking state [ 385.949019][T17241] bridge0: port 2(macsec1) entered disabled state [ 385.956073][T17241] macsec1: entered allmulticast mode [ 385.961411][T17241] bridge0: entered allmulticast mode [ 385.969036][T17241] macsec1: left allmulticast mode [ 385.974296][T17241] bridge0: left allmulticast mode [ 385.980398][T17239] EXT4-fs (loop4): 1 truncate cleaned up [ 385.996782][T17239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.030194][T17248] loop2: detected capacity change from 0 to 512 [ 386.071435][T17249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57373 sclass=netlink_route_socket pid=17249 comm=syz.4.4306 [ 386.086690][T17248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.155608][T17248] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 386.182521][T17248] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 386.195080][T17248] EXT4-fs (loop2): This should not happen!! Data will be lost [ 386.195080][T17248] [ 386.204899][T17248] EXT4-fs (loop2): Total free blocks count 0 [ 386.210963][T17248] EXT4-fs (loop2): Free/Dirty block details [ 386.217125][T17248] EXT4-fs (loop2): free_blocks=65280 [ 386.222457][T17248] EXT4-fs (loop2): dirty_blocks=33 [ 386.227584][T17248] EXT4-fs (loop2): Block reservation details [ 386.233564][T17248] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 386.247435][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.249457][T17248] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.278725][T17256] loop4: detected capacity change from 0 to 1024 [ 386.286291][T17256] EXT4-fs: Ignoring removed nobh option [ 386.291907][T17256] EXT4-fs: Ignoring removed bh option [ 386.317805][T17256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.343845][T17256] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.4309: Allocating blocks 385-513 which overlap fs metadata [ 386.359975][T17256] EXT4-fs (loop4): pa ffff888106d8b310: logic 16, phys. 129, len 24 [ 386.368106][T17256] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 386.421932][T17263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4311'. [ 386.451779][T17262] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 386.694287][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.723554][T17288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4317'. [ 386.733838][T17288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4317'. [ 386.859731][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 386.859762][ T29] audit: type=1400 audit(23337745.726:58727): avc: denied { create } for pid=17290 comm="syz.3.4319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 386.886031][ T29] audit: type=1400 audit(23337745.726:58728): avc: denied { setopt } for pid=17290 comm="syz.3.4319" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 386.906676][ T29] audit: type=1400 audit(23337745.726:58729): avc: denied { open } for pid=17290 comm="syz.3.4319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 386.926142][ T29] audit: type=1400 audit(23337745.726:58730): avc: denied { kernel } for pid=17290 comm="syz.3.4319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 386.945793][ T29] audit: type=1400 audit(23337745.766:58731): avc: denied { create } for pid=17293 comm="syz.3.4320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 387.025224][T17295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4318'. [ 387.036631][T17295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4318'. [ 387.120685][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.128190][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.135696][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.143091][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.150514][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.158034][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.165445][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.172925][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.180523][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.187937][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.195398][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.202791][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.210425][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.217906][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.225310][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.232735][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.240141][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.247568][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.255073][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.262524][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.269962][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.277532][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.284981][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.292395][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.299840][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.307241][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.314657][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.322082][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.329493][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.337003][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.344505][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.351924][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.359341][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.366763][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.374252][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.381660][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.389078][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.396502][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.403930][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.411378][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.418798][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.426376][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.433884][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 387.863539][ T29] audit: type=1400 audit(23337745.766:58732): avc: denied { read } for pid=17293 comm="syz.3.4320" dev="nsfs" ino=4026532817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 387.884854][ T29] audit: type=1400 audit(23337745.766:58733): avc: denied { open } for pid=17293 comm="syz.3.4320" path="net:[4026532817]" dev="nsfs" ino=4026532817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 387.908196][ T29] audit: type=1400 audit(23337745.926:58734): avc: denied { create } for pid=17285 comm="syz.0.4318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 387.927956][ T29] audit: type=1400 audit(23337745.926:58735): avc: denied { setopt } for pid=17285 comm="syz.0.4318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 387.947716][ T29] audit: type=1400 audit(23337746.016:58736): avc: denied { read write } for pid=17296 comm="syz.4.4321" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 388.082109][T17307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4323'. [ 388.167604][T17317] netlink: 'syz.3.4327': attribute type 4 has an invalid length. [ 388.177475][ T36] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 388.177762][T17317] netlink: 'syz.3.4327': attribute type 7 has an invalid length. [ 388.195101][T17317] netlink: 'syz.3.4327': attribute type 8 has an invalid length. [ 388.220285][T17319] bridge0: entered promiscuous mode [ 388.226467][T17319] bridge0: port 1(macsec0) entered blocking state [ 388.233025][T17319] bridge0: port 1(macsec0) entered disabled state [ 388.246885][T17317] loop3: detected capacity change from 0 to 512 [ 388.254156][T17319] macsec0: entered allmulticast mode [ 388.259564][T17319] bridge0: entered allmulticast mode [ 388.266560][T17317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.267098][T17319] macsec0: left allmulticast mode [ 388.284227][T17319] bridge0: left allmulticast mode [ 388.289984][T17317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.319712][T17319] bridge0: left promiscuous mode [ 388.342395][T17322] 0ªX¹¦À: renamed from 61ªX¹¦À [ 388.349688][T17322] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 388.382470][T17328] 0ªX¹¦À: renamed from 61ªX¹¦À [ 388.497937][T17328] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 388.553477][T17326] lo speed is unknown, defaulting to 1000 [ 388.951740][T17344] tipc: Can't bind to reserved service type 1 [ 389.344531][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.351999][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.359757][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.367343][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.374826][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.382356][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.389826][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.397370][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.404968][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.412411][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.419970][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.427530][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.435091][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.442563][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.450100][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.457594][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.465163][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.472658][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.480324][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.487825][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.495530][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.502993][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.510702][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.518389][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.526158][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.533578][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.541249][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.548947][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.556917][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.564602][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.572015][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.579831][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.587531][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.595184][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.602689][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.610359][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.618073][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.625762][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.633324][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.640951][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.648604][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.656264][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.663843][ T3543] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 389.687245][ T3543] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 389.722462][T17379] 0ªX¹¦À: renamed from 61ªX¹¦À [ 389.730838][T17379] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 389.799856][T17379] lo speed is unknown, defaulting to 1000 [ 390.113019][T17397] netlink: 'syz.4.4347': attribute type 13 has an invalid length. [ 390.399888][T17402] __nla_validate_parse: 16 callbacks suppressed [ 390.399905][T17402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4351'. [ 390.456338][T17408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4354'. [ 390.473511][T17408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4354'. [ 390.654121][T17422] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4359'. [ 390.663327][T17422] 0ªX¹¦À: renamed from 61ªX¹¦À [ 390.670693][T17422] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 390.735829][T17422] lo speed is unknown, defaulting to 1000 [ 390.824185][T17427] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4359'. [ 390.838352][ T3543] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 390.845873][ T3543] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 390.853280][ T3543] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 390.878067][ T3543] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 390.885553][ T3543] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 390.892957][ T3543] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 390.900439][ T3543] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 390.907861][ T3543] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 390.915323][ T3543] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 390.922762][ T3543] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 390.930253][ T3543] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 390.937665][ T3543] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 390.945175][ T3543] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 390.958789][ T3543] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 390.966465][ T3543] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 390.973900][ T3543] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 390.981448][ T3543] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 390.989046][ T3543] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 390.996675][ T3543] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 391.004252][ T3543] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 391.011695][ T3543] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 391.019170][ T3543] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 391.026640][ T3543] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 391.034168][ T3543] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 391.041709][ T3543] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 391.046174][T17432] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4361'. [ 391.049238][ T3543] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 391.065834][ T3543] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 391.116068][T17428] lo speed is unknown, defaulting to 1000 [ 391.170671][ T3543] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 391.293208][T17444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4364'. [ 391.330819][T17448] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 391.485991][T17452] wireguard3: entered promiscuous mode [ 391.659299][T17458] loop4: detected capacity change from 0 to 512 [ 391.667161][T17458] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 391.691157][T17458] EXT4-fs (loop4): 1 truncate cleaned up [ 391.698298][T17458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.739469][T17458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4367'. [ 391.752751][T17458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4367'. [ 391.846463][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 391.854102][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 391.861504][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 391.896765][T17473] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4371'. [ 391.904071][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 391.913405][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 391.920948][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 391.928026][ T29] kauditd_printk_skb: 366 callbacks suppressed [ 391.928061][ T29] audit: type=1400 audit(23337750.836:59103): avc: denied { write } for pid=17465 comm="syz.3.4370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 391.928475][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 391.961435][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 391.969049][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 391.976663][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 391.984287][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 391.991798][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 391.999328][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 392.075350][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 392.082838][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 392.090441][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 392.097990][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 392.105512][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 392.112925][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 392.120510][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 392.128059][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 392.135603][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 392.143098][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 392.150624][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 392.158157][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 392.165730][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 392.173132][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 392.224126][T17458] lo speed is unknown, defaulting to 1000 [ 392.234157][ T36] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 392.240519][ T29] audit: type=1400 audit(23337751.146:59104): avc: denied { connect } for pid=17477 comm="syz.2.4372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 392.295773][ T29] audit: type=1400 audit(23337751.176:59105): avc: denied { cpu } for pid=17477 comm="syz.2.4372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 392.503559][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.543247][ T3543] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 392.550777][ T3543] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 392.558283][ T3543] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 392.565973][ T3543] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 392.573462][ T3543] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 392.580941][ T3543] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 392.588576][ T3543] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 392.596082][ T3543] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 392.603508][ T3543] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 392.610962][ T3543] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 392.618468][ T3543] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 392.625911][ T3543] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 392.633329][ T3543] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 392.645619][ T3543] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 392.653092][ T3543] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 392.660705][ T3543] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 392.668301][ T3543] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 392.675922][ T3543] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 392.683346][ T3543] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 392.691154][ T3543] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 392.698684][ T3543] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 392.706175][ T3543] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 392.713599][ T3543] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 392.721084][ T3543] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 392.728562][ T3543] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 392.736030][ T3543] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 392.743456][ T3543] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 392.756272][ T29] audit: type=1400 audit(23337751.646:59106): avc: denied { create } for pid=17487 comm="syz.1.4375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 392.807403][ T29] audit: type=1326 audit(23337751.716:59107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17494 comm="syz.3.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e086fe969 code=0x7ffc0000 [ 392.809230][ T36] IPVS: starting estimator thread 0... [ 392.854264][ T29] audit: type=1326 audit(23337751.716:59108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17494 comm="syz.3.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e086fe969 code=0x7ffc0000 [ 392.877805][ T29] audit: type=1326 audit(23337751.716:59109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17494 comm="syz.3.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e086fe969 code=0x7ffc0000 [ 392.901412][ T29] audit: type=1326 audit(23337751.716:59110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17494 comm="syz.3.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f1e086fe969 code=0x7ffc0000 [ 392.924874][ T29] audit: type=1326 audit(23337751.716:59111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17494 comm="syz.3.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e086fe969 code=0x7ffc0000 [ 392.948405][ T29] audit: type=1326 audit(23337751.716:59112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17494 comm="syz.3.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1e086fe969 code=0x7ffc0000 [ 392.974556][ T3543] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 392.975628][T17496] IPVS: using max 1920 ests per chain, 96000 per kthread [ 393.481866][T17518] SELinux: failed to load policy [ 393.535617][ T3543] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 393.543113][ T3543] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 393.550846][ T3543] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 393.560227][ T3543] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 393.567855][ T3543] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 393.575340][ T3543] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 393.582755][ T3543] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 393.590288][ T3543] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 393.597811][ T3543] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 393.605293][ T3543] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 393.612749][ T3543] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 393.620416][ T3543] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 393.627834][ T3543] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 393.651651][ T3543] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 393.659280][ T3543] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 393.666791][ T3543] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 393.674316][ T3543] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 393.681880][ T3543] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 393.689359][ T3543] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 393.696806][ T3543] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 393.704250][ T3543] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 393.711647][ T3543] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 393.719270][ T3543] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 393.726725][ T3543] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 393.734156][ T3543] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 393.741634][ T3543] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 393.749080][ T3543] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 393.759793][ T3543] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 393.933798][T17536] 1ªX¹¦À: renamed from 60ªX¹¦À [ 393.941405][T17536] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 394.048966][T17540] loop3: detected capacity change from 0 to 512 [ 394.066666][T17540] ext4: Unknown parameter 'fsuuid' [ 394.229429][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 394.237077][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 394.244536][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 394.261997][T17547] 1ªX¹¦À: renamed from 60ªX¹¦À [ 394.264498][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 394.274524][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 394.281969][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 394.289546][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 394.297106][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 394.304809][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 394.312421][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 394.319961][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 394.327576][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 394.335247][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 394.394077][T17547] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 394.437446][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 394.444921][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 394.452501][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 394.459977][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 394.467411][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 394.474841][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 394.482367][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 394.489798][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 394.497237][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 394.504664][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 394.512066][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 394.519502][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 394.526930][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 394.534392][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 394.613223][ T36] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 394.683081][T17559] geneve0: entered allmulticast mode [ 394.690433][T17549] lo speed is unknown, defaulting to 1000 [ 394.952356][T17572] 0ªX¹¦À: renamed from 61ªX¹¦À [ 394.987002][T17572] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 395.215633][T17587] netlink: 'syz.1.4406': attribute type 29 has an invalid length. [ 395.321084][T17595] loop3: detected capacity change from 0 to 2048 [ 395.337944][T17595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.438634][T17602] ================================================================== [ 395.446789][T17602] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 395.454033][T17602] [ 395.456378][T17602] write to 0xffff88810b2e3c54 of 4 bytes by task 17595 on cpu 1: [ 395.464130][T17602] __xa_set_mark+0x172/0x1a0 [ 395.468768][T17602] __folio_mark_dirty+0x3af/0x4c0 [ 395.473830][T17602] mark_buffer_dirty+0x11e/0x210 [ 395.478804][T17602] block_write_end+0x12e/0x210 [ 395.483603][T17602] ext4_write_end+0x13a/0x730 [ 395.488397][T17602] ext4_da_write_end+0x71/0x7b0 [ 395.493274][T17602] generic_perform_write+0x30f/0x490 [ 395.498602][T17602] ext4_buffered_write_iter+0x1ee/0x3c0 [ 395.504193][T17602] ext4_file_write_iter+0x383/0xf00 [ 395.509433][T17602] iter_file_splice_write+0x5ef/0x970 [ 395.514837][T17602] direct_splice_actor+0x156/0x2a0 [ 395.519986][T17602] splice_direct_to_actor+0x312/0x680 [ 395.525393][T17602] do_splice_direct+0xda/0x150 [ 395.530187][T17602] do_sendfile+0x380/0x640 [ 395.534622][T17602] __x64_sys_sendfile64+0x105/0x150 [ 395.539983][T17602] x64_sys_call+0xb39/0x2fb0 [ 395.544604][T17602] do_syscall_64+0xd0/0x1a0 [ 395.549136][T17602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.555066][T17602] [ 395.557414][T17602] read to 0xffff88810b2e3c54 of 4 bytes by task 17602 on cpu 0: [ 395.565067][T17602] xas_find_marked+0x5dc/0x620 [ 395.569871][T17602] find_get_entry+0x5d/0x380 [ 395.574513][T17602] filemap_get_folios_tag+0x92/0x210 [ 395.579841][T17602] filemap_fdatawait_range+0x88/0x1d0 [ 395.585242][T17602] __writeback_single_inode+0xdb/0x7c0 [ 395.590735][T17602] writeback_single_inode+0x167/0x3e0 [ 395.596139][T17602] sync_inode_metadata+0x5b/0x90 [ 395.601111][T17602] generic_buffers_fsync_noflush+0xd9/0x120 [ 395.607039][T17602] ext4_sync_file+0x1ab/0x690 [ 395.611764][T17602] vfs_fsync_range+0x10d/0x130 [ 395.616565][T17602] ext4_buffered_write_iter+0x34f/0x3c0 [ 395.622155][T17602] ext4_file_write_iter+0x383/0xf00 [ 395.627396][T17602] iter_file_splice_write+0x5ef/0x970 [ 395.632807][T17602] direct_splice_actor+0x156/0x2a0 [ 395.637950][T17602] splice_direct_to_actor+0x312/0x680 [ 395.643354][T17602] do_splice_direct+0xda/0x150 [ 395.648145][T17602] do_sendfile+0x380/0x640 [ 395.652586][T17602] __x64_sys_sendfile64+0x105/0x150 [ 395.657833][T17602] x64_sys_call+0xb39/0x2fb0 [ 395.662454][T17602] do_syscall_64+0xd0/0x1a0 [ 395.666984][T17602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.672915][T17602] [ 395.675258][T17602] value changed: 0x00000021 -> 0x0a000021 [ 395.680997][T17602] [ 395.683336][T17602] Reported by Kernel Concurrency Sanitizer on: [ 395.689528][T17602] CPU: 0 UID: 0 PID: 17602 Comm: syz.3.4408 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(voluntary) [ 395.702070][T17602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 395.712158][T17602] ================================================================== [ 396.169021][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.