last executing test programs: 4.472636317s ago: executing program 3 (id=1979): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket(0x28, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) unshare(0x22020400) epoll_pwait(r4, &(0x7f0000000000)=[{}], 0x1, 0x2, &(0x7f0000000040)={[0x4a56]}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESDEC=r1], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r7}, &(0x7f0000000540), 0x0}, 0x20) getpeername$l2tp(r2, &(0x7f00000004c0), &(0x7f0000000580)=0x10) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[], 0x0) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0b002abd7000fcdbdf250100000008000100", @ANYRES32=r10, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400f9fffbff"], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 3.426857724s ago: executing program 3 (id=1989): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050800) unshare(0x22020400) epoll_pwait(r4, &(0x7f0000000000)=[{}], 0x1, 0x2, &(0x7f0000000040)={[0x4a56]}, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r2, @ANYRESDEC=r1], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r8}, &(0x7f0000000540), 0x0}, 0x20) getpeername$l2tp(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000580)=0x10) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[], 0x0) r10 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0b002abd7000fcdbdf250100000008000100", @ANYRES32=r11, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400f9fffbff"], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 3.332437496s ago: executing program 0 (id=1990): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x1000, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r1, 0x0, 0xffffffffffff7fff}, 0x18) syz_open_procfs(0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040041}, 0x44000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r6, 0x2285, 0x0) writev(r6, &(0x7f0000000400)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb0100", 0x25}, {&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$eJzs282PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rClJYO9PdLLpxz77lzztN7T3vOPW0AI2sq+yeJ2BoRf0bERD3bXGCq/t/Vy2cXrl0+u5BEtfruP0mt3JXLZxeKosV5W/LMdBqRfpHE7jb1rpw+c3y+Ulk6lednV098NLty+swLx07MH106unRy/6FDBw/MvfzS/hf7EmfWpiu7Pl3es/OtD755+/BXTfG3xNEnU90OPl2t9rm64drWkE7GhtgQ1qUUEdnlKtf6/0SUYu3iTcSbnw+1ccBAVavV6pbOh89VgXtYEs15XR5GRfFBn81/i611EPDq4IYfQ3fptfoEKIv7ar7Vj4xFmpcpt8xv+2kqIt4/9+932RaDeQ4BANDkp2z883y78V8aDzWUuy9fG5qMiPsjYntEPBAROyLiwYha2Ycj4pF11t+6SHLj+Ce92FNgtygb/72Sr201j/+K0V9MlvLctlr85eTIscrSvvw1mY7ypiw/16WOn9/44+tOxxrHf9mW1V+MBfN2XBzb1HzO4vzq/O3E3OjS+YhdY+3iT66vBCQRsTMidvVYx7Fnf9jT6djN4++iD+tM1e8jnqlf/3PREn8h6b4+Ofu/qCztmy3uihv99vuFdzrVf1vx90F2/f/f9v6/Hv9k0rheu7L+Oi789WXHOU2v9/948l4tPZ7v+2R+dfXUXMR4crje6Mb9+9fOLfJF+Sz+6b3t+//2WHsldkdEdhM/GhGPRcTjedufiIgnI2Jvl/h/ff2pD3uPf7Cy+BfXdf3XEuPRuqd9onT8lx+bKp28If5r3a//wVpqOt9zK+9/t9Ku3u5mAAAAuPukEbE1knTmejpNZ2bq35ffEZFWlldWnzuy/PHJxfpvBCYj0uJJ10TD89C5fFpfz5+PiPpXC4rjB/Lnxt+WNtfyMwvLlcVhBw8jbkuH/p/5uzTs1gED5/daMLr0fxhd+j+MLv0fRleb/r95GO0A7rx2n/+fDaEdwJ3X0v8t+8EIMf+H0aX/w+jS/2EkrWyOm/9Ivmui+Es9nn7PJqK8IZoxsESkG6IZGzZRvsv7xfDekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrpvwAAAP//9gndaw==") perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14028, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800002, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r7, 0x2007ffc) sendfile(r7, r7, 0x0, 0x800000009) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) tkill(r4, 0x41) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)=ANY=[@ANYRES16=r4], &(0x7f0000000180), 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.041648s ago: executing program 0 (id=1992): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e", 0x19}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e22, 0x0, @mcast2}}, 0x5c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0xac, 0x8, 0xff, 0xfff}, {0x2, 0x8, 0x40, 0x7ff}, {0x2, 0x1, 0x2, 0x4}]}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000000000014000780080011400000000005001500030000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r5, 0x0, 0x5001) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x5, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x9}, 0x5c) close(r3) 2.863020773s ago: executing program 0 (id=1993): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x15) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x26000400) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sg(0x0, 0x0, 0x0) capset(0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20) ioctl$SG_IO(r2, 0x2285, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x3, 0x7, 0x40, 0x80, 0x3, 0x1, 0xf, 0x10, 0x32, 0x7f, 0x4, 0x5, 0x56, 0x2}, 0xe) syz_usbip_server_init(0x2) sendmsg$kcm(r8, 0x0, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r7, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4093, 0xffd}], 0x1) 2.495013129s ago: executing program 4 (id=1994): socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x1) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x1, @rand_addr=0x64010101}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cd", 0xff8a, 0x880, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0xc7}, 0x7800, 0x0, 0x0, 0x1}}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000200, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket(0x2, 0x80805, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r4, 0x0, 0x25, 0x8, @val=@perf_event={0xc0d5}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB], 0x54}}, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000000140)={0x0, 0x10001, 0x1}) close_range(0xffffffffffffffff, r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xffffffffffffff37, &(0x7f00000000c0)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x48080}, 0x0) syz_open_dev$sg(&(0x7f0000000500), 0x0, 0x22c00) setreuid(0x0, 0xee00) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000001540)={0x0, 0x3}, 0x8) 2.243490213s ago: executing program 3 (id=1998): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x800) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x1, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000085000000560000009500000000000000"], &(0x7f0000002f40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) futex(0x0, 0x109, 0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$key(0xf, 0x3, 0x2) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) io_setup(0x9, &(0x7f0000000080)) close(r6) 2.242809673s ago: executing program 4 (id=1999): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = fsopen(&(0x7f0000000600)='bdev\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf4f3}, 0x94) process_vm_writev(0x0, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x4b66, &(0x7f0000000040)) close(r1) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="2b91696473140180ce85656c8f2000000000000000000400"], 0x18) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd, 0x30}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x0, 0x7b}}}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r4}, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYRESHEX=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x1}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) 2.113694936s ago: executing program 3 (id=2000): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket(0x28, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) unshare(0x22020400) epoll_pwait(r4, &(0x7f0000000000)=[{}], 0x1, 0x2, &(0x7f0000000040)={[0x4a56]}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESDEC=r1], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r7}, &(0x7f0000000540), 0x0}, 0x20) getpeername$l2tp(r2, &(0x7f00000004c0), &(0x7f0000000580)=0x10) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[], 0x0) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0b002abd7000fcdbdf250100000008000100", @ANYRES32=r10, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400f9fffbff"], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 1.966139728s ago: executing program 4 (id=2002): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000001400078008001140000000000500150003000000050005000a"], 0x60}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c00090008"], 0x30}, 0x1, 0x0, 0x0, 0x20008894}, 0x4000054) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'vxcan1\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0xfff1, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xc, 0xc89f, 0xffff5ef5, 0x0, 0x19, 0x3}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)={0x94, r4, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe77d49c6769b4e71}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x801}, 0x20000881) lsm_get_self_attr(0x67, 0x0, &(0x7f0000000080), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r9, 0x4b72, &(0x7f0000000040)={0x4, 0x8000000, 0x100000, 0x1d, 0x100, &(0x7f0000001340)="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"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x8007, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x5}, {}, {0xffe0, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x1}, @TCA_U32_DIVISOR={0x8, 0x4, 0x6e}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) 1.921121118s ago: executing program 1 (id=2004): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="74000000000901010000000000000000050000070900010073797a30000000004c0002000c00028005000100060000002c0001"], 0x74}, 0x1, 0x0, 0x0, 0x200000c1}, 0x40000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) ioctl$TIOCGSID(r3, 0x5429, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000140)}], 0x2, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0x6, 0xc7, 0x6, 0x0, 0x0, 0x30, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000040), 0x8}, 0x11e252, 0xf, 0x6, 0x0, 0xac, 0x3, 0x0, 0x0, 0xcb7, 0x0, 0xe}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0xad02, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20003, 0x2b, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, r4, 0xa) open(&(0x7f0000000000)='./file0\x00', 0x149442, 0x0) open(0x0, 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) connect$pppl2tp(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) 1.84235335s ago: executing program 4 (id=2005): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket(0x28, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050800) unshare(0x22020400) epoll_pwait(r4, &(0x7f0000000000)=[{}], 0x1, 0x2, &(0x7f0000000040)={[0x4a56]}, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESDEC=r1], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r8}, &(0x7f0000000540), 0x0}, 0x20) getpeername$l2tp(r2, &(0x7f00000004c0), &(0x7f0000000580)=0x10) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[], 0x0) r10 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0b002abd7000fcdbdf250100000008000100", @ANYRES32=r11, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400f9fffbff"], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 1.84081827s ago: executing program 1 (id=2006): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000100)=0xffff37e7, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000480)=ANY=[@ANYRES8=r0, @ANYRES32=r1, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x67, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x18) io_setup(0x8, &(0x7f0000004200)) open(0x0, 0x0, 0x80) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) open(0x0, 0x44842, 0x0) io_pgetevents(0x0, 0x6, 0x1, &(0x7f0000000340)=[{}], &(0x7f0000000380), &(0x7f0000000600)={&(0x7f00000005c0)={[0x9]}, 0x8}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x5607, 0x2c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETVESABLANK(r5, 0x560e, &(0x7f0000000140)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000000)) 1.468526656s ago: executing program 0 (id=2007): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x17) faccessat2(0xffffffffffffffff, 0x0, 0x1, 0x1100) io_submit(0x0, 0x1, &(0x7f00000001c0)=[0x0]) mq_open(&(0x7f0000000380)='bridge0\x00\xfb\xbd\x8c\x03\xeagHH\x90\x9c\xf1QF\xc6\xbd;,z\x96\x1b\xc7p\xe9jUy/iM\xf2\x0f\xe6\xa5\xc4\x15\xde\xd1\xb4\xea\x80\x82\xcd\xa5_\xff7q,\f\x9d\x7f\x03\xff\xf4\x9f\xe8\xd9*\xc2\xe22L\x02\x88\xaa\xfc7\xdf\xb0(\x8e\xa3\x1b\xd9\xf9>\x95u\xcd\x8c\xfe\xa7D\xc6\t;\x98\xb4\x03\xab\x91\f\xa4X\xfb\xcd\x88\x9e\x18\x81\xa4\xd0\x04$I\xf9\bc{\xf9\xe5\xc1\x11\xba]\x83\a\xe1\xe5\xad\xcc[\xc5\xa8\x0f\xb2,\xa7\x8d\x99E\xd8\xb8\xf5\xa29\xb5>\xafS\x1a\x00\x8b\'=q2\xf3\xa3\xef\xde\xe6$\x00&\xd7\x9d\xb5K\x14q\xc3t\f\xa662\x06\xde\xd7do\xd2\x9f~\x901h\v\x1b\x02\xab\xb9', 0x843, 0x1e1, &(0x7f0000000240)={0x260dee6a, 0x9, 0x401, 0x3}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000240)={0x400, 0x8, 0x6, 0x3}, 0x8) sendto$inet(r1, &(0x7f0000000100)="ab", 0xffe0, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000003e000701fcfffffffedbdf25017c00000c0003"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xe0ffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) 1.434251077s ago: executing program 0 (id=2008): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050800) unshare(0x22020400) epoll_pwait(r4, &(0x7f0000000000)=[{}], 0x1, 0x2, &(0x7f0000000040)={[0x4a56]}, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r2, @ANYRESDEC=r1], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r8}, &(0x7f0000000540), 0x0}, 0x20) getpeername$l2tp(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000580)=0x10) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[], 0x0) r10 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0b002abd7000fcdbdf250100000008000100", @ANYRES32=r11, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400f9fffbff"], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 1.175164391s ago: executing program 2 (id=2011): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = timerfd_create(0x8, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000080), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000004000000450000008814"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) creat(&(0x7f0000000280)='./cgroup/../file0\x00', 0x4c) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr/prev\x00') pread64(r5, 0x0, 0x0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x5cc53b1445f70631, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @value=r5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x18) sync() write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$BTRFS_IOC_SCRUB(r7, 0x4004480d, &(0x7f0000000900)={0x0, 0xffffffffffffff45, 0x100}) 663.565259ms ago: executing program 0 (id=2012): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91010000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x8000, 0x103) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r8, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b01000000000040", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) syz_pidfd_open(r0, 0x0) 662.927239ms ago: executing program 1 (id=2013): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_clone3(&(0x7f00000002c0)={0x8000080, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x58) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0x58) r0 = socket(0x23, 0x5, 0x2) getsockname$packet(r0, 0x0, &(0x7f0000000500)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) writev(r1, &(0x7f00000001c0), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa20000", @ANYRESOCT, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0) syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, &(0x7f0000000080)={{0x9, 0x4}, {0x9, 0xa}, 0xffffff01, 0x1}) 656.894519ms ago: executing program 2 (id=2014): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x826e, 0x40, 0x3, 0xf0}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000640)=[{0x0}], 0x1) syz_clone3(0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r2], 0x1) futex(&(0x7f000000cffc), 0x3, 0x2, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000500)={0x2, 0xfc, 0x8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r3}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010004b04000000000000ff007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b000100627269646765000028000280060006000004000005000700070000"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) capget(&(0x7f0000001dc0)={0x19980330, 0xffffffffffffffff}, &(0x7f0000001e00)={0x6, 0x8, 0x1, 0x5, 0x6, 0x6}) syz_mount_image$ext4(&(0x7f0000000200)='ext2\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000180), 0x12) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, r6, 0x18}) r7 = socket$inet6(0xa, 0x3, 0xff) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, 0x0, 0x0) sendto$inet6(r8, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) connect$inet6(r7, &(0x7f0000000400)={0xa, 0x0, 0x0, @empty}, 0x1c) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$tipc(0x1e, 0x5, 0x0) 656.105079ms ago: executing program 3 (id=2015): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000001400078008001140000000000500150003000000050005000a"], 0x60}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c00090008"], 0x30}, 0x1, 0x0, 0x0, 0x20008894}, 0x4000054) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'vxcan1\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0xfff1, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xc, 0xc89f, 0xffff5ef5, 0x0, 0x19, 0x3}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)={0x94, r4, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe77d49c6769b4e71}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x801}, 0x20000881) lsm_get_self_attr(0x67, 0x0, &(0x7f0000000080), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r9, 0x4b72, &(0x7f0000000040)={0x4, 0x8000000, 0x100000, 0x1d, 0x100, &(0x7f0000001340)="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"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x8007, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x5}, {}, {0xffe0, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x1}, @TCA_U32_DIVISOR={0x8, 0x4, 0x6e}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) 655.589069ms ago: executing program 4 (id=2016): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10220, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340), 0x3}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @local}, 0x20) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000001480)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) clock_adjtime(0x0, &(0x7f0000000040)={0xd4d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xe438, 0x0, 0x3}) 598.23023ms ago: executing program 1 (id=2017): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x88}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071004c000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0x4, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00'}, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r7 = memfd_create(&(0x7f0000000300)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\tI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x90\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9\xd8A\xa6\x11\x00\xb2e\xbe-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#@\xadm\xe7\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0b002abd7000fcdbdf250100000008000100", @ANYRES32=r11, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400f9fffbff"], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 492.200042ms ago: executing program 3 (id=2020): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = semget$private(0x0, 0x4000000009, 0x0) semop(r0, &(0x7f0000000140)=[{0x0, 0xffff}], 0x1) semctl$GETNCNT(r0, 0x0, 0xe, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a01de00000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000000c0a09030000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002140000001100", @ANYRESDEC], 0xc0}, 0x1, 0x0, 0x0, 0x40895}, 0x20008800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_destroy(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000f8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r5}, 0x10) io_setup(0x8, &(0x7f0000000600)=0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f00000002c0)) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r6, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r7, &(0x7f00000000c0)="01", 0x400000}]) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000980)={0x1, 0x80000000}, 0x8) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) 312.457065ms ago: executing program 2 (id=2021): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r7 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f0000000280)=r5}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0x4800, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r10, 0x47f8, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0002000080e7000008000a00", @ANYRES32=r3, @ANYBLOB="140012800b00010067656e6576650000040002"], 0x3c}}, 0x0) mbind(&(0x7f0000978000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000000000000, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000009519aced0752eb1e1cc9df555022c245fdc746c63d3e2abe67791e752cc3c68c276bc0946070734a77618f2757ed223938ad3b1528903efc2a85fd7d52d33a8cf1d0f4c594168f6af41da5aa580296b50453be31f4177e36e1ba7707b0d34f2c01a6a555f06653eb59db03f1dda105e4260ca4f9195b6c194a412d34ae"], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 311.087725ms ago: executing program 1 (id=2031): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b700000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e", 0x19}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e22, 0x0, @mcast2}}, 0x5c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0xac, 0x8, 0xff, 0xfff}, {0x2, 0x8, 0x40, 0x7ff}, {0x2, 0x1, 0x2, 0x4}]}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000000000014000780080011400000000005001500030000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r5, 0x0, 0x5001) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x5, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x9}, 0x5c) close(r3) 130.153488ms ago: executing program 1 (id=2022): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050800) unshare(0x22020400) epoll_pwait(r4, &(0x7f0000000000)=[{}], 0x1, 0x2, &(0x7f0000000040)={[0x4a56]}, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r2, @ANYRESDEC=r1], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r8}, &(0x7f0000000540), 0x0}, 0x20) getpeername$l2tp(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000580)=0x10) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[], 0x0) r10 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0b002abd7000fcdbdf250100000008000100", @ANYRES32=r11, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400f9fffbff"], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 71.493629ms ago: executing program 2 (id=2023): pipe(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) symlink(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000010000100"/20, @ANYRES32=r3, @ANYBLOB="c89904bd0000000008000d000000000034001680300001802c000c8014"], 0x5c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRES16], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000540), &(0x7f0000000300)}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x96) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=r4, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x2, 0x1000000000000005, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0xd, &(0x7f00000001c0), 0x4) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) write$sndseq(r8, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) 0s ago: executing program 2 (id=2024): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000018c0)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) ppoll(&(0x7f0000000140)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x3) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000180)={0x38000, 0x8, 0x0, 0x2, 0x5, "aa32b73986bbee6bd231334cbfa0b758261a93"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000180)={0x65f5, 0x1, 0xff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) r6 = syz_open_dev$vcsn(&(0x7f0000001700), 0x5, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000280)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, @map_val={0x18, 0xa, 0x2, 0x0, r1}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], &(0x7f00000014c0)='GPL\x00', 0x839, 0xfd, &(0x7f0000001600)=""/253, 0x40f00, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001540)={0x2, 0x3, 0xfffffff6, 0xa3}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001740)=[r6, r0, r0, r1, r1, r1, r0], &(0x7f0000001780)=[{0x3, 0x3, 0x4, 0x6}, {0x4, 0x4, 0xd, 0x9}, {0x0, 0x2, 0x4, 0x4}, {0x2, 0x1, 0x6, 0x2}, {0x1, 0x4, 0x4, 0x1}, {0x2, 0x2, 0x2, 0x8}], 0x10, 0x5}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@nouid32}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r8}, 0x10) sendfile(r0, r0, 0x0, 0x800000009) kernel console output (not intermixed with test programs): 000041.249:26600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9271 comm="syz.4.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ed2de929 code=0x7ffc0000 [ 190.767805][ T29] audit: type=1326 audit(2000000041.249:26601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9271 comm="syz.4.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f89ed2de929 code=0x7ffc0000 [ 190.791276][ T29] audit: type=1326 audit(2000000041.249:26602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9271 comm="syz.4.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ed2de929 code=0x7ffc0000 [ 190.980570][ T9286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.990686][ T9286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.197705][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 191.217642][ T9290] loop2: detected capacity change from 0 to 128 [ 191.246095][ T9290] loop2: detected capacity change from 0 to 512 [ 191.252665][ T9290] EXT4-fs: Invalid want_extra_isize 93 [ 191.476942][ T9298] xt_CT: You must specify a L4 protocol and not use inversions on it [ 191.725246][ T9302] netlink: 'syz.0.1445': attribute type 27 has an invalid length. [ 191.866722][ T9311] netlink: 'syz.0.1448': attribute type 10 has an invalid length. [ 191.879668][ T9311] __nla_validate_parse: 12 callbacks suppressed [ 191.879723][ T9311] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1448'. [ 191.903539][ T9311] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1448'. [ 192.024243][ T9316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.034235][ T9316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.513529][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1455'. [ 192.747439][ T9338] random: crng reseeded on system resumption [ 192.919314][ T9344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1458'. [ 193.297187][ T9364] loop3: detected capacity change from 0 to 2048 [ 193.325392][ T9364] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.345048][ T9364] netlink: 'syz.3.1462': attribute type 27 has an invalid length. [ 193.375002][ T9364] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.467130][ T9364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1462'. [ 193.476059][ T9364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1462'. [ 193.560330][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.578751][ T9378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1467'. [ 193.621517][ T9378] loop2: detected capacity change from 0 to 512 [ 193.647076][ T9378] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 193.683885][ T9378] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:169: inode #17: comm syz.2.1467: inline data xattr refers to an external xattr inode [ 193.703374][ T9385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.705543][ T9378] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.1467: couldn't read orphan inode 17 (err -117) [ 193.723768][ T9385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.734577][ T9378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.885528][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.918310][ T9393] loop2: detected capacity change from 0 to 512 [ 193.934477][ T9393] journal_path: Lookup failure for './file0/../file0/../file0/../file0' [ 193.943880][ T9393] EXT4-fs: error: could not find journal device path [ 194.844112][ T9404] lo speed is unknown, defaulting to 1000 [ 194.850726][ T9404] lo speed is unknown, defaulting to 1000 [ 194.857125][ T9404] lo speed is unknown, defaulting to 1000 [ 195.045213][ T9403] loop0: detected capacity change from 0 to 512 [ 195.052047][ T9403] EXT4-fs: Ignoring removed mblk_io_submit option [ 195.058603][ T9403] EXT4-fs: Ignoring removed bh option [ 195.065944][ T9403] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 195.105065][ T9403] EXT4-fs (loop0): 1 truncate cleaned up [ 195.111215][ T9403] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.406839][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.438922][ T9412] netlink: 'syz.2.1476': attribute type 13 has an invalid length. [ 195.503567][ T9418] loop0: detected capacity change from 0 to 512 [ 195.511061][ T9418] journal_path: Lookup failure for './file0/../file0' [ 195.517941][ T9418] EXT4-fs: error: could not find journal device path [ 195.544786][ T9420] loop2: detected capacity change from 0 to 512 [ 195.592292][ T9420] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 195.594230][ T29] kauditd_printk_skb: 999 callbacks suppressed [ 195.594244][ T29] audit: type=1326 audit(2000000558.180:27602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9408 comm="syz.4.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ed2de929 code=0x7ffc0000 [ 195.633233][ T29] audit: type=1326 audit(2000000558.220:27603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9408 comm="syz.4.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89ed2de929 code=0x7ffc0000 [ 195.656784][ T29] audit: type=1326 audit(2000000558.220:27604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9408 comm="syz.4.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ed2de929 code=0x7ffc0000 [ 195.682028][ T29] audit: type=1326 audit(2000000558.220:27605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9408 comm="syz.4.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89ed2de929 code=0x7ffc0000 [ 195.695533][ T9420] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 195.706279][ T29] audit: type=1326 audit(2000000558.220:27606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9408 comm="syz.4.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ed2de929 code=0x7ffc0000 [ 195.714143][ T9420] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 195.738170][ T29] audit: type=1326 audit(2000000558.220:27607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9408 comm="syz.4.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89ed2de929 code=0x7ffc0000 [ 195.747283][ T9420] System zones: 0-1, 15-15, 18-18, 34-34 [ 195.770375][ T29] audit: type=1326 audit(2000000558.230:27608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa5c04e58e7 code=0x7ffc0000 [ 195.776266][ T9420] EXT4-fs (loop2): orphan cleanup on readonly fs [ 195.800288][ T29] audit: type=1326 audit(2000000558.230:27609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa5c048ab19 code=0x7ffc0000 [ 195.806500][ T9420] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 195.806530][ T9420] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 195.830508][ T29] audit: type=1326 audit(2000000558.230:27610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fa5c04ee929 code=0x7ffc0000 [ 195.839745][ T9420] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 195.857264][ T9427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1474'. [ 195.907033][ T9420] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1476: bg 0: block 40: padding at end of block bitmap is not set [ 195.922881][ T9420] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 195.932677][ T9420] EXT4-fs (loop2): 1 truncate cleaned up [ 195.939060][ T9420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 195.976266][ T9420] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1476'. [ 195.995510][ T9420] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 196.003528][ T9420] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 196.063504][ T9433] loop4: detected capacity change from 0 to 2048 [ 196.190831][ T9433] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.215770][ T9433] netlink: 'syz.4.1481': attribute type 27 has an invalid length. [ 196.234572][ T9433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.249990][ T9443] loop0: detected capacity change from 0 to 512 [ 196.272131][ T9438] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 196.304958][ T9443] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 196.335076][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.416137][ T9450] loop1: detected capacity change from 0 to 512 [ 196.422787][ T9450] EXT4-fs: Ignoring removed mblk_io_submit option [ 196.429241][ T9450] EXT4-fs: Ignoring removed bh option [ 196.437178][ T9450] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 196.464478][ T9440] loop3: detected capacity change from 0 to 2048 [ 196.475667][ T9440] EXT4-fs: Ignoring removed mblk_io_submit option [ 196.486781][ T9433] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 196.507144][ T9443] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.1483: bad orphan inode 15 [ 196.528673][ T9440] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.547515][ T9450] EXT4-fs (loop1): 1 truncate cleaned up [ 196.553939][ T9450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.592869][ T9443] ext4_test_bit(bit=14, block=18) = 1 [ 196.598286][ T9443] is_bad_inode(inode)=0 [ 196.603042][ T9443] NEXT_ORPHAN(inode)=1023 [ 196.607353][ T9443] max_ino=32 [ 196.610614][ T9443] i_nlink=0 [ 196.645698][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.650283][ T3395] lo speed is unknown, defaulting to 1000 [ 196.660436][ T3395] swz0: Port: 1 Link ACTIVE [ 196.683027][ T9444] lo speed is unknown, defaulting to 1000 [ 196.689122][ T9444] lo speed is unknown, defaulting to 1000 [ 196.695277][ T9443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 196.707771][ T9444] lo speed is unknown, defaulting to 1000 [ 196.763248][ T9443] ext2 filesystem being mounted at /296/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 196.952802][ T9458] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1482: bg 0: block 234: padding at end of block bitmap is not set [ 196.976601][ T9458] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 196.979843][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.989634][ T9458] EXT4-fs (loop3): This should not happen!! Data will be lost [ 196.989634][ T9458] [ 197.018382][ T9464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1485'. [ 197.035166][ T9464] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.043447][ T9464] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.051634][ T9464] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.055398][ T9466] IPv6: Can't replace route, no match found [ 197.060519][ T9464] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.074193][ T9447] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 449: padding at end of block bitmap is not set [ 197.077584][ T5281] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 2048 with error 28 [ 197.102212][ T5281] EXT4-fs (loop3): This should not happen!! Data will be lost [ 197.102212][ T5281] [ 197.108721][ T9466] loop1: detected capacity change from 0 to 1024 [ 197.111863][ T5281] EXT4-fs (loop3): Total free blocks count 0 [ 197.111904][ T5281] EXT4-fs (loop3): Free/Dirty block details [ 197.111914][ T5281] EXT4-fs (loop3): free_blocks=0 [ 197.111951][ T5281] EXT4-fs (loop3): dirty_blocks=4096 [ 197.111964][ T5281] EXT4-fs (loop3): Block reservation details [ 197.135998][ T9464] vxlan0: entered promiscuous mode [ 197.189698][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 197.208260][ T9466] EXT4-fs: Ignoring removed bh option [ 197.210994][ T9471] openvswitch: netlink: Message has 6 unknown bytes. [ 197.213884][ T9466] EXT4-fs: inline encryption not supported [ 197.240469][ T9474] loop3: detected capacity change from 0 to 512 [ 197.248533][ T9474] journal_path: Lookup failure for './file0/../file0/../file0/../file0' [ 197.257579][ T9474] EXT4-fs: error: could not find journal device path [ 197.259644][ T9471] syzkaller0: entered promiscuous mode [ 197.265209][ T9466] ext4: Unknown parameter 'smackfsroot' [ 197.270481][ T9471] syzkaller0: entered allmulticast mode [ 197.293579][ T9475] loop0: detected capacity change from 0 to 512 [ 197.317402][ T9466] rdma_op ffff88818c248d80 conn xmit_rdma 0000000000000000 [ 197.336909][ T9466] loop1: detected capacity change from 0 to 2048 [ 197.347128][ T9475] EXT4-fs (loop0): too many log groups per flexible block group [ 197.355524][ T9475] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 197.363939][ T9475] EXT4-fs (loop0): mount failed [ 197.370787][ T9466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.409650][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.466543][ T9488] IPv6: Can't replace route, no match found [ 197.475985][ T9486] xt_policy: too many policy elements [ 197.479018][ T9484] loop0: detected capacity change from 0 to 764 [ 197.489161][ T9484] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 197.491405][ T9488] loop2: detected capacity change from 0 to 1024 [ 197.505942][ T9488] EXT4-fs: Ignoring removed bh option [ 197.511590][ T9488] EXT4-fs: inline encryption not supported [ 197.518202][ T9488] ext4: Unknown parameter 'smackfsroot' [ 197.532507][ T9488] rdma_op ffff8881c0f65980 conn xmit_rdma 0000000000000000 [ 197.569628][ T9488] loop2: detected capacity change from 0 to 2048 [ 197.715166][ T9488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.883028][ T9499] loop1: detected capacity change from 0 to 512 [ 197.941700][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.961446][ T9499] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 197.988149][ T9501] loop4: detected capacity change from 0 to 8192 [ 198.027212][ T9499] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 198.043777][ T9499] System zones: 0-2, 18-18, 34-34 [ 198.051693][ T9499] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.064431][ T9499] ext4 filesystem being mounted at /315/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.086152][ T9499] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.208957][ T9507] vlan2: entered allmulticast mode [ 198.214214][ T9507] bridge_slave_0: entered allmulticast mode [ 198.349184][ T9520] loop1: detected capacity change from 0 to 512 [ 198.371400][ T9520] EXT4-fs (loop1): Invalid default hash set in the superblock [ 198.895453][ T9529] loop3: detected capacity change from 0 to 128 [ 198.944879][ T9529] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 198.978542][ T9529] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.088608][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.098314][ T9539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1507'. [ 199.151792][ T9542] rdma_op ffff88818c249d80 conn xmit_rdma 0000000000000000 [ 199.163357][ T9539] loop2: detected capacity change from 0 to 512 [ 199.166477][ T9534] loop4: detected capacity change from 0 to 8192 [ 199.178989][ T9544] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 199.199857][ T9539] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 199.222883][ T9534] loop4: p2 p3 p4 [ 199.226775][ T9534] loop4: p2 start 452985600 is beyond EOD, truncated [ 199.233511][ T9534] loop4: p3 size 33554432 extends beyond EOD, truncated [ 199.250276][ T9539] EXT4-fs (loop2): 1 truncate cleaned up [ 199.258908][ T9534] loop4: p4 start 8388607 is beyond EOD, truncated [ 199.261969][ T9539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.769598][ T9556] loop3: detected capacity change from 0 to 128 [ 199.898995][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.144462][ T9563] veth1_to_bond: entered allmulticast mode [ 200.161090][ T9563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1514'. [ 200.185438][ T9563] veth1_to_bond (unregistering): left allmulticast mode [ 200.232326][ T9565] syzkaller0: entered promiscuous mode [ 200.237878][ T9565] syzkaller0: entered allmulticast mode [ 200.247232][ T9556] bio_check_eod: 57 callbacks suppressed [ 200.247246][ T9556] syz.3.1512: attempt to access beyond end of device [ 200.247246][ T9556] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 200.272194][ T9556] syz.3.1512: attempt to access beyond end of device [ 200.272194][ T9556] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 200.306094][ T9556] syz.3.1512: attempt to access beyond end of device [ 200.306094][ T9556] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 200.509197][ T9581] vhci_hcd: invalid port number 23 [ 200.537714][ T9577] loop2: detected capacity change from 0 to 128 [ 200.547022][ T9577] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 200.554959][ T9577] FAT-fs (loop2): Filesystem has been set read-only [ 200.569633][ T9586] loop4: detected capacity change from 0 to 128 [ 200.584215][ T9577] syz.2.1520: attempt to access beyond end of device [ 200.584215][ T9577] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 200.600007][ T9586] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 200.613085][ T9577] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 200.617721][ T9586] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.620987][ T9577] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 200.645268][ T9577] syz.2.1520: attempt to access beyond end of device [ 200.645268][ T9577] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 200.672708][ T9577] syz.2.1520: attempt to access beyond end of device [ 200.672708][ T9577] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 200.680418][ T29] kauditd_printk_skb: 1190 callbacks suppressed [ 200.680432][ T29] audit: type=1400 audit(2000000563.310:28801): avc: denied { create } for pid=9589 comm="syz.1.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 200.715390][ T9577] syz.2.1520: attempt to access beyond end of device [ 200.715390][ T9577] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 200.737091][ T9577] syz.2.1520: attempt to access beyond end of device [ 200.737091][ T9577] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 200.751775][ T29] audit: type=1400 audit(2000000563.370:28802): avc: denied { setopt } for pid=9589 comm="syz.1.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 200.754156][ T9577] syz.2.1520: attempt to access beyond end of device [ 200.754156][ T9577] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 200.772721][ T29] audit: type=1400 audit(2000000563.370:28803): avc: denied { setopt } for pid=9589 comm="syz.1.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 200.786504][ T9577] syz.2.1520: attempt to access beyond end of device [ 200.786504][ T9577] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 200.807095][ T29] audit: type=1400 audit(2000000563.370:28804): avc: denied { setopt } for pid=9578 comm="syz.4.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 200.823334][ T9594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.852390][ T9594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.891668][ T29] audit: type=1400 audit(2000000563.510:28805): avc: denied { ioctl } for pid=9589 comm="syz.1.1522" path="socket:[35952]" dev="sockfs" ino=35952 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 200.949288][ T3318] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 201.282722][ T9608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1525'. [ 201.307711][ T9608] loop4: detected capacity change from 0 to 512 [ 201.392624][ T9612] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1526'. [ 201.395354][ T9608] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 201.416665][ T29] audit: type=1400 audit(2000000564.050:28806): avc: denied { audit_write } for pid=9611 comm="syz.0.1526" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 201.438064][ T29] audit: type=1107 audit(2000000564.050:28807): pid=9611 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 201.452061][ T29] audit: type=1400 audit(2000000564.050:28808): avc: denied { accept } for pid=9611 comm="syz.0.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 201.474329][ T9608] EXT4-fs (loop4): 1 truncate cleaned up [ 201.480390][ T9608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.513030][ T9612] random: crng reseeded on system resumption [ 201.513355][ T29] audit: type=1400 audit(2000000564.150:28809): avc: denied { read } for pid=9611 comm="syz.0.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 201.539744][ T29] audit: type=1400 audit(2000000564.150:28810): avc: denied { append } for pid=9611 comm="syz.0.1526" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 201.577862][ T9615] loop2: detected capacity change from 0 to 764 [ 201.585076][ T9615] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 201.597789][ T9615] loop2: detected capacity change from 0 to 128 [ 201.605496][ T9615] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 201.677102][ T9624] loop2: detected capacity change from 0 to 1024 [ 201.685637][ T9624] EXT4-fs: Ignoring removed bh option [ 201.691427][ T9624] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 201.709494][ T9624] EXT4-fs error (device loop2): ext4_quota_enable:7124: comm syz.2.1531: inode #2304: comm syz.2.1531: iget: illegal inode # [ 201.725275][ T9624] EXT4-fs (loop2): Remounting filesystem read-only [ 201.731854][ T9624] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 201.747848][ T9624] EXT4-fs (loop2): mount failed [ 201.789865][ T9630] random: crng reseeded on system resumption [ 201.996208][ T9635] xt_policy: too many policy elements [ 202.090735][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.315947][ T9654] loop4: detected capacity change from 0 to 764 [ 202.331902][ T9649] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1541'. [ 202.341122][ T9649] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 202.348390][ T9654] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 202.360782][ T9649] 0ªX¹¦D: entered allmulticast mode [ 202.360989][ T9658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.378082][ T9658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.387227][ T9649] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 202.417885][ T9654] loop4: detected capacity change from 0 to 128 [ 202.438701][ T9654] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 202.490369][ T9665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.518223][ T9665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.585459][ T9672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1548'. [ 203.101766][ T9674] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1550'. [ 203.246390][ T9685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.262613][ T9685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.272594][ T9686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1553'. [ 203.314222][ T9686] loop3: detected capacity change from 0 to 512 [ 203.326729][ T9686] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 203.341562][ T9686] EXT4-fs (loop3): 1 truncate cleaned up [ 203.350712][ T9686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.651425][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.791342][ T9714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.797844][ T9710] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1569'. [ 204.817690][ T9712] loop4: detected capacity change from 0 to 512 [ 204.818796][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1569'. [ 204.825247][ T9714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.843317][ T9712] journal_path: Lookup failure for './file0/../file0/../file0/../file0' [ 204.851698][ T9712] EXT4-fs: error: could not find journal device path [ 204.875662][ T9714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.005554][ T9714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.015704][ T9714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.027304][ T9714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.036535][ T9714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.046034][ T9714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.282613][ T9724] lo speed is unknown, defaulting to 1000 [ 205.289268][ T9724] lo speed is unknown, defaulting to 1000 [ 205.296591][ T9724] lo speed is unknown, defaulting to 1000 [ 205.892466][ T29] kauditd_printk_skb: 387 callbacks suppressed [ 205.892484][ T29] audit: type=1400 audit(2000000567.890:29198): avc: denied { mount } for pid=9716 comm="syz.2.1562" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 205.921726][ T29] audit: type=1400 audit(2000000567.890:29199): avc: denied { watch } for pid=9716 comm="syz.2.1562" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 207.911375][ T9732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1563'. [ 207.928366][ T29] audit: type=1326 audit(2000000570.560:29200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9730 comm="syz.2.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c04ee929 code=0x7ffc0000 [ 207.952738][ T29] audit: type=1326 audit(2000000570.560:29201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9730 comm="syz.2.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c04ee929 code=0x7ffc0000 [ 207.976330][ T29] audit: type=1326 audit(2000000570.560:29202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9730 comm="syz.2.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5c04ed290 code=0x7ffc0000 [ 208.000574][ T29] audit: type=1326 audit(2000000570.560:29203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9730 comm="syz.2.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c04ee929 code=0x7ffc0000 [ 208.024811][ T29] audit: type=1326 audit(2000000570.560:29204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9730 comm="syz.2.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c04ee929 code=0x7ffc0000 [ 208.048391][ T29] audit: type=1326 audit(2000000570.560:29205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9730 comm="syz.2.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa5c04ee929 code=0x7ffc0000 [ 208.072498][ T29] audit: type=1326 audit(2000000570.560:29206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9730 comm="syz.2.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c04ee929 code=0x7ffc0000 [ 208.096136][ T29] audit: type=1326 audit(2000000570.560:29207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9730 comm="syz.2.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c04ee929 code=0x7ffc0000 [ 209.437271][ T9754] netlink: 'syz.4.1574': attribute type 13 has an invalid length. [ 209.534821][ T9761] loop4: detected capacity change from 0 to 512 [ 209.543635][ T9758] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1575'. [ 209.554810][ T9761] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 209.563702][ T9758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1575'. [ 209.592918][ T9761] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 209.600855][ T9761] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 209.609642][ T9761] System zones: 0-1, 15-15, 18-18, 34-34 [ 209.616187][ T9761] EXT4-fs (loop4): orphan cleanup on readonly fs [ 209.623907][ T9761] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 209.638493][ T9761] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 209.639932][ T9766] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1576'. [ 209.655863][ T9761] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1574: bg 0: block 40: padding at end of block bitmap is not set [ 209.673383][ T9761] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 209.692478][ T9761] EXT4-fs (loop4): 1 truncate cleaned up [ 209.707385][ T9761] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 209.769284][ T9761] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1574'. [ 209.787618][ T9761] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 209.796310][ T9761] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 210.029644][ T9776] netlink: 'syz.2.1579': attribute type 9 has an invalid length. [ 210.394373][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.414705][ T9796] block device autoloading is deprecated and will be removed. [ 210.448780][ T9800] loop4: detected capacity change from 0 to 512 [ 210.474825][ T9800] EXT4-fs: Ignoring removed nobh option [ 210.493244][ T3396] kernel write not supported for file /958/net/rt_cache (pid: 3396 comm: kworker/1:4) [ 210.517233][ T9800] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm syz.4.1590: corrupted inode contents [ 210.530617][ T9802] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1592'. [ 210.534881][ T9798] lo speed is unknown, defaulting to 1000 [ 210.546079][ T9798] lo speed is unknown, defaulting to 1000 [ 210.552359][ T9798] lo speed is unknown, defaulting to 1000 [ 210.565921][ T9800] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #3: comm syz.4.1590: mark_inode_dirty error [ 210.584629][ T9808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1589'. [ 210.595245][ T9800] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm syz.4.1590: corrupted inode contents [ 210.611607][ T9800] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.1590: mark_inode_dirty error [ 210.624906][ T9800] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1590: Failed to acquire dquot type 0 [ 210.637021][ T9800] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.1590: corrupted inode contents [ 210.649347][ T9800] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #16: comm syz.4.1590: mark_inode_dirty error [ 210.661643][ T9800] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.1590: corrupted inode contents [ 210.673898][ T9800] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1590: mark_inode_dirty error [ 210.686104][ T9800] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.1590: corrupted inode contents [ 210.689321][ T9813] vlan2: entered allmulticast mode [ 210.698389][ T9800] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 210.703251][ T9813] bridge_slave_0: entered allmulticast mode [ 210.711920][ T9800] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.1590: corrupted inode contents [ 210.731391][ T9800] EXT4-fs error (device loop4): ext4_truncate:4597: inode #16: comm syz.4.1590: mark_inode_dirty error [ 210.743177][ T9800] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 210.770144][ T9800] EXT4-fs (loop4): 1 truncate cleaned up [ 210.778129][ T9800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.801116][ T9800] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.904319][ T29] kauditd_printk_skb: 552 callbacks suppressed [ 210.904334][ T29] audit: type=1326 audit(2000000573.540:29757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.2.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa5c04e58e7 code=0x7ffc0000 [ 210.936496][ T29] audit: type=1326 audit(2000000573.540:29758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.2.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa5c048ab19 code=0x7ffc0000 [ 210.959986][ T29] audit: type=1326 audit(2000000573.540:29759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.2.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa5c04ee929 code=0x7ffc0000 [ 210.985945][ T29] audit: type=1326 audit(2000000573.540:29760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.2.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa5c04e58e7 code=0x7ffc0000 [ 211.009437][ T29] audit: type=1326 audit(2000000573.540:29761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.2.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa5c048ab19 code=0x7ffc0000 [ 211.035287][ T29] audit: type=1326 audit(2000000573.540:29762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.2.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa5c04ee929 code=0x7ffc0000 [ 211.058671][ T29] audit: type=1326 audit(2000000573.540:29763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.2.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa5c04e58e7 code=0x7ffc0000 [ 211.084724][ T29] audit: type=1326 audit(2000000573.540:29764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.2.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa5c048ab19 code=0x7ffc0000 [ 211.108220][ T29] audit: type=1326 audit(2000000573.540:29765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.2.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa5c04ee929 code=0x7ffc0000 [ 211.134010][ T29] audit: type=1326 audit(2000000573.540:29766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9817 comm="syz.3.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f9cddc3e929 code=0x7ffc0000 [ 211.200816][ T9819] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 211.215961][ T9819] SELinux: failed to load policy [ 211.273495][ T9826] lo speed is unknown, defaulting to 1000 [ 211.331022][ T9826] lo speed is unknown, defaulting to 1000 [ 211.372513][ T9835] lo speed is unknown, defaulting to 1000 [ 211.393827][ T9835] lo speed is unknown, defaulting to 1000 [ 211.400161][ T9835] lo speed is unknown, defaulting to 1000 [ 211.643072][ T9826] lo speed is unknown, defaulting to 1000 [ 212.345527][ T9836] loop3: detected capacity change from 0 to 8192 [ 212.516541][ T9836] loop3: p2 p3 p4 [ 212.520505][ T9836] loop3: p2 start 452985600 is beyond EOD, truncated [ 212.527465][ T9836] loop3: p3 size 33554432 extends beyond EOD, truncated [ 212.592494][ T9836] loop3: p4 start 8388607 is beyond EOD, truncated [ 212.627555][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.896072][ T9854] loop4: detected capacity change from 0 to 2048 [ 213.071757][ T9854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.210900][ T9866] netlink: 'syz.3.1602': attribute type 13 has an invalid length. [ 213.222302][ T9863] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1613'. [ 213.260130][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.265850][ T9867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=9867 comm=syz.2.1603 [ 213.286475][ T9867] netlink: 'syz.2.1603': attribute type 13 has an invalid length. [ 213.304512][ T9869] random: crng reseeded on system resumption [ 213.320684][ T9871] loop4: detected capacity change from 0 to 512 [ 213.328944][ T9871] journal_path: Lookup failure for './file0/../file0' [ 213.335982][ T9871] EXT4-fs: error: could not find journal device path [ 213.353737][ T9873] loop3: detected capacity change from 0 to 512 [ 213.376956][ T3396] lo speed is unknown, defaulting to 1000 [ 213.376958][ T9873] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 213.393835][ T3396] syz0: Port: 1 Link DOWN [ 213.445019][ T9873] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 213.453188][ T9873] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 213.471176][ T9871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1604'. [ 213.486149][ T9873] System zones: 0-1, 15-15, 18-18, 34-34 [ 213.492239][ T9873] EXT4-fs (loop3): orphan cleanup on readonly fs [ 213.498789][ T9873] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 213.516039][ T9873] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 213.533313][ T9879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1607'. [ 213.545121][ T9873] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1602: bg 0: block 40: padding at end of block bitmap is not set [ 213.559875][ T9873] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 213.572820][ T9873] EXT4-fs (loop3): 1 truncate cleaned up [ 213.579509][ T9873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 213.612363][ T9873] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1602'. [ 213.612609][ T9885] loop4: detected capacity change from 0 to 512 [ 213.626990][ T9887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.628827][ T9885] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 213.640600][ T9887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.655361][ T9873] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 213.664187][ T9873] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 213.664479][ T9885] EXT4-fs (loop4): 1 truncate cleaned up [ 213.678877][ T9885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.070835][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.312057][ T9903] lo speed is unknown, defaulting to 1000 [ 214.322677][ T9903] lo speed is unknown, defaulting to 1000 [ 214.333012][ T9903] lo speed is unknown, defaulting to 1000 [ 214.401233][ T9912] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1618'. [ 214.411189][ T9910] lo speed is unknown, defaulting to 1000 [ 214.419374][ T9908] loop3: detected capacity change from 0 to 8192 [ 214.444453][ T9910] lo speed is unknown, defaulting to 1000 [ 214.450875][ T9910] lo speed is unknown, defaulting to 1000 [ 214.472483][ T9908] loop3: p2 p3 p4 [ 214.481284][ T9908] loop3: p2 start 452985600 is beyond EOD, truncated [ 214.488114][ T9908] loop3: p3 size 33554432 extends beyond EOD, truncated [ 214.517712][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.537393][ T9908] loop3: p4 start 8388607 is beyond EOD, truncated [ 214.598614][ T9917] random: crng reseeded on system resumption [ 214.745149][ T9920] loop4: detected capacity change from 0 to 512 [ 214.753128][ T9920] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 214.765002][ T9920] EXT4-fs (loop4): orphan cleanup on readonly fs [ 214.771957][ T9920] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1619: Failed to acquire dquot type 1 [ 214.784410][ T9920] EXT4-fs (loop4): 1 truncate cleaned up [ 214.790976][ T9920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 214.827356][ T9920] lo speed is unknown, defaulting to 1000 [ 214.834187][ T9920] lo speed is unknown, defaulting to 1000 [ 214.840530][ T9920] lo speed is unknown, defaulting to 1000 [ 215.573855][ T9931] vlan2: entered allmulticast mode [ 215.579102][ T9931] bridge_slave_0: entered allmulticast mode [ 215.621600][ T9932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=9932 comm=syz.1.1624 [ 215.675275][ T9933] netlink: 'syz.1.1624': attribute type 13 has an invalid length. [ 215.841495][ T8292] lo speed is unknown, defaulting to 1000 [ 215.847879][ T8292] syz2: Port: 1 Link DOWN [ 215.913629][ T29] kauditd_printk_skb: 598 callbacks suppressed [ 215.913658][ T29] audit: type=1326 audit(2000000578.550:30362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9923 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f098fcc58e7 code=0x7ffc0000 [ 215.943962][ T29] audit: type=1326 audit(2000000578.550:30363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9923 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f098fc6ab19 code=0x7ffc0000 [ 215.967423][ T29] audit: type=1326 audit(2000000578.550:30364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9923 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f098fcce929 code=0x7ffc0000 [ 216.100565][ T29] audit: type=1326 audit(2000000578.630:30365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9923 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f098fcc58e7 code=0x7ffc0000 [ 216.124776][ T29] audit: type=1326 audit(2000000578.630:30366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9923 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f098fc6ab19 code=0x7ffc0000 [ 216.148282][ T29] audit: type=1326 audit(2000000578.630:30367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9923 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f098fcce929 code=0x7ffc0000 [ 216.172239][ T29] audit: type=1326 audit(2000000578.630:30368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9923 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098fcce929 code=0x7ffc0000 [ 216.195758][ T29] audit: type=1326 audit(2000000578.630:30369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9923 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098fcce929 code=0x7ffc0000 [ 216.421471][ T29] audit: type=1326 audit(2000000579.050:30370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.0.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098fcce929 code=0x7ffc0000 [ 216.445763][ T29] audit: type=1326 audit(2000000579.050:30371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.0.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098fcce929 code=0x7ffc0000 [ 216.605645][ T9939] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1626'. [ 216.725708][ T9947] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 217.650255][ T9952] random: crng reseeded on system resumption [ 217.687919][ T9942] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1625'. [ 217.900399][ T9954] tmpfs: Bad value for 'mpol' [ 217.907595][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1629'. [ 219.383463][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.413420][ T9956] lo speed is unknown, defaulting to 1000 [ 219.419819][ T9956] lo speed is unknown, defaulting to 1000 [ 219.426597][ T9956] lo speed is unknown, defaulting to 1000 [ 219.740685][ T9966] netlink: 'syz.4.1633': attribute type 21 has an invalid length. [ 219.852536][ T9969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1633'. [ 221.676644][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 221.676661][ T29] audit: type=1400 audit(2000000583.520:30538): avc: denied { read } for pid=9977 comm="syz.2.1645" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 221.706825][ T29] audit: type=1400 audit(2000000583.520:30539): avc: denied { open } for pid=9977 comm="syz.2.1645" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 221.731260][ T29] audit: type=1400 audit(2000000583.520:30540): avc: denied { ioctl } for pid=9977 comm="syz.2.1645" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 221.982625][ T9988] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 222.056932][ T29] audit: type=1326 audit(2000000584.630:30541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9986 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8a77e929 code=0x7ffc0000 [ 222.082925][ T29] audit: type=1326 audit(2000000584.630:30542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9986 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8a77e929 code=0x7ffc0000 [ 222.108692][ T29] audit: type=1326 audit(2000000584.630:30543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9986 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a8a77e929 code=0x7ffc0000 [ 222.134616][ T29] audit: type=1326 audit(2000000584.630:30544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9986 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8a77e929 code=0x7ffc0000 [ 222.158124][ T29] audit: type=1326 audit(2000000584.630:30545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9986 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8a77e929 code=0x7ffc0000 [ 222.184178][ T29] audit: type=1326 audit(2000000584.640:30546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9986 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a8a77e929 code=0x7ffc0000 [ 222.184270][ T29] audit: type=1326 audit(2000000584.640:30547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9986 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8a77e929 code=0x7ffc0000 [ 222.271263][ T9993] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1639'. [ 222.327837][ T9995] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1640'. [ 222.339177][ T9995] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1640'. [ 222.347075][ T9997] loop4: detected capacity change from 0 to 512 [ 222.357678][ T9997] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 222.370409][ T9997] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.1641: invalid block [ 222.419641][ T9997] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1641: invalid indirect mapped block 4294967295 (level 1) [ 222.446090][ T9997] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1641: invalid indirect mapped block 4294967295 (level 1) [ 222.470554][ T9997] EXT4-fs (loop4): 2 truncates cleaned up [ 222.476365][T10006] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1654'. [ 222.491288][T10003] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1642'. [ 222.501607][ T9997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.503196][T10000] vlan2: entered allmulticast mode [ 222.521685][T10000] bridge_slave_0: entered allmulticast mode [ 222.535951][T10003] random: crng reseeded on system resumption [ 222.563058][ T9997] ALSA: seq fatal error: cannot create timer (-19) [ 222.585282][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.297283][T10029] lo speed is unknown, defaulting to 1000 [ 223.303932][T10029] lo speed is unknown, defaulting to 1000 [ 223.310922][T10029] lo speed is unknown, defaulting to 1000 [ 225.197434][T10034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1659'. [ 225.638916][T10046] netlink: 404 bytes leftover after parsing attributes in process `syz.1.1664'. [ 225.799203][T10049] xt_CT: You must specify a L4 protocol and not use inversions on it [ 226.314375][T10045] ALSA: seq fatal error: cannot create timer (-19) [ 228.226087][T10041] lo speed is unknown, defaulting to 1000 [ 228.232437][T10041] lo speed is unknown, defaulting to 1000 [ 228.238781][T10041] lo speed is unknown, defaulting to 1000 [ 229.842650][T10065] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 229.961250][ T29] kauditd_printk_skb: 346 callbacks suppressed [ 229.961264][ T29] audit: type=1326 audit(2000000592.590:30894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10068 comm="syz.2.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c04ee929 code=0x7ffc0000 [ 229.995385][ T29] audit: type=1326 audit(2000000592.590:30895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10068 comm="syz.2.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c04ee929 code=0x7ffc0000 [ 230.019180][ T29] audit: type=1326 audit(2000000592.590:30896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10068 comm="syz.2.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa5c04ee929 code=0x7ffc0000 [ 230.035333][T10067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.045169][ T29] audit: type=1326 audit(2000000592.590:30897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10068 comm="syz.2.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c04ee929 code=0x7ffc0000 [ 230.056678][T10067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.074608][ T29] audit: type=1326 audit(2000000592.590:30898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10068 comm="syz.2.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5c04ee929 code=0x7ffc0000 [ 230.108379][ T29] audit: type=1326 audit(2000000592.590:30899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10068 comm="syz.2.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c04ee929 code=0x7ffc0000 [ 230.134691][ T29] audit: type=1326 audit(2000000592.590:30900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10068 comm="syz.2.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c04ee929 code=0x7ffc0000 [ 230.631239][ T29] audit: type=1326 audit(2000000592.960:30901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10068 comm="syz.2.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5c04ee929 code=0x7ffc0000 [ 230.655570][ T29] audit: type=1326 audit(2000000592.960:30902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10068 comm="syz.2.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c04ee929 code=0x7ffc0000 [ 230.679196][ T29] audit: type=1326 audit(2000000592.960:30903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10068 comm="syz.2.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c04ee929 code=0x7ffc0000 [ 230.956582][T10078] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 230.963236][T10078] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 230.970792][T10078] vhci_hcd vhci_hcd.0: Device attached [ 231.040430][T10085] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(16) [ 231.047064][T10085] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 231.054626][T10085] vhci_hcd vhci_hcd.0: Device attached [ 231.093624][T10088] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(19) [ 231.100267][T10088] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 231.107938][T10088] vhci_hcd vhci_hcd.0: Device attached [ 231.117894][T10078] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 231.164310][T10078] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(23) [ 231.170955][T10078] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 231.178560][T10078] vhci_hcd vhci_hcd.0: Device attached [ 231.212513][ T9] usb 3-1: new low-speed USB device number 2 using vhci_hcd [ 231.221888][T10085] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(18) [ 231.228563][T10085] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 231.236280][T10085] vhci_hcd vhci_hcd.0: Device attached [ 231.355264][T10078] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 231.369991][T10078] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 231.379674][T10078] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 231.402787][T10078] vhci_hcd vhci_hcd.0: port 0 already used [ 231.431041][T10091] vhci_hcd: connection closed [ 231.431287][T10089] vhci_hcd: connection closed [ 231.436187][T10086] vhci_hcd: connection closed [ 231.441410][T10082] vhci_hcd: connection reset by peer [ 231.475024][T10099] lo speed is unknown, defaulting to 1000 [ 231.481176][T10096] vhci_hcd: connection closed [ 231.523123][ T3877] vhci_hcd: stop threads [ 231.532106][ T3877] vhci_hcd: release socket [ 231.536546][ T3877] vhci_hcd: disconnect device [ 231.551718][T10109] loop0: detected capacity change from 0 to 512 [ 231.558497][T10109] EXT4-fs: Ignoring removed mblk_io_submit option [ 231.564978][T10109] EXT4-fs: Ignoring removed bh option [ 231.571551][T10109] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 231.617543][T10108] lo speed is unknown, defaulting to 1000 [ 231.623899][T10108] lo speed is unknown, defaulting to 1000 [ 231.630365][T10108] lo speed is unknown, defaulting to 1000 [ 231.726812][T10109] EXT4-fs (loop0): 1 truncate cleaned up [ 231.734134][T10109] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.067417][T10108] binfmt_misc: register: failed to install interpreter file ./file0 [ 232.082595][T10099] lo speed is unknown, defaulting to 1000 [ 232.089054][T10099] lo speed is unknown, defaulting to 1000 [ 232.128229][ T3877] vhci_hcd: stop threads [ 232.132615][ T3877] vhci_hcd: release socket [ 232.137027][ T3877] vhci_hcd: disconnect device [ 232.177023][T10105] vlan2: entered allmulticast mode [ 232.182940][T10105] bridge_slave_0: entered allmulticast mode [ 232.362799][ T3877] vhci_hcd: stop threads [ 232.367088][ T3877] vhci_hcd: release socket [ 232.371518][ T3877] vhci_hcd: disconnect device [ 232.451261][ T3877] vhci_hcd: stop threads [ 232.456241][ T3877] vhci_hcd: release socket [ 232.460770][ T3877] vhci_hcd: disconnect device [ 232.485858][ T3877] vhci_hcd: stop threads [ 232.490130][ T3877] vhci_hcd: release socket [ 232.497168][ T3877] vhci_hcd: disconnect device [ 232.629007][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.853453][T10125] lo speed is unknown, defaulting to 1000 [ 232.883271][T10125] lo speed is unknown, defaulting to 1000 [ 232.916298][T10127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.927289][T10125] lo speed is unknown, defaulting to 1000 [ 232.971220][T10127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.504707][T10133] xt_hashlimit: max too large, truncated to 1048576 [ 233.652162][T10140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.727142][T10140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.801707][T10130] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1673'. [ 233.836101][T10130] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 233.845379][T10142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1676'. [ 233.856669][T10130] 1ªX¹¦D: entered allmulticast mode [ 233.864379][T10130] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 234.572666][T10168] lo speed is unknown, defaulting to 1000 [ 234.579225][T10168] lo speed is unknown, defaulting to 1000 [ 234.586181][T10168] lo speed is unknown, defaulting to 1000 [ 235.349504][T10174] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1684'. [ 235.995039][T10173] lo speed is unknown, defaulting to 1000 [ 236.001209][T10173] lo speed is unknown, defaulting to 1000 [ 236.007659][T10173] lo speed is unknown, defaulting to 1000 [ 236.139413][T10173] loop1: detected capacity change from 0 to 512 [ 236.146812][T10173] EXT4-fs: Ignoring removed mblk_io_submit option [ 236.153342][T10173] EXT4-fs: Ignoring removed bh option [ 236.162448][ T29] kauditd_printk_skb: 299 callbacks suppressed [ 236.162460][ T29] audit: type=1400 audit(2000000005.090:31203): avc: denied { mount } for pid=10175 comm="syz.4.1685" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 236.218826][T10173] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 236.233170][T10173] EXT4-fs (loop1): 1 truncate cleaned up [ 236.239750][T10173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.503880][T10173] binfmt_misc: register: failed to install interpreter file ./file0 [ 236.515463][ T9] usb 3-1: enqueue for inactive port 0 [ 236.521720][ T9] usb 3-1: enqueue for inactive port 0 [ 236.555796][ T29] audit: type=1326 audit(2000000005.600:31204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10179 comm="syz.3.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cddc3e929 code=0x7ffc0000 [ 236.579530][ T29] audit: type=1326 audit(2000000005.600:31205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10179 comm="syz.3.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cddc3e929 code=0x7ffc0000 [ 236.603815][ T29] audit: type=1326 audit(2000000005.600:31206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10179 comm="syz.3.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cddc3e929 code=0x7ffc0000 [ 236.627615][ T29] audit: type=1326 audit(2000000005.600:31207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10179 comm="syz.3.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cddc3e929 code=0x7ffc0000 [ 236.651981][ T29] audit: type=1326 audit(2000000005.600:31208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10179 comm="syz.3.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cddc3e929 code=0x7ffc0000 [ 236.676387][ T29] audit: type=1326 audit(2000000005.600:31209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10179 comm="syz.3.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cddc3e929 code=0x7ffc0000 [ 236.700018][ T29] audit: type=1326 audit(2000000005.600:31210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10179 comm="syz.3.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cddc3e929 code=0x7ffc0000 [ 236.724343][ T29] audit: type=1326 audit(2000000005.610:31211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10179 comm="syz.3.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cddc3e929 code=0x7ffc0000 [ 236.748001][ T29] audit: type=1326 audit(2000000005.610:31212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10179 comm="syz.3.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cddc3e929 code=0x7ffc0000 [ 236.844727][T10189] loop0: detected capacity change from 0 to 512 [ 236.849862][ T9] vhci_hcd: vhci_device speed not set [ 236.882102][T10189] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.903776][T10189] ext4 filesystem being mounted at /333/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 236.944633][T10192] lo speed is unknown, defaulting to 1000 [ 236.950744][T10192] lo speed is unknown, defaulting to 1000 [ 236.957835][T10192] lo speed is unknown, defaulting to 1000 [ 236.978908][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.061644][T10189] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1688'. [ 237.200382][T10188] lo speed is unknown, defaulting to 1000 [ 237.269573][T10204] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.283582][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.297837][T10188] lo speed is unknown, defaulting to 1000 [ 237.298523][T10205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.313383][T10188] lo speed is unknown, defaulting to 1000 [ 237.320937][T10205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.424572][T10204] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.620490][T10204] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.725636][T10204] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.858177][T10204] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.903857][T10210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.945459][T10204] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.112384][T10210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.157852][T10204] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.206022][T10204] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.322676][T10219] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1696'. [ 238.378478][T10220] loop0: detected capacity change from 0 to 8192 [ 238.399132][T10220] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1692'. [ 238.420301][T10220] 1ªX¹¦D: renamed from 30ªX¹¦D [ 238.437263][T10220] 1ªX¹¦D: entered allmulticast mode [ 238.446132][T10220] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 238.638094][T10232] loop1: detected capacity change from 0 to 512 [ 238.645574][T10232] EXT4-fs: Ignoring removed nobh option [ 238.645664][T10234] serio: Serial port ptm0 [ 238.663854][T10232] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002] [ 238.672103][T10232] System zones: 0-2, 18-18, 34-34 [ 238.678192][T10232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.691019][T10232] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.775799][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.426934][T10274] lo speed is unknown, defaulting to 1000 [ 241.433354][T10274] lo speed is unknown, defaulting to 1000 [ 241.439441][T10274] lo speed is unknown, defaulting to 1000 [ 241.498945][T10282] loop0: detected capacity change from 0 to 1024 [ 241.508363][T10282] EXT4-fs: Ignoring removed orlov option [ 241.514221][T10282] EXT4-fs: Ignoring removed nomblk_io_submit option [ 241.524222][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1713'. [ 241.692154][ T29] kauditd_printk_skb: 420 callbacks suppressed [ 241.692169][ T29] audit: type=1326 audit(2000000010.720:31633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10278 comm="syz.4.1713" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89ed2de929 code=0x0 [ 242.484053][ T8292] usb usb4-port1: attempt power cycle [ 242.674771][ T29] audit: type=1326 audit(2000000011.580:31634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10278 comm="syz.4.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ed2de929 code=0x7ffc0000 [ 242.701318][ T29] audit: type=1326 audit(2000000011.580:31635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10278 comm="syz.4.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f89ed2de929 code=0x7ffc0000 [ 242.727324][ T29] audit: type=1326 audit(2000000011.580:31636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10278 comm="syz.4.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ed2de929 code=0x7ffc0000 [ 242.751221][ T29] audit: type=1326 audit(2000000011.580:31637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10278 comm="syz.4.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f89ed2de929 code=0x7ffc0000 [ 242.777986][ T29] audit: type=1326 audit(2000000011.580:31638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10278 comm="syz.4.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ed2de929 code=0x7ffc0000 [ 242.804699][ T29] audit: type=1326 audit(2000000011.580:31639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10278 comm="syz.4.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f89ed2de929 code=0x7ffc0000 [ 242.828493][ T29] audit: type=1326 audit(2000000011.580:31640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10278 comm="syz.4.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ed2de929 code=0x7ffc0000 [ 242.854972][ T29] audit: type=1326 audit(2000000011.580:31641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10278 comm="syz.4.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ed2de929 code=0x7ffc0000 [ 243.175994][T10297] xt_CT: You must specify a L4 protocol and not use inversions on it [ 243.517666][T10294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.537210][T10282] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.555301][T10282] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1722'. [ 243.578236][T10303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.601018][T10294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.614596][T10303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.634511][ T29] audit: type=1400 audit(2000000012.670:31642): avc: denied { create } for pid=10281 comm="syz.0.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 243.654715][T10304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1714'. [ 243.909500][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.961291][T10314] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 243.977273][T10316] loop0: detected capacity change from 0 to 512 [ 243.989057][T10316] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 244.014562][T10316] EXT4-fs (loop0): 1 truncate cleaned up [ 244.027379][T10316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.063899][T10316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.385343][T10328] lo speed is unknown, defaulting to 1000 [ 244.397938][T10330] netlink: 'syz.3.1723': attribute type 10 has an invalid length. [ 244.406540][T10328] lo speed is unknown, defaulting to 1000 [ 244.406606][T10326] lo speed is unknown, defaulting to 1000 [ 244.415250][T10330] ipvlan0: entered allmulticast mode [ 244.423369][T10330] veth0_vlan: entered allmulticast mode [ 244.430157][T10328] lo speed is unknown, defaulting to 1000 [ 244.430172][T10326] lo speed is unknown, defaulting to 1000 [ 244.464282][T10326] lo speed is unknown, defaulting to 1000 [ 244.590541][T10346] loop0: detected capacity change from 0 to 1024 [ 244.604571][T10322] vhci_hcd: invalid port number 255 [ 244.609996][T10322] vhci_hcd: invalid port number 255 [ 244.638832][T10346] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 244.669377][T10346] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.1726: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 3(4), depth 0(0) [ 244.692553][T10351] SELinux: syz.1.1727 (10351) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 244.707913][T10346] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.1726: Bad quota inode: 3, type: 0 [ 244.744588][T10346] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 244.771192][T10346] EXT4-fs (loop0): mount failed [ 244.818164][T10358] netlink: 'syz.4.1730': attribute type 21 has an invalid length. [ 244.830590][T10356] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1728'. [ 244.848167][T10358] netlink: 'syz.4.1730': attribute type 1 has an invalid length. [ 244.856163][T10358] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1730'. [ 244.865930][ T9] IPVS: starting estimator thread 0... [ 244.886412][T10359] netlink: 'syz.3.1729': attribute type 13 has an invalid length. [ 244.957064][T10366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.965621][T10360] IPVS: using max 2496 ests per chain, 124800 per kthread [ 244.973898][T10366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.065110][T10364] block device autoloading is deprecated and will be removed. [ 245.121039][T10362] netlink: 'syz.4.1731': attribute type 21 has an invalid length. [ 245.141388][T10362] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1731'. [ 245.150695][T10372] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1734'. [ 245.687297][T10389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.703618][T10389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.712315][T10391] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1746'. [ 245.722538][ T8292] usb usb4-port1: unable to enumerate USB device [ 245.749742][T10390] 9pnet: Could not find request transport: 0xffffffffffffffff [ 245.911571][T10403] xt_CT: You must specify a L4 protocol and not use inversions on it [ 246.979239][T10412] netlink: 'syz.0.1742': attribute type 21 has an invalid length. [ 247.001555][T10412] netlink: 'syz.0.1742': attribute type 1 has an invalid length. [ 247.009403][T10412] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1742'. [ 247.043958][ T29] kauditd_printk_skb: 328 callbacks suppressed [ 247.043971][ T29] audit: type=1326 audit(2000000016.100:31971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10413 comm="syz.0.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098fcce929 code=0x7ffc0000 [ 247.085796][ T29] audit: type=1326 audit(2000000016.130:31972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10413 comm="syz.0.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f098fccd290 code=0x7ffc0000 [ 247.110185][ T29] audit: type=1326 audit(2000000016.130:31973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10413 comm="syz.0.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098fcce929 code=0x7ffc0000 [ 247.110217][ T29] audit: type=1326 audit(2000000016.130:31974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10413 comm="syz.0.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098fcce929 code=0x7ffc0000 [ 247.158109][ T29] audit: type=1326 audit(2000000016.140:31975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10413 comm="syz.0.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f098fcce929 code=0x7ffc0000 [ 247.182329][ T29] audit: type=1326 audit(2000000016.140:31976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10413 comm="syz.0.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098fcce929 code=0x7ffc0000 [ 247.205971][ T29] audit: type=1326 audit(2000000016.140:31977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10413 comm="syz.0.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098fcce929 code=0x7ffc0000 [ 247.218936][T10417] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 247.230343][ T29] audit: type=1326 audit(2000000016.140:31978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10413 comm="syz.0.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f098fcce929 code=0x7ffc0000 [ 247.230387][ T29] audit: type=1326 audit(2000000016.140:31979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10413 comm="syz.0.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098fcce929 code=0x7ffc0000 [ 247.230473][ T29] audit: type=1326 audit(2000000016.140:31980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10413 comm="syz.0.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098fcce929 code=0x7ffc0000 [ 247.521696][T10429] siw: device registration error -23 [ 247.552704][T10436] netlink: 'syz.0.1749': attribute type 13 has an invalid length. [ 247.695759][T10447] ALSA: seq fatal error: cannot create timer (-19) [ 247.811547][T10459] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1754'. [ 248.053219][T10468] xt_CT: You must specify a L4 protocol and not use inversions on it [ 250.404062][T10499] ALSA: seq fatal error: cannot create timer (-19) [ 250.436444][T10508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.470718][T10508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.560118][T10512] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1770'. [ 250.700772][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 250.708845][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 250.716277][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 250.724236][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 250.731649][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 250.739702][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 250.747178][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 250.754569][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 250.762611][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 250.770092][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 250.777516][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 250.784922][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 250.792953][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 250.821767][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 250.829908][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 250.837404][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 250.844835][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 250.852888][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 250.860264][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 250.867748][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 250.875189][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 250.883204][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 250.890599][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 250.898072][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 250.905551][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 250.913583][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 250.921002][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 250.928452][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 250.937224][ T9] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 251.108939][T10523] netlink: 'syz.1.1771': attribute type 13 has an invalid length. [ 251.294968][T10519] netlink: 'syz.3.1772': attribute type 21 has an invalid length. [ 251.302881][T10519] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1772'. [ 251.600611][T10537] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1779'. [ 251.716629][T10543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.734649][T10543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.230209][ T29] kauditd_printk_skb: 378 callbacks suppressed [ 252.230232][ T29] audit: type=1400 audit(2000000021.280:32359): avc: denied { write } for pid=10548 comm="syz.1.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 252.511596][T10559] smc: net device lo applied user defined pnetid SYZ1 [ 252.536832][T10559] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 252.547899][ T29] audit: type=1326 audit(2000000021.610:32360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10558 comm="syz.4.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ed2de929 code=0x7ffc0000 [ 252.588592][ T29] audit: type=1326 audit(2000000021.630:32361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10558 comm="syz.4.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89ed2de929 code=0x7ffc0000 [ 252.614851][ T29] audit: type=1326 audit(2000000021.630:32362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10558 comm="syz.4.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ed2de929 code=0x7ffc0000 [ 252.638581][ T29] audit: type=1326 audit(2000000021.630:32363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10558 comm="syz.4.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ed2de929 code=0x7ffc0000 [ 252.638629][ T29] audit: type=1326 audit(2000000021.630:32364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10558 comm="syz.4.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89ed2de929 code=0x7ffc0000 [ 252.638993][ T29] audit: type=1326 audit(2000000021.630:32365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10558 comm="syz.4.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ed2de929 code=0x7ffc0000 [ 252.639028][ T29] audit: type=1326 audit(2000000021.630:32366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10558 comm="syz.4.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ed2de929 code=0x7ffc0000 [ 252.639059][ T29] audit: type=1326 audit(2000000021.630:32367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10558 comm="syz.4.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f89ed2de929 code=0x7ffc0000 [ 252.639150][ T29] audit: type=1326 audit(2000000021.630:32368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10558 comm="syz.4.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ed2de929 code=0x7ffc0000 [ 252.887721][T10555] vhci_hcd: invalid port number 255 [ 252.893329][T10555] vhci_hcd: invalid port number 255 [ 252.973048][T10574] netlink: 'syz.1.1787': attribute type 10 has an invalid length. [ 252.975224][T10572] lo speed is unknown, defaulting to 1000 [ 252.991066][T10574] ipvlan0: entered allmulticast mode [ 252.998839][T10574] veth0_vlan: entered allmulticast mode [ 253.004644][T10572] lo speed is unknown, defaulting to 1000 [ 253.010835][T10572] lo speed is unknown, defaulting to 1000 [ 253.017744][T10567] lo speed is unknown, defaulting to 1000 [ 253.027993][T10567] lo speed is unknown, defaulting to 1000 [ 253.034311][T10567] lo speed is unknown, defaulting to 1000 [ 253.175510][T10577] lo speed is unknown, defaulting to 1000 [ 253.181732][T10577] lo speed is unknown, defaulting to 1000 [ 253.188074][T10577] lo speed is unknown, defaulting to 1000 [ 254.024765][T10602] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1795'. [ 254.072604][T10604] random: crng reseeded on system resumption [ 254.342950][T10617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1800'. [ 254.658021][T10631] siw: device registration error -23 [ 254.947481][T10641] random: crng reseeded on system resumption [ 254.982390][T10624] vhci_hcd: invalid port number 255 [ 254.988009][T10624] vhci_hcd: invalid port number 255 [ 255.294883][T10668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1814'. [ 255.402070][T10645] IPVS: Error connecting to the multicast addr [ 255.717787][T10682] lo speed is unknown, defaulting to 1000 [ 255.738637][T10682] lo speed is unknown, defaulting to 1000 [ 255.746478][T10682] lo speed is unknown, defaulting to 1000 [ 255.843793][T10684] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1819'. [ 256.482902][T10722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1831'. [ 256.646651][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1824'. [ 256.696667][T10738] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1833'. [ 256.737534][T10736] lo speed is unknown, defaulting to 1000 [ 256.752557][T10736] lo speed is unknown, defaulting to 1000 [ 256.768343][T10736] lo speed is unknown, defaulting to 1000 [ 256.866293][T10744] netlink: 'syz.0.1834': attribute type 6 has an invalid length. [ 256.899556][T10744] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1834'. [ 257.129630][T10753] random: crng reseeded on system resumption [ 257.485521][T10762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1836'. [ 257.596105][ T29] kauditd_printk_skb: 801 callbacks suppressed [ 257.596121][ T29] audit: type=1326 audit(2000000026.650:33170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10765 comm="syz.3.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cddc3e929 code=0x7ffc0000 [ 257.690709][T10766] ALSA: seq fatal error: cannot create timer (-22) [ 257.924029][ T29] audit: type=1326 audit(2000000026.700:33171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10765 comm="syz.3.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9cddc3e929 code=0x7ffc0000 [ 257.950046][ T29] audit: type=1326 audit(2000000026.700:33172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10765 comm="syz.3.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cddc3e929 code=0x7ffc0000 [ 257.976021][ T29] audit: type=1326 audit(2000000026.700:33173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10765 comm="syz.3.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cddc3e929 code=0x7ffc0000 [ 257.999643][ T29] audit: type=1326 audit(2000000026.700:33174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10765 comm="syz.3.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cddc3e929 code=0x7ffc0000 [ 258.025540][ T29] audit: type=1326 audit(2000000026.700:33175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10765 comm="syz.3.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9cddc3e929 code=0x7ffc0000 [ 258.049038][ T29] audit: type=1326 audit(2000000026.700:33176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10765 comm="syz.3.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cddc3e929 code=0x7ffc0000 [ 258.075007][ T29] audit: type=1326 audit(2000000026.700:33177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10765 comm="syz.3.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cddc3e929 code=0x7ffc0000 [ 258.098622][ T29] audit: type=1326 audit(2000000026.700:33178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10765 comm="syz.3.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cddc3e929 code=0x7ffc0000 [ 258.124630][ T29] audit: type=1326 audit(2000000026.700:33179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10765 comm="syz.3.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cddc3e929 code=0x7ffc0000 [ 258.274920][T10774] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 258.281513][T10774] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 258.289371][T10774] vhci_hcd vhci_hcd.0: Device attached [ 258.327774][T10776] lo speed is unknown, defaulting to 1000 [ 258.359714][T10776] lo speed is unknown, defaulting to 1000 [ 258.441100][T10776] lo speed is unknown, defaulting to 1000 [ 258.561934][ T3396] usb 2-1: SetAddress Request (2) to port 0 [ 258.568042][ T3396] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 258.678529][T10794] syzkaller0: entered promiscuous mode [ 258.684234][T10794] syzkaller0: entered allmulticast mode [ 258.705062][T10777] vhci_hcd: connection reset by peer [ 258.711069][ T3867] vhci_hcd: stop threads [ 258.715430][ T3867] vhci_hcd: release socket [ 258.719982][ T3867] vhci_hcd: disconnect device [ 258.877250][T10805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1848'. [ 258.893173][T10785] vhci_hcd: invalid port number 255 [ 258.898567][T10785] vhci_hcd: invalid port number 255 [ 259.177641][T10812] lo speed is unknown, defaulting to 1000 [ 259.184677][T10812] lo speed is unknown, defaulting to 1000 [ 259.191111][T10812] lo speed is unknown, defaulting to 1000 [ 259.343722][T10812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1849'. [ 259.717379][T10828] ALSA: seq fatal error: cannot create timer (-22) [ 259.896035][T10832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.940090][T10832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.994952][T10837] lo speed is unknown, defaulting to 1000 [ 260.001765][T10837] lo speed is unknown, defaulting to 1000 [ 260.002426][T10834] lo speed is unknown, defaulting to 1000 [ 260.008041][T10837] lo speed is unknown, defaulting to 1000 [ 260.022270][T10834] lo speed is unknown, defaulting to 1000 [ 260.030648][T10834] lo speed is unknown, defaulting to 1000 [ 260.137491][T10840] netlink: 'syz.0.1859': attribute type 10 has an invalid length. [ 260.165481][T10840] ipvlan0: entered allmulticast mode [ 260.170808][T10840] veth0_vlan: entered allmulticast mode [ 260.531111][T10850] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1866'. [ 260.544887][T10851] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10851 comm=syz.2.1864 [ 260.724829][T10859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1867'. [ 260.743348][T10859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1867'. [ 260.755811][T10864] vhci_hcd: invalid port number 255 [ 260.761110][T10864] vhci_hcd: invalid port number 255 [ 260.945275][T10867] smc: net device lo applied user defined pnetid SYZ1 [ 260.954150][T10867] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 261.049614][T10874] loop8: detected capacity change from 0 to 16384 [ 261.275006][T10877] loop8: detected capacity change from 16384 to 0 [ 261.505614][T10885] ALSA: seq fatal error: cannot create timer (-22) [ 261.571712][T10888] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1878'. [ 261.629167][T10889] lo speed is unknown, defaulting to 1000 [ 261.635722][T10889] lo speed is unknown, defaulting to 1000 [ 261.642870][T10889] lo speed is unknown, defaulting to 1000 [ 261.789581][T10889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1875'. [ 261.917733][T10893] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1889'. [ 262.612484][ T29] kauditd_printk_skb: 538 callbacks suppressed [ 262.612501][ T29] audit: type=1400 audit(2000000031.600:33718): avc: denied { recv } for pid=10881 comm="syz.1.1875" saddr=10.128.0.163 src=30036 daddr=10.128.0.73 dest=56322 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 262.644858][ T29] audit: type=1400 audit(2000000031.620:33719): avc: denied { prog_load } for pid=10901 comm="syz.0.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 262.664159][ T29] audit: type=1400 audit(2000000031.620:33720): avc: denied { bpf } for pid=10901 comm="syz.0.1881" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 262.685518][ T29] audit: type=1400 audit(2000000031.620:33721): avc: denied { create } for pid=10901 comm="syz.0.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 262.705894][ T29] audit: type=1400 audit(2000000031.620:33722): avc: denied { write } for pid=10901 comm="syz.0.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 262.726831][ T29] audit: type=1400 audit(2000000031.630:33723): avc: denied { perfmon } for pid=10901 comm="syz.0.1881" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 262.748197][ T29] audit: type=1400 audit(2000000031.630:33724): avc: denied { prog_run } for pid=10901 comm="syz.0.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 262.767912][ T29] audit: type=1400 audit(2000000031.640:33725): avc: denied { create } for pid=10901 comm="syz.0.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 262.810834][T10900] pim6reg: entered allmulticast mode [ 262.817256][T10903] pim6reg: left allmulticast mode [ 262.911777][ T29] audit: type=1400 audit(2000000031.960:33726): avc: denied { create } for pid=10904 comm="syz.0.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 262.913086][T10905] smc: net device lo applied user defined pnetid SYZ1 [ 262.940004][ T29] audit: type=1400 audit(2000000031.960:33727): avc: denied { write } for pid=10904 comm="syz.0.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 263.107746][T10905] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 263.116624][T10911] Cannot find del_set index 3 as target [ 263.209749][T10919] SELinux: syz.0.1886 (10919) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 263.352191][T10928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.360984][T10928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.641960][ T3396] usb 2-1: device descriptor read/8, error -110 [ 263.788059][ T3396] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 263.811799][T10935] lo speed is unknown, defaulting to 1000 [ 263.817776][ T3396] usb 2-1: enqueue for inactive port 0 [ 263.823954][ T3396] usb 2-1: enqueue for inactive port 0 [ 263.830213][T10935] lo speed is unknown, defaulting to 1000 [ 263.842176][ T3396] usb 2-1: enqueue for inactive port 0 [ 263.851721][T10935] lo speed is unknown, defaulting to 1000 [ 263.879121][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 263.886588][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 263.893991][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 264.847467][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 264.854925][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 264.862939][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 264.870390][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 264.872870][ T3396] usb usb2-port1: attempt power cycle [ 264.877789][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 264.889780][T10958] lo speed is unknown, defaulting to 1000 [ 264.890506][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 264.904284][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 264.911665][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 264.917608][T10958] lo speed is unknown, defaulting to 1000 [ 264.919055][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 264.932735][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 264.952532][T10958] lo speed is unknown, defaulting to 1000 [ 264.975447][T10962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1899'. [ 265.142562][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 265.149984][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 265.157996][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 265.165452][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 265.172905][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 265.180404][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 265.188404][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 265.195820][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 265.203248][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 265.210644][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 265.218648][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 265.226136][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 265.233616][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 265.241003][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 265.249014][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 265.275324][T10965] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10965 comm=syz.3.1900 [ 265.360035][ T1036] Process accounting resumed [ 265.433013][T10968] Process accounting resumed [ 265.453028][ T3395] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 265.651752][T10978] lo speed is unknown, defaulting to 1000 [ 265.658115][T10978] lo speed is unknown, defaulting to 1000 [ 265.664277][T10978] lo speed is unknown, defaulting to 1000 [ 266.084734][T10986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1904'. [ 266.467259][T10988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.479772][T10988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.616846][T10999] smc: net device lo applied user defined pnetid SYZ1 [ 266.624087][T10995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1908'. [ 266.724030][T11001] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 266.796062][T10995] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 267.024883][T11012] lo speed is unknown, defaulting to 1000 [ 267.031020][T11012] lo speed is unknown, defaulting to 1000 [ 267.038989][T11012] lo speed is unknown, defaulting to 1000 [ 267.053422][T11017] lo speed is unknown, defaulting to 1000 [ 267.068052][T11017] lo speed is unknown, defaulting to 1000 [ 267.084404][T11017] lo speed is unknown, defaulting to 1000 [ 267.098805][T11023] netlink: 'syz.4.1913': attribute type 10 has an invalid length. [ 267.109713][T11023] ipvlan0: entered allmulticast mode [ 267.115075][T11023] veth0_vlan: entered allmulticast mode [ 267.337874][T11030] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11030 comm=syz.4.1919 [ 267.361365][ T3415] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 267.368802][ T3415] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 267.378675][ T3415] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 267.386352][ T3415] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 267.393840][ T3415] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 267.401247][ T3415] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 267.411220][ T3415] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 267.418662][ T3415] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 267.426135][ T3415] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 267.436050][ T3415] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 267.443560][ T3415] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 267.451016][ T3415] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 267.458433][ T3415] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 267.468652][ T3415] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 267.476091][ T3415] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 267.483591][ T3415] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 267.490992][ T3415] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 267.500887][ T3415] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 267.508322][ T3415] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 267.515766][ T3415] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 267.524935][ T3415] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 267.532333][ T3415] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 267.539738][ T3415] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 267.547124][ T3415] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 267.556229][ T3415] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 267.563618][ T3415] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 267.571011][ T3415] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 267.578419][ T3415] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 267.587990][ T3415] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz1 [ 267.598633][ T3396] usb usb2-port1: unable to enumerate USB device [ 267.625729][ T29] kauditd_printk_skb: 397 callbacks suppressed [ 267.625766][ T29] audit: type=1326 audit(2000000036.680:34125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11027 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa5c04e58e7 code=0x7ffc0000 [ 267.656221][ T29] audit: type=1326 audit(2000000036.680:34126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11027 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa5c048ab19 code=0x7ffc0000 [ 267.679793][ T29] audit: type=1326 audit(2000000036.680:34127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11027 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c04ee929 code=0x7ffc0000 [ 267.705634][ T29] audit: type=1326 audit(2000000036.760:34128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11027 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa5c04e58e7 code=0x7ffc0000 [ 267.729356][ T29] audit: type=1326 audit(2000000036.760:34129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11027 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa5c048ab19 code=0x7ffc0000 [ 267.752925][ T29] audit: type=1326 audit(2000000036.760:34130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11027 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c04ee929 code=0x7ffc0000 [ 267.778644][ T29] audit: type=1400 audit(2000000036.810:34131): avc: denied { name_bind } for pid=11039 comm="syz.0.1921" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 267.800737][ T29] audit: type=1400 audit(2000000036.810:34132): avc: denied { node_bind } for pid=11039 comm="syz.0.1921" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 267.821365][ T29] audit: type=1326 audit(2000000036.810:34133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11027 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa5c04e58e7 code=0x7ffc0000 [ 267.845566][ T29] audit: type=1326 audit(2000000036.810:34134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11027 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa5c048ab19 code=0x7ffc0000 [ 267.877247][T11042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1921'. [ 268.000830][T11049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1923'. [ 268.010275][T11049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1923'. [ 268.300302][T11064] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 268.307598][T11062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.310841][T11061] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 268.318915][T11062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.327741][T11061] tmpfs: Bad value for 'mpol' [ 268.413380][T11068] lo speed is unknown, defaulting to 1000 [ 268.419841][T11068] lo speed is unknown, defaulting to 1000 [ 268.426196][T11068] lo speed is unknown, defaulting to 1000 [ 268.646301][T11072] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.708673][T11073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.717558][T11073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.843529][T11072] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.934513][T11072] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.393614][T11072] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.457872][T11072] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.403171][T11084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1932'. [ 272.429852][T11072] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.451201][T11072] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.641901][T11072] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.658400][T11089] random: crng reseeded on system resumption [ 272.664549][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 272.664559][ T29] audit: type=1400 audit(2000000041.710:34324): avc: denied { append } for pid=11088 comm="syz.2.1933" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 272.714347][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1933'. [ 272.737521][T11089] team0: entered promiscuous mode [ 272.742931][T11089] team0: entered allmulticast mode [ 272.925239][ T29] audit: type=1400 audit(2000000041.980:34325): avc: denied { append } for pid=11076 comm="syz.0.1942" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 272.950177][T11078] vhci_hcd: invalid port number 255 [ 272.959502][T11078] vhci_hcd: invalid port number 255 [ 272.976110][T11097] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1935'. [ 273.003162][ T29] audit: type=1326 audit(2000000042.020:34326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11093 comm="syz.3.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cddc3e929 code=0x7ffc0000 [ 273.027489][ T29] audit: type=1326 audit(2000000042.020:34327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11093 comm="syz.3.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cddc3e929 code=0x7ffc0000 [ 273.051196][ T29] audit: type=1326 audit(2000000042.020:34328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11093 comm="syz.3.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9cddc3e929 code=0x7ffc0000 [ 273.075464][ T29] audit: type=1326 audit(2000000042.020:34329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11093 comm="syz.3.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cddc3e929 code=0x7ffc0000 [ 273.099080][ T29] audit: type=1326 audit(2000000042.020:34330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11093 comm="syz.3.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cddc3e929 code=0x7ffc0000 [ 273.123450][ T29] audit: type=1326 audit(2000000042.020:34331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11093 comm="syz.3.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cddc3e929 code=0x7ffc0000 [ 273.147305][ T29] audit: type=1326 audit(2000000042.020:34332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11093 comm="syz.3.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cddc3e929 code=0x7ffc0000 [ 273.171765][ T29] audit: type=1326 audit(2000000042.020:34333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11093 comm="syz.3.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cddc3e929 code=0x7ffc0000 [ 273.200531][T11095] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1935'. [ 273.218169][T11102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1937'. [ 273.857497][T11106] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11106 comm=syz.3.1939 [ 273.982599][T11115] netlink: 'syz.0.1944': attribute type 21 has an invalid length. [ 274.006037][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1944'. [ 274.147431][T11119] syzkaller0: entered promiscuous mode [ 274.153109][T11119] syzkaller0: entered allmulticast mode [ 274.543870][T11135] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11135 comm=syz.0.1951 [ 274.556444][T11135] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11135 comm=syz.0.1951 [ 274.587205][T11135] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1951'. [ 274.858296][T11146] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 275.210716][T11157] xt_CT: No such helper "snmp_trap" [ 275.932447][T11170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1962'. [ 276.178446][T11179] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 276.185010][T11179] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 276.193491][T11179] vhci_hcd vhci_hcd.0: Device attached [ 276.427157][T11190] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1728) [ 276.436812][T11190] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 276.525588][T11200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1966'. [ 276.588046][T11200] lo speed is unknown, defaulting to 1000 [ 276.594730][T11200] lo speed is unknown, defaulting to 1000 [ 276.601238][T11200] lo speed is unknown, defaulting to 1000 [ 276.775348][T11202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1969'. [ 276.857716][T11205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.902954][ T9] usb 4-1: SetAddress Request (6) to port 0 [ 276.918708][T11207] 9pnet_fd: Insufficient options for proto=fd [ 276.940817][ T9] usb 4-1: new SuperSpeed USB device number 6 using vhci_hcd [ 276.957709][T11205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.189396][T11180] vhci_hcd: connection reset by peer [ 277.213737][ T3856] vhci_hcd: stop threads [ 277.218046][ T3856] vhci_hcd: release socket [ 277.223176][ T3856] vhci_hcd: disconnect device [ 277.471754][T11216] lo speed is unknown, defaulting to 1000 [ 277.484893][T11216] lo speed is unknown, defaulting to 1000 [ 277.506294][T11216] lo speed is unknown, defaulting to 1000 [ 277.574127][T11218] lo speed is unknown, defaulting to 1000 [ 277.591489][T11218] lo speed is unknown, defaulting to 1000 [ 277.602448][T11218] lo speed is unknown, defaulting to 1000 [ 277.709567][T11229] netlink: 'syz.4.1975': attribute type 6 has an invalid length. [ 277.719820][T11230] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1975'. [ 277.923582][T11244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.952173][T11244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.966939][T11243] syzkaller0: entered promiscuous mode [ 277.972549][T11243] syzkaller0: entered allmulticast mode [ 278.107832][ T29] kauditd_printk_skb: 352 callbacks suppressed [ 278.107848][ T29] audit: type=1400 audit(2000000559.166:34686): avc: denied { create } for pid=11251 comm="syz.1.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 278.108960][T11252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1981'. [ 278.115517][ T29] audit: type=1400 audit(2000000559.166:34687): avc: denied { write } for pid=11251 comm="syz.1.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 278.142443][T11252] 8021q: adding VLAN 0 to HW filter on device bond3 [ 278.186554][T11252] 8021q: adding VLAN 0 to HW filter on device bond3 [ 278.194601][T11252] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 278.207148][T11252] bond3: (slave vcan1): Error -95 calling set_mac_address [ 278.281072][ T29] audit: type=1400 audit(2000000559.336:34688): avc: denied { write } for pid=11251 comm="syz.1.1981" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 278.324361][T11257] netlink: 'syz.1.1982': attribute type 1 has an invalid length. [ 278.339877][T11257] bond4: entered promiscuous mode [ 278.345480][T11257] bond4: entered allmulticast mode [ 278.386231][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1983'. [ 278.398055][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1983'. [ 278.409007][ T29] audit: type=1400 audit(2000000559.466:34689): avc: denied { read } for pid=11259 comm="syz.4.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 278.466238][T11257] geneve0: entered allmulticast mode [ 278.472430][T11257] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.480629][T11257] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.488838][T11257] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.497588][T11257] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.511912][T11257] bond4: (slave geneve0): making interface the new active one [ 278.519498][T11257] geneve0: entered promiscuous mode [ 278.526784][T11257] bond4: (slave geneve0): Enslaving as an active interface with an up link [ 278.711140][T11268] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1986'. [ 278.727728][ T29] audit: type=1326 audit(2000000559.786:34690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.0.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098fcce929 code=0x7ffc0000 [ 278.755173][ T29] audit: type=1326 audit(2000000559.806:34691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.0.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098fcce929 code=0x7ffc0000 [ 278.779561][ T29] audit: type=1326 audit(2000000559.816:34692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.0.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f098fccd290 code=0x7ffc0000 [ 278.803803][ T29] audit: type=1326 audit(2000000559.816:34693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.0.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098fcce929 code=0x7ffc0000 [ 278.827468][ T29] audit: type=1326 audit(2000000559.816:34694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.0.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098fcce929 code=0x7ffc0000 [ 278.851858][ T29] audit: type=1326 audit(2000000559.816:34695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.0.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f098fcce929 code=0x7ffc0000 [ 278.894436][T11272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.904576][T11272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.941554][T11276] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1988'. [ 278.952589][T11273] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1988'. [ 278.982303][T11277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.993565][T11277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.017706][T11279] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 279.028491][T11279] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 279.036884][T11279] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 279.045215][T11279] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 279.230704][T11285] serio: Serial port ptm0 [ 279.484812][T11291] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 279.491504][T11291] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 279.499094][T11291] vhci_hcd vhci_hcd.0: Device attached [ 280.107970][T11303] syzkaller0: entered promiscuous mode [ 280.114345][T11303] syzkaller0: entered allmulticast mode [ 280.221940][T11305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1999'. [ 280.258919][T11312] netlink: 'syz.1.2001': attribute type 1 has an invalid length. [ 280.267815][T11312] netlink: 'syz.1.2001': attribute type 4 has an invalid length. [ 280.275637][T11312] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2001'. [ 280.286882][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2001'. [ 280.289737][T11313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.321173][T11313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.396902][T11322] netlink: 'syz.1.2004': attribute type 2 has an invalid length. [ 280.405258][T11322] netlink: 'syz.1.2004': attribute type 1 has an invalid length. [ 280.415572][T11322] netlink: 'syz.1.2004': attribute type 10 has an invalid length. [ 280.444351][T11324] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.498315][T11327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.506997][T11327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.517931][T11324] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.564455][T11324] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.615514][T11324] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.683700][T11324] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.695120][T11324] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.706482][T11324] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.717911][T11324] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.821060][T11292] vhci_hcd: connection closed [ 280.821285][ T3856] vhci_hcd: stop threads [ 280.831999][ T3856] vhci_hcd: release socket [ 280.832011][ T3856] vhci_hcd: disconnect device [ 280.885092][T11335] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 280.934561][T11335] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 280.948021][T11336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.956551][T11336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.985620][T11335] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 281.004925][T11340] nfs4: Bad value for 'source' [ 281.036151][T11335] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 281.082393][T11335] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 281.095506][T11335] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 281.107114][T11335] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 281.118633][T11335] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 281.298291][ T3416] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 281.320597][ T3416] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 281.729835][T11361] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 281.736060][T11350] syzkaller0: entered promiscuous mode [ 281.743106][T11350] syzkaller0: entered allmulticast mode [ 281.770875][T11362] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.838990][T11362] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.854305][T11367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.864872][T11367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.915112][T11362] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.985962][T11362] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.004138][T11373] netlink: 'syz.2.2021': attribute type 1 has an invalid length. [ 282.019971][T11373] bond2: entered promiscuous mode [ 282.025116][T11373] bond2: entered allmulticast mode [ 282.054882][ T9] usb 4-1: device descriptor read/8, error -110 [ 282.131314][T11373] geneve2: entered allmulticast mode [ 282.138144][T11373] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.146944][T11373] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.156519][T11373] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.165367][T11373] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.173716][ T9] usb 4-1: new SuperSpeed USB device number 6 using vhci_hcd [ 282.184677][T11373] bond2: (slave geneve2): making interface the new active one [ 282.192795][T11373] geneve2: entered promiscuous mode [ 282.198835][T11373] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 282.202332][ T9] usb 4-1: enqueue for inactive port 0 [ 282.214256][ T9] usb 4-1: enqueue for inactive port 0 [ 282.220720][T11380] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.231161][ T9] usb 4-1: enqueue for inactive port 0 [ 282.273850][T11381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.283561][T11381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.294464][T11380] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.354317][T11380] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.425903][ T3856] ================================================================== [ 282.434022][ T3856] BUG: KCSAN: data-race in ppp_asynctty_receive / tty_set_termios [ 282.434054][ T3856] [ 282.434058][ T3856] write to 0xffff888104612108 of 44 bytes by task 11391 on cpu 0: [ 282.434072][ T3856] tty_set_termios+0xc0/0x8c0 [ 282.434092][ T3856] set_termios+0x496/0x4e0 [ 282.434111][ T3856] tty_mode_ioctl+0x379/0x5c0 [ 282.434131][ T3856] ppp_asynctty_ioctl+0x13f/0x2d0 [ 282.434152][ T3856] tty_ioctl+0x845/0xb80 [ 282.434174][ T3856] __se_sys_ioctl+0xcb/0x140 [ 282.434199][ T3856] __x64_sys_ioctl+0x43/0x50 [ 282.434225][ T3856] x64_sys_call+0x19a8/0x2fb0 [ 282.434245][ T3856] do_syscall_64+0xd2/0x200 [ 282.434259][ T3856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.434278][ T3856] [ 282.434282][ T3856] read to 0xffff888104612121 of 1 bytes by task 3856 on cpu 1: [ 282.434295][ T3856] ppp_asynctty_receive+0x790/0xd40 [ 282.434318][ T3856] tty_ldisc_receive_buf+0xbf/0xf0 [ 282.434345][ T3856] tty_port_default_receive_buf+0x59/0x90 [ 282.434375][ T3856] flush_to_ldisc+0x141/0x360 [ 282.434402][ T3856] process_scheduled_works+0x4ce/0x9d0 [ 282.434437][ T3856] worker_thread+0x582/0x770 [ 282.434462][ T3856] kthread+0x486/0x510 [ 282.434477][ T3856] ret_from_fork+0xda/0x150 [ 282.434494][ T3856] ret_from_fork_asm+0x1a/0x30 [ 282.434511][ T3856] [ 282.434514][ T3856] value changed: 0x11 -> 0xd2 [ 282.434522][ T3856] [ 282.434526][ T3856] Reported by Kernel Concurrency Sanitizer on: [ 282.434546][ T3856] CPU: 1 UID: 0 PID: 3856 Comm: kworker/u8:25 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 282.434574][ T3856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 282.434588][ T3856] Workqueue: events_unbound flush_to_ldisc [ 282.434624][ T3856] ================================================================== [ 282.436706][T11380] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.447621][T11362] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.648662][T11362] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.660536][T11362] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.675068][T11362] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.697358][T11380] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.708735][T11380] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.720886][T11380] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.733357][T11380] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.293136][ T9] usb usb4-port1: attempt power cycle [ 285.142517][ T9] usb usb4-port1: unable to enumerate USB device