last executing test programs: 4.449854093s ago: executing program 0 (id=1134): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r0}, 0x10) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000440)=@secondary) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x408e, &(0x7f0000000240), 0x3, 0x440, &(0x7f0000000780)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200), 0x4) keyctl$link(0x8, r1, r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000834bdccb82f27a196db2865047c7626d46ec793ac14", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000780), &(0x7f0000000580)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000100], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000fef5ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x108) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace(0x420f, r9) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x10000, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) sendmmsg(r10, &(0x7f0000000180), 0x400000000000077, 0x7600) mount$bpf(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000080), 0x800812, 0x0) 3.587249462s ago: executing program 0 (id=1165): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b702000040000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES8=0x0, @ANYRES8=r0, @ANYBLOB="907057f3986e3b795aa588bf6e46a35e6e747ab2ea43a81bd42476249542ca96dfad55a43dc519559e510a369a02bdd63728eda22a18ea7b7c1ab6e0c9168873ecf7c78b6cac88cf442dc4e41ecde951"], 0x1, 0x36e, &(0x7f0000000c00)="$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") r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r2}, 0x9) r3 = open(&(0x7f00000003c0)='./bus\x00', 0x14547e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r4, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x100000000000000, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)="96", 0xfe00}, &(0x7f0000000040)={0x0, 0x0, 0x41, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 3.154211091s ago: executing program 0 (id=1176): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1}}}}}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000002fc0)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x44a42, 0x100) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000100)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x4) 1.736534611s ago: executing program 2 (id=1208): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="3cb7e9e5c30a05c41dd519ab070a98338518476f7b4ee0b1c320fdc6d96ca36805a6391803b3e80000000008b2", 0x2d}, {&(0x7f00000022c0)="41acbafefbcafe0110b39f0f1deb328a2dfe9380eea92d7ab08ca3d95f86cd1b899b801f696852ac8791e4ad0e394055d7abf6924166c4e1761f6af911cfd99177b33691a218865c307245a9f3f428028f0b95cb3174d7cf2f2109fd6bd6950dcf7f22fc785fb18ab3273e6a3a13763ce0c6b2db525a5f56eb75fa9808358ca5e1bd362025774af0e1be6fae4b33018018b8ed4008c2ba260899a579a99e6250d0184a8bbb784c0e152a3b51b67abe06c45bc33f85e1837ee97cb90bc5ceb201a7b4293c42db26dda53515ac396fc9eae6b4ac6a4ea5fda8766fb9cc5b5a35cec07d4c27d2f895f1220053f3c07bd07ec7ab6f8197455ac3621fa37931b809ee4b5cee7776b221a0c3d0a1637d0336741fabff835937c1fdd0648bfc0f28fb5c49037e93077d7e5ca4ba5cac1738de358e9aaecae5628fe88a91d0f4a88aaefdb652ea7cd555067e6691f27cc562e73499ec78ac4fb3ccafcab5cdf0a7631cf194e6e6ed85b3939299cf2117c0abbb266e7818c8ed295793b960cb040f7d81e1791c5a7b91d669abd312a1ec00c8fdad9117aba0e2d6e2e7ed651a472a50a661b53a48098c7733ef27de28701181be747ce9249c0d70216401a48d3cda0a24ece64485ac918ed0f0c92f540b7c3857cf000370fde84b8530385a04d4d81015b649e77060cc18d3f7adcd952b6bebdd99b58baccaa6a96f74cdc682f2af63e51c7b09638a72a29d18bcf3689dec8845a93c05b35e564ff2c6c406cc552d26e2dd6904ddedd06744818068973ee74a3d35350f731b381d05ff2d342dc378e0e898e9f5b325d840e40efde8e2671867b8554b9a49040327d6c148df65e51a9c0a28e053eb73764db4dc626ac5eadbd9ed49f02766d496b22e431e3ca9809d8ec744c1ef97813040d5df259d0ed93d50d3588c6faf9be156b7e0cb3d0bb3bcd9597560c8a94db86932135a320e0d3b5252366c4b05797e6446621131dc9347a68f8ef49fe69dfcbefbd58b400fc850514704b2981fd806f0e4bc66c4c85d4009dd388d36239675323b66eea7084f08d9912d6e36287923863edc9052473fc9ce3baeb1ff176742f3b7859e0918396c6e6aaa773f49e86cf520869576fe2e6c9e8aed5e6642f53a7d2c98fcdab305c4f611c891156f2b93ce0fbbf13934f2981c19feb281364614cd0e28008028ed3e485eaf4359774b6b3204472da061141f225503b23a11c0b625c89a92e943e3e850112ad4dfd745aa384b8441ee66d412d635364c6eba6e51150ed2fe7be9c0b87cc356df6fb97ce4c0286070f592b764ec4e8aab76eb84f0e7d51e71bdbad115a30ef362d874f8018418fdc82823b5705743e61d52388b2d11f7df3232489c3f02ccfe060c67d4c75352b43656441e45d232c1210c13b1ae709bb8cf07b0c8253eb66f5038d7066d571a29cc08ee33a0af3a4667b740b4f0567666bab9c358c08742b897d69c24d86457b9292c46f243905a50effdebda773de6e9b5ea817b67c46e8af0ce642a40bfad64f200ae8b16d9ac5ab002763b4466c5bd898664a0dd75b6cf8a5e4bddef8341dcee8372d8512465dab9a6e4eaed084bc13b963e4e9d65cc92096598680fa9ec8da15e3f7009ca2e7a2fb1cda8acefb9cbedd92c4e1f500b6a45bf8af28b57153b072c3e61a0a114ad4c929591bdc9ce2548535caa1e1d419924f47aefacc7a91dfdd7a2d46e20ccee474d4ceb46b5617b688e13fe8e5da1340e8327cf3d5b55161cdbb3e62b07478eed9d8e98149c3277524430826f182bbe31d0a8f508655067f5dbba6ca27fb31638f9869070a06b755cda162a85f2e6a7926d31be1937b98798964c0bff501537577e7498e2d339e3f938f496438b950de90fd5f2cb5bf94cad7d47c28444fdfcc11465d95d7c269c0cfb50b765a7061b90d87b99c283425510d0c52d6e192368cea1c68ed1a709e0e507bcde46bbcfdd19028f51df0d8ee0383ac5aaed27532af94b5ad3e53b42e967546403661b93c08f9edd6076bcabaa0521ccc46a394fbeec7c069ec09a7f15bb2f197daaff505707c3dd00c3c211fcc6aa687ccd7421f3d335b4311574613c0741bb8b257f4aa0ce1e92f6249239a369cf6226d5c494eea3c8f279e44b2e5491059b6b62ee5d26fda71972583cfda36ce4fb956fbda2d6351d5598dddd83c224b0acd010b07315eeadf28714889e339d7f908681c9d903f9caf85ed01016ebbae1338c0dcc4e1b43bf523beb3488703a3e573969764cb619fcc083626713c8545e466d013bb44d34981bd33177a5f2a5fa2ef0669fee6dd2d18d6cf038eafc0ed42986b5b1d1bb3f6ac69ef22960320c2bf9006fa00cbeda05dd068ec6f744cbb9b62c6e5bb244f95d759b9393a034e915e07add137543c206da22c63b7a343169c2aa3a2108da1d375af52201766e992e076aa110d909feecadca090f844d9304f805e299072a596c9dc3da0201039a46b2c45554fa79519bc63ee6dd5d267c951d8177e12fdaae2dbb7ed0fa873680cf673c0c779ca9b89338d73c276245f6c98f1ab3b057c7cbaf0d016086fb819ac6851af0dc9eba633a98393c760306c1b07d1fe423fde887209a35ba262732c76dc75e93555a3cb9d15766d81eacdab46bc1c75294347e87c1f2c9e8b3ce09a30fcbe8edb451ed47ba288b739ced02cdbb24b4e34c4680da0390a6a3a9c082935bdf28d7cbe82939b303a9712c0d596b00c13d8b04adf5cdaff8a8628712a5c2137c3b716c5773585f37d318b92fac303acc4522e42e061c3ea09ca508918a04f79730c35d89d77ce3c62b9c2be15b75550d4d2570edf30c8d3d8dd897efbc8758afe52d35c40075b34082ff1deb6957fe4a18e0e9148a182ffb3dfb91886348485a88bac69f1b56b4cc7b1850104365994c123c5dcea36d9693fc994d2329f05f465c8ed4a42bfc7fe12276c2c203c35551ab9a3b7c6dd9f531bccb761a6cd524d753e37811a0b179997f81e87ab83863d92a4df17b57e3d244b0a3d5c118beb0003085f56b6a9bdc5acfa76c75f2ba50dfdc9860ca409a3a413d1311d08a815e41a67dbd4f404bd36260b7ba957b64c7e8edf426e62ce88cefefdef99c4797c33a2ab4d8bac7f28e325a0f764f670308807d7625b98c0c7432694bbeacd4a75f2b33e4105201d7a9aa90d48f05a05f2e7e4ce29519c8414282b855fc5eed866f567cee322fc7f9e994cb53cfdcbb763d841e41df79bd5eeb4fd3159f51d57e3779282c552dd690f251c27875c6b9cc0af294a9c3a1bd53b0a9ef7d8ebea9716d04ee221667cd8f1b619c0b1e9ab62ee86528f695fefd989a43bc2477c55d4a751aa7ff94b5ce09a034189a299d9702f3a64e341253bfce6cf76a79081efb889fa0e6a1ea9b34ea1baa81d7061bb8e24dcab3e1dcbc3619a8deba56a3ee0fb83f6ad0b8371a2e7b32747eb41718923bff7d26ca7aa5d661e6081c87dfec5ce82c267c424e629ffe3ff2c70d8ad451b2598a8cbfe8564189e4571b0ddd80f376cff06e32c812014635ffa50638c07a90cc130f7f2b912d0568504e3a951299fc3e565517cabe527c45ebf4e56256caee48ace1819b27fc77f191f75266749ecef278f58a9953d21c96bf678d454c820f4b7d9b0c5a5c4914308ef6cb0900cbb0643bb6f1339a1da119dc461b5fea33ff7ebb2a5f0f0a735bcca83934fbda220eddce925dba9674b1d81c42d90fe01c5c958efa90131fcdfe04dd30aa228ce5e05c7b6015d42da9749ae810ba894c8494d5b1dc43708d08cb7e1844cffa2f0b1729aa58888508b9b5fbcb547c18a6b1640aea050b35a4f424adef3ff4cf84eeb71252609fdc1b5650fb658904019724c0c256736dbea6467243ef969ccfa39201b3890f822a52f21ee4b4ff8783cf3a4356ab89cefd09ac3c887313b7d7c242d8d27391cccf6cdc0067c90808d0107660e42b4b7cfef7a6df6b34caee82a9ee8e287360ba3b62198ba94ca16ea2cd78a74f6fef1b44255f464eff0a25391af4e13b7f62ac5e5c33f2bfc16386d0a95ff92eb01d4b0afcdb5f23d231427a4c70a255fba95c8ed7045df097fc0910b6506092fc0f72d777f45f01ab32e22be45f54d6bdba", 0xb5c}], 0x2}, 0x0) 1.695730845s ago: executing program 2 (id=1210): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0xffffffffffffffd9) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, 0x0, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34060}], 0x1) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) epoll_create(0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000002c0)=ANY=[], 0x118) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="a33513000000", 0x0, 0x0, 0x10000, 0x0, 0x0}) r6 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r6, 0x7, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) 1.6425745s ago: executing program 2 (id=1212): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) migrate_pages(0x0, 0x3, 0x0, 0x0) 1.341826077s ago: executing program 2 (id=1214): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) socket$unix(0x1, 0x5, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x8, 0x56280) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000080)={0x56, 0x2, 0x6, {0x6, 0x41}, {0xffff, 0xf23b}, @rumble={0x84e, 0x8}}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000000540)) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020"]) 1.060259573s ago: executing program 2 (id=1223): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x3000000, 0x0) creat(&(0x7f0000000240)='./file0/bus\x00', 0x9a) acct(&(0x7f0000000100)='./file0/bus\x00') r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB='fowner>', @ANYRESDEC=0x0, @ANYBLOB=',fsmagic=0x0000000000000000,measure,fsuuid=65\x004c2d9-1684-fd7b-2a29-2d3bfc0c,obj_type=msdos\x00,euid=', @ANYRESDEC=0xee01, @ANYBLOB="2c61707072616973652c646f6e745f680500682c646f6e745f6d6561737572652c616973655f747970653d696d617369672c00"], 0xfd, 0x1bf, &(0x7f0000000680)="$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") mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000060000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffeff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="0dd253bd91bd48b69e159acb9640cc6063cef8d6ba077b72481e0c7474e9afbd5837d3d577c8a6bc1e106711453f4f11f8a583b3f913df4ca59f2a1ad9396139d5b25a7e832dbd930bcc4a7804f75e2917f29d4f3616392ca648784557d97fd4675f5309019a85917efa55455d535de9a9bab5e334b85c62cd71ed93813969fb55f336dc7a8a61f6905b13ba7835ffaa7758138848bbb3b6ed7f0953d4013762dd33c4cf1e3f71e43aec3f0f8b17c891db7a27dbbf888677a15d5739e05b29adf4c3c08867384819af5b15f14b80a530baabcc285359a98d7f0c9f61f7e90d85f4f9488dce71b55730734ae668e40f72c120a0c284356780f4878c17d8ed48298a759db6cf557fee36f0e622c4759524c9261f53f14775c6345547571c30e55701ff9d0928f62825e0a6e3097758019c402c01d043adbd21405a4f2cb13331530bec00ec2ee4c915e1a6ae3f2a1c8fd1e60af3ab818ac293217e4cb382f566e8601101ef4f12b1ea1bfcb9ce6ff931603b93555fd443383cd85c7688e3617adf4321b2dda320a6f85e532880ce1e76d869262ed48a39c30f33202a2a9981282f8450b5755019b0e6692a000f538027d92aa114d9e73c94e1b8e1a64d0827a07c88960c0e3f55c4da54ddb6fb47c7d981994fe680c2b51dc4cb1500ef0ccf5ec2ec15dfc66fa92c27b92bc9d23c15ae164005ca128ee97b5baafed0d22eb592bb7d0140719dc3c2b2e9126b1da1853a8092964023281e1c548168072cb05b043617312141426abbe78b1aca8c2219d4946a71c3a8c5eb702489e448c2e978fe6eb75297d9ba9cb515ad74593ab559b2dd8895d7e04b80e254b498654ad7d5749da33ac78469ca4060a8bb4ae3f34f55c9b759e8bcf7ca85f90828702db81eb789970e68cc277a00574d3f6ebcc732727284c6d5acf1836c4c97886e01b92f584c8bc4a4b20147cdcedc7e982f21f8aa3f21219feb8c8a46572ee16f57e8d2558e387eaa15746dce13db0e2704a1661149363e7941c69cb8914b42703834b1c22e75cf2b610a24acad1fded079250c79d51aff9d2881235f19a7c37e9dd474788c4a04d5e952ffcdb547e90e5ceaf6466d36a4dcfff9243a630f414b4b79cb332f44531ea75b7137cbb0965952ad558bbee1e359759becf73bf42a7bc2762f9fc98db3fe921a7b42a198d3cbb1a7f9ebbf8f58151b0e211daa9d398b3228fe823d52264ca636cb6e18459bba2abf6dfa3ec4c38db9cbde9075b6f0136613d9a656c8546210b320f065a0ec31e886babaf7b699dfac7ae59c40b29d6b1feff8867e5f85b30390bb984ef345c8991d49003e567e6f263cc3dbee4c29311a2487e10b512211eefd3d746154e8b0de501a3390218ddd7f59adaaa66f52960b651b45556ae81c1d616d9416e574c23e57ab892c55a4a3b69acd34dfcd490969fa4d3bfd26d075ee423209c843a7d2d21efb4da32d5edebd26e6e18597ee3717838a73ce0443b21c55befe8f40c63c9313524ccc7f2ad3e05d783502e1b18665220c1877d3c1a9c91ec713b166bdfdb8d82446dfcf58c58d7b96d7eda069a6f9663ab568c1cfc9b3ded1d407bc08572db7637f15d3924974c55220ef804cc86b85c3a41170e504d02487c61c8f807c3580e86e11c78bfd28fc2444794ae8af1b618528724a4d7299482ffa4ab40bd82178a2d50e133665ff83720f4de65990a06f92e7a4781e03d9f07d2484aa960c25697951986439df08b983377d8ac51669fd08a4ca9e8a5a05fa5904f7e6de0f5e3dd78eca1c3f940da0ceb92b9f53757c6daff715f0fa56a4fd679c105d66792b62a48d5d1fc5bb0178888938aab2febba573898621d874532af4fabd93bff2d97d95d3a90d7d8478b80d4f4ad1b1ff7144d681c29caa8bde05092654e1b12aac729be2337771e92bec7ee1ba74e45ad12c50b090e4a441178d484b1fd6afc590f0aca7eb0c9ecfc3d71834e3480853d0f8eb93c468f239a5e6fc1ed086d99f76c1108186f4ca5ba0bc1bc2ba470b42f2641fb2fbc4c61d17a33fc5dc4c159a57144c44b8ca606881bb66da9783403d0020fbe028355fdd9bcaf28b54e9a1834f0d69d1ab6806d7cfb881f2da74bdfd20fe10d019edc7499228a9e8d76abbad9d23b8ff5a647d36d5ea979ab69552feff56c355ed4fd04325c9391dad7167ed92c66eee4e9460209267d956e8398f819db243b0de7f30b4b93eece9de215a914fd5d803ab14ff58ce00d59a690f2aca58f4c2ea3e92299be6e54c2435be94ef571cce03d6663f6026ac39e9f49eea1b24f9ad980803ec5f2b5df646246146b679cd79f4deefc26268fe6ecee30d0ec6481b637bac2ebeba2481d6a775aa849b672245b712ee3cd2971e1bffff810c3fc183d98855479e937a67d0cd297745c31a16abfe82548a5499ad7b2c6645f20f0091c9b40687941446528f6d969fdb6df5649f10b4bb7fd4a2eeeae20ca1b20d0812b17a41916dd6fb577e9d825af0f37d086c2298a5eaef46b66d2232c019d60e224b2a4aa8d7177f05e5e14ec16d7376a22cd26924b5cfc797d887030601075d25ad13666c973a11108c5d007e46b4ea1704dc15185f396d3c756a73a337c38e577aa3a2356f05522704cd81481f88082f838d067d27373bb49f78c38933115d0714e3f4d0bce35e8d4849475a17157dc9870ab8cebeedd8b3e72ef1d760025bec570015b664168c5cf82b62a200e744deef0d8929b3377332d1207926a9f5df3da40754bd7a1ad7a04470e0b1acb8b15c650dffc730c980f8488a410ed217f06bc73be32796a2e1e1f99a03150a83ffad39b5c1a45758eb5f8673b59ef3ab66e0f86379a6f524ba9f0cba68e54028ce1994376f0bec0d93171a38e58d9de2589dbb68e65fc30293857c4a6f485a70eb5a6704f5ab1058d3e5df7c658eff6e9472825507c8025199b9232d70a5895015c6f6597c6d4367f2920266d1be7c66b2fbe71dc9dc62f16217254dd42f50d4e74756d407206c44f0eac1ba62d3461edfcc8571dcd7c14c0075d14cea2b76c6d7ccf5627754f14f4b37e43083d6dbb4c8c17a668ae882782cc49dc54f4b69afd834f00214140e321662f7623b8d6d58dc07c82d9fb2c4991dc05706de0e160012ae407b6d931da0c61189380ecaccd0b25ff56e10ec265c27763f6dec88c54be46a5fa62ba689fea04fb0dca811db539f6329e5e37f5f7cdac107fc1d3a3a5aceab980a52b5798c42d69e0c3c742502aba8a2ea7f0e9f677463e443af2a51b8f9039c3dbd71b35cb00eb1e29062575b01b40f6d8b8abf57aa6253751c40fcf4d233833610879da53f849b2fce22b29163c74137eae9433fbe703085c1c2b2f96f1f1d80c2b4cca8a8cf39580eee065ff73271a17dde37eb49d5cb107ccf47bdc00c9fee9692a688e4d9fcd552eb33d3eb85e05cce0f8e0260d895e5afc98ac6cbcc9e8f7eea22f0b5a22f1168870ff70652d79238831961591b2f78aa5a1576886094cfabc7e9004ebc391b8f111f74082692344b2a777c2e0e5ad19326df4a9a3a6aad3ccfd9fe0f0ea430454c8a20383c6a745c8fbc155a987b127fa8f91f328e70b20f96b7d2afabe18023c7301a9772b3ecc7cdd0512d87467ebde82dd75f11b5a1b1afd71f5fbded255182414123c13f7f645313943ea9a9b4f79be657083a69d011e3e2aab731d6091410eb63d4ca97fcdc05ab58444c3f04150f4b81abf8ffb143d7f6d657d8a815135ea50a972a8804df86b65f2d241aa8a0695ef1ba5e37674c8d360ad12852309f7b3edb304261a7b798e3404207066d7bdb3c489ae1de5cc912778094633e67a32b303dc1b3e9676be1dc8407daef0341b95cf63e5d27deb2a4c8094b1bd5914bf178f5420dd171a66c14e9761f08234606d8f741fd890a893c7ac3b4123fdea76edba70c14a1f596bf4706c3add3f47caefb6254283e7f896bc1d27852fbb69fed01d526fbbc1064d430d49306b2c08f39c843c8d8ed2080e56d9662b6c0554989b9df37547fc68ed80cfe969f2bdaad16cd25ab83676a25ed51b3e4ee8651c6d3ef85ba31204d50715fbc6cbe2df4434f6aba0f6dd5eab25592ee2ee3587c783a11f7294de37ebfe33f6b393b1b583f64169f0e3367457593e2666ede07aa0af8c460a6c9ccc3f10be5e06d249e6e719c70100fb379712e543d23c4de37d5902e6da00fdb19c9460d5235f0c4e8ff295625a05cde34ac1b378984544032fef247185329b0fea4bdea8f11df172b526192af3801e2fc67034df5f8c373f55b0e7adac37c215a5719173eda9b49f7eea83135a674aaa320dfb9affca8f3bf3c7b8ca602b42cbb7702a3cd1beda7caa610b5638935baca68d84ed47e91cc2142d1aeaed06a5a0c394bf7629ba5bd88537b28d3541aa102bc9568d71b0d3bcf70273837056216f8c4fae103ac4c5f0006fabff221142be32fe408430e684e3f50bb7469022dc25a9db782a7bf7575621564a5127008dfef942e97039e2927616dda80a63a604db2cc99882820101793fe45f04fcc9b109adea6d3b69c12442db37f5dff44dba7b05577d9ad826f03e24ce5dbaf18990f8d5da13ce3a90d99dafb5ecf61bccbe5e31432d297b6a96ee9d2675039d2b260174b32f3f5613a3148cbce9f6edf7b6289b300e78d3800c9e070364bc374a55b7e236a9198d33dd9b19b1ad86ff65a5d120f01bb3eb7d798f700f5d783e55fdb0a6d1bcaad1937c339169789aaa697072c71d5ec384b9e9aef6848a9a5efcef3649576c5ba16aee49b2fc256d0e068bb97997cdd6e9bc9e02f4c1e239a8c2ea1958130bbb47bfe4716a0f3fb94191cd13c480314dcd6151b0ece8a84b731da1be3da832519097635caab9e1e8549c588a57d6d3a96993e54020f84a8a652bdc8b8d8b9ea3c0c0e976859d134760afebb5dea4f0590235b3f387102e9170eb2b09163ab09c8db65c87f5b86f7d2d8657c8d4c41e0a81de529f21960746e6fef322a58a715380695b119f4cb2bb1e09c7f24095617d46385d8a0b9673eb07d92f4d4b7083e0b5116379f709ea4ecd350bf25c430bdc6899826d9dbf23f79ccd58f0a2e478a4092f80996e9480d2bad965e7fc758abdc8c3063169aa946c2ac88936e2fbfcae5fbbe94f5fee3226d2211284b7eadb5a05660a6d34361f7fd448b0cdb77522bda168e881cabd8c4254eb8e9189724fed7a122c9ee27555785cad4e7391496d8936ea3375de07d3955218ce6542ed1e5c1bfc6fe8946d472729febc8453ae54456a3d50dc42947bcae0868b58db2b9bc97896c0f9d6318c4558a36e1ea42f29314f9719b90f4e56ceb45d00c4e49e552c83d51c8dde4019868dbb75411bbe3457fd1454797cc9a07afcfbda2ffc3e1d035491d28b05fe51bf84df0365dcadc0db4e6a7b38c1f1766838b24424a4b91b5c07b55f983854c4ebc85e2dd1dc6011466d423722137aa53fb44b1b9a33d00df40ea01e1dcfe3a82e0de0eada9b1bb4d0c16be792ee43a17263d0f12476f174c02e5c59f052c4aa697127d904bb50f4588dd301141ed1cd0ee58a29d1cdc3390e2b1ae858812835caa852ac3573462d2170f655cdf85b000fe1cd100590f00ce233208929fa68a22292314f17ccbf48cfb6fa3612d4b9da553db5b8261c11753e01f84045ae24ce149dca9fd36be6e6e3895d182b0915eaddd725c722aee57cf6a2914806a1a799d9dc660b3e6d16eff5c3e731c737c0386e22d645cd27ff679debd2547561c7541596c98757ab8ae1edc44e0868181935b25f6084e20add0", @ANYRESDEC=r4], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0103000000000000000001000000080007000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000aa8baf0d607261e753cebe2aacb4df3f5e48727bf789cc72ad87b0403018dae6c9e2c6a2798edb22fd61135f6f298094e25b1576a58e439be9dee836a7"], 0x30}}, 0x0) 988.538369ms ago: executing program 1 (id=1227): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) socket$unix(0x1, 0x5, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x8, 0x56280) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020"]) 864.508681ms ago: executing program 1 (id=1230): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004880)=[{{&(0x7f0000000b00)={0xa, 0x4e1e, 0x0, @mcast1}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000b40)="f0dedb1f7bba2a474fa521a0da0ed37bc80c9b36f4ba7704bf950d7530551ebe3a0f7c5b220e53765f42d61fb3f60719f74839569e35b700257657363ce937820fc49394a5b1a6c9c20f36d7fc2b0fe134e358d528acd225991960d0259d843b7a2548e2", 0x64}, {&(0x7f0000000bc0)="00b5ce92cbe7dbc701884458519e3d6ee9a5478a8047f99ca233465bf0c288fc7b79c58949e467fd1e8b979d5d5732cc35321485b4cd12b1f61e8a59facb2bd0b434860c27c06fb49253e8d8396ceae231ae59f022f255fa85e85c74b3f37cf7cd773ecd8565528f088332e60550155bf579daba9b6235f985c4711722e3c94a2a0b793b3426c78189024d4b14dee3af56b9eeeb50cd98d9a2d74f4f93cfac8f47ff", 0xa2}, {&(0x7f0000003500)="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", 0x4a7}], 0x3}}], 0x1, 0x8001) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4) sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8030000}}], 0x1, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f00000008c0)=ANY=[@ANYRES16=r1], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$PTP_EXTTS_REQUEST2(r1, 0x43403d0e, 0x0) 828.182774ms ago: executing program 1 (id=1232): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) socket$unix(0x1, 0x5, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x8, 0x56280) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000080)={0x56, 0x2, 0x6, {0x6, 0x41}, {0xffff, 0xf23b}, @rumble={0x84e, 0x8}}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000000540)) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020"]) 797.983187ms ago: executing program 3 (id=1234): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) socket$unix(0x1, 0x5, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x8, 0x56280) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000080)={0x56, 0x2, 0x6, {0x6, 0x41}, {0xffff, 0xf23b}, @rumble={0x84e, 0x8}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f0000000540)) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020"]) 693.418807ms ago: executing program 4 (id=1236): bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x60, 0x0, 0x0, 0x80000001}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x3, 0x7ffc1ffd}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x300202, 0x100, 0x3}, 0x18) sendmsg$kcm(r1, &(0x7f0000000dc0)={&(0x7f00000009c0)=@in6={0xa, 0x4e21, 0x4, @private1={0xfc, 0x1, '\x00', 0x5}, 0x4}, 0xfffffe3c, &(0x7f0000000a00)}, 0x8010) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'gretap0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x10, 0x20, 0x7, 0x7, {{0x41, 0x4, 0x2, 0x2, 0x104, 0x64, 0x0, 0x83, 0x2f, 0x0, @rand_addr=0x64010102, @private=0xa010102, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0x84, 0x3, 0x6, [{@multicast1, 0x6}, {@remote, 0x2}, {@multicast2, 0x8}, {@empty, 0xfff}]}, @ssrr={0x89, 0x17, 0x50, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x19}, @rand_addr=0x64010100, @loopback, @multicast2]}, @rr={0x7, 0x1b, 0x54, [@private=0xa010100, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x26}, @loopback, @multicast2]}, @timestamp_addr={0x44, 0x2c, 0x26, 0x1, 0x6, [{@broadcast, 0x6}, {@loopback, 0x3}, {@remote, 0x230a}, {@private=0xa010100, 0x1ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffc}]}, @timestamp={0x44, 0x28, 0xc0, 0x0, 0x1, [0x9, 0x0, 0x1, 0x0, 0x0, 0x2, 0x3, 0x101, 0x6]}, @end, @timestamp={0x44, 0x28, 0x10, 0x0, 0x1, [0x1, 0x1, 0x5, 0x2, 0x5, 0x0, 0xc77, 0x4, 0x0]}, @generic={0x7, 0xd, "7b3c6c12be4e8ab41f7189"}, @timestamp={0x44, 0xc, 0xde, 0x0, 0x0, [0x5, 0xb67]}]}}}}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000008748000004000000ff0000000000001029eeb70870514d52caf47f201f50076e8a6d0d3075bec3e47e3e8b59a9758e203938795a61639308253ee2b252124d83beb3b3b90b5e007a5b371925ec8647666d80d9fd67f6290ecd439f106d674aedc4288d99434d62ad48a58d059a49e9d6aa8976b9403e17a6e2dbda5ea24c1f41a0bc041522b74a38dabd2e0527bf9fb9452ae9671baa832419565734e52fb4", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000e00)={0x3, 0x4}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r4}, 0x10) setitimer(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="21000000010000008100e4ff0d00000001000000", @ANYRES32=r1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="02000000020000000400"/28], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000005c0)={0x3, &(0x7f0000000580)=[{0x8000, 0xfc, 0xea, 0x41}, {0x9, 0xb, 0x5, 0x6}, {0x5, 0x3, 0xb1, 0x4}]}) statx(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x6800, 0x7ff, &(0x7f00000007c0)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000640)={0x5, &(0x7f0000000600)=[{0xe6, 0xf7, 0x8, 0x2}, {0x8000, 0x40, 0x3, 0x7}, {0x5, 0xc4, 0x7f, 0xf}, {0x6b2, 0x8, 0x9, 0x5}, {0x0, 0x3, 0x0, 0x100}]}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r7, 0x0, 0x0) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)=@delqdisc={0xc0, 0x25, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xa, 0x7}, {0xfff5, 0x3}, {0xc, 0x1}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}]}}, @q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x13}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xb60f2ed46a659126}]}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8800}, 0x34048851) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) 692.906096ms ago: executing program 1 (id=1237): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@noquota}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f00000006c0)=[{&(0x7f0000000140)="db", 0x11}], 0x1, 0x100000, 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) (fail_nth: 1) 675.876168ms ago: executing program 3 (id=1238): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000780), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) close(0xffffffffffffffff) lsm_set_self_attr(0x68, &(0x7f00000002c0)={0x66, 0x472, 0x2e, 0xe, "b8921f0098b65b8fc0d4b4aa1b80"}, 0x2e, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) ioctl$TIOCMIWAIT(r7, 0x545c, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x18) renameat2(r9, &(0x7f0000000080)='./file1\x00', r6, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000002040)=ANY=[@ANYBLOB='H\v\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="54000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000024000400000000000100008000000000000000000000000000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYRES16=r3, @ANYRES32=0x0, @ANYBLOB="380102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000002000400fcffffff400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="7c000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="38000100000001006270665f686173685f66756e6300000000000000000000000000000000000000000003000b0000000000040000000000000000000000000000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="ec0102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="8000028038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000046ff030003000000080004000000000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000008000100", @ANYRES32=0x0, @ANYBLOB="3001028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b7570000000000000000000", @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000008000100", @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100000001006e6f746966790600656572735f696e74657276616c00000000000000000000000000030003000000000004000700000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000009000300030000000800040000000000400001002400010071756575655f6964000000000000000000000000000000001b000000000000000500030003000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="c00002804c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040000000000000000000000000000000000000000000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB], 0xb48}}, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) 595.721606ms ago: executing program 4 (id=1239): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) socket$unix(0x1, 0x5, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x8, 0x56280) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020"]) 503.504764ms ago: executing program 3 (id=1240): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x403, 0x805}]}) 500.000114ms ago: executing program 1 (id=1241): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1}}}}}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000002fc0)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x44a42, 0x100) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) write$UHID_CREATE2(r2, &(0x7f0000000100)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x4) 499.730134ms ago: executing program 4 (id=1242): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e40)={{r0}, &(0x7f0000000dc0), &(0x7f0000000e00)=r1}, 0x20) 409.784762ms ago: executing program 4 (id=1243): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f485000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x60, 0x0, 0x0, 0x80000001}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x3, 0x7ffc1ffd}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x300202, 0x100, 0x3}, 0x18) sendmsg$kcm(r1, &(0x7f0000000dc0)={&(0x7f00000009c0)=@in6={0xa, 0x4e21, 0x4, @private1={0xfc, 0x1, '\x00', 0x5}, 0x4}, 0xfffffe3c, &(0x7f0000000a00)}, 0x8010) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'gretap0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x10, 0x20, 0x7, 0x7, {{0x41, 0x4, 0x2, 0x2, 0x104, 0x64, 0x0, 0x83, 0x2f, 0x0, @rand_addr=0x64010102, @private=0xa010102, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0x84, 0x3, 0x6, [{@multicast1, 0x6}, {@remote, 0x2}, {@multicast2, 0x8}, {@empty, 0xfff}]}, @ssrr={0x89, 0x17, 0x50, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x19}, @rand_addr=0x64010100, @loopback, @multicast2]}, @rr={0x7, 0x1b, 0x54, [@private=0xa010100, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x26}, @loopback, @multicast2]}, @timestamp_addr={0x44, 0x2c, 0x26, 0x1, 0x6, [{@broadcast, 0x6}, {@loopback, 0x3}, {@remote, 0x230a}, {@private=0xa010100, 0x1ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffc}]}, @timestamp={0x44, 0x28, 0xc0, 0x0, 0x1, [0x9, 0x0, 0x1, 0x0, 0x0, 0x2, 0x3, 0x101, 0x6]}, @end, @timestamp={0x44, 0x28, 0x10, 0x0, 0x1, [0x1, 0x1, 0x5, 0x2, 0x5, 0x0, 0xc77, 0x4, 0x0]}, @generic={0x7, 0xd, "7b3c6c12be4e8ab41f7189"}, @timestamp={0x44, 0xc, 0xde, 0x0, 0x0, [0x5, 0xb67]}]}}}}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000008748000004000000ff0000000000001029eeb70870514d52caf47f201f50076e8a6d0d3075bec3e47e3e8b59a9758e203938795a61639308253ee2b252124d83beb3b3b90b5e007a5b371925ec8647666d80d9fd67f6290ecd439f106d674aedc4288d99434d62ad48a58d059a49e9d6aa8976b9403e17a6e2dbda5ea24c1f41a0bc041522b74a38dabd2e0527bf9fb9452ae9671baa832419565734e52fb4", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000e00)={0x3, 0x4}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r4}, 0x10) setitimer(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="21000000010000008100e4ff0d00000001000000", @ANYRES32=r1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="02000000020000000400"/28], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000005c0)={0x3, &(0x7f0000000580)=[{0x8000, 0xfc, 0xea, 0x41}, {0x9, 0xb, 0x5, 0x6}, {0x5, 0x3, 0xb1, 0x4}]}) statx(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x6800, 0x7ff, &(0x7f00000007c0)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000640)={0x5, &(0x7f0000000600)=[{0xe6, 0xf7, 0x8, 0x2}, {0x8000, 0x40, 0x3, 0x7}, {0x5, 0xc4, 0x7f, 0xf}, {0x6b2, 0x8, 0x9, 0x5}, {0x0, 0x3, 0x0, 0x100}]}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r7, 0x0, 0x0) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)=@delqdisc={0xb8, 0x25, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xa, 0x7}, {0xfff5, 0x3}, {0xc, 0x1}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x13}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xb60f2ed46a659126}]}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8800}, 0x34048851) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) 305.021252ms ago: executing program 4 (id=1244): socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x16, "542f1f202999fbd30e11c90ec30389f506ceb4b4ce12"}, &(0x7f0000000040)=0x1e) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'vcan0\x00'}}, 0x1e) close(r2) 287.114054ms ago: executing program 4 (id=1245): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000004910fc0e000000000000040000000000", @ANYRES16=0x0, @ANYBLOB='\x00'/20, @ANYRESHEX, @ANYRES32, @ANYRES16], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000b4d6020305000000000000000000000000090800054000000000080003400000dbb0090002000000000502000000a36639e1cda845625f8138afe8a147d8ae627eac3aa546b4c321518a45cb98d57fbeafd60ac5c1c12e84cbc793ee34255d9bba5d07003ca7e35b0d3b8b0b3bbf06d7f762c03bf5181a341b8effaf5456ea352582700a63f8eb8f477181c0b405ae3cdb8621bbadc5efed96e7d8fa69834ff70ccaef47241459ff7c3f"], 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x4004) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000022000000008000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_ima(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)=@md5={0x1, "6e8035874a4684bfa3238a3aa17e09fa"}, 0x11, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000002c0)=@get={0x1, 0x0, 0xbf6}) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x11884, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x89) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff7f000000000000", @ANYRES32, @ANYBLOB="0010000000000000000000000000f1ffffff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001040)='./file0\x00', 0x80000e, &(0x7f00000000c0)={[], [{@dont_measure}]}, 0x3, 0x440, &(0x7f00000006c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r6, 0x8004587d, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, 0x0) move_mount(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', r5, 0x0, 0x1) setuid(0x0) llistxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x6}]}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 245.148247ms ago: executing program 3 (id=1246): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 219.51294ms ago: executing program 1 (id=1247): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) socket$unix(0x1, 0x5, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x8, 0x56280) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000080)={0x56, 0x2, 0x6, {0x6, 0x41}, {0xffff, 0xf23b}, @rumble={0x84e, 0x8}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f0000000540)) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020"]) 193.000522ms ago: executing program 3 (id=1248): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @initr0, @exit, @alu={0x6, 0x0, 0xa, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 167.710005ms ago: executing program 3 (id=1249): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x2}]}}]}, 0x3c}}, 0x0) socket$kcm(0xa, 0x2, 0x73) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x240042, 0x0) fcntl$dupfd(r4, 0x0, r4) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f0000000200)={{0x93, 0x6}, 'port1\x00', 0x31, 0x100000, 0x2, 0xffffffff, 0xffffffff, 0x0, 0x5, 0x0, 0x4, 0xb}) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x500, &(0x7f00000001c0)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b87030b0000001f00000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) accept$packet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x3c000025, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703140000001f00000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 137.602447ms ago: executing program 2 (id=1250): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000780), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) close(0xffffffffffffffff) lsm_set_self_attr(0x68, &(0x7f00000002c0)={0x66, 0x472, 0x2e, 0xe, "b8921f0098b65b8fc0d4b4aa1b80"}, 0x2e, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) ioctl$TIOCMIWAIT(r7, 0x545c, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x18) renameat2(r9, &(0x7f0000000080)='./file1\x00', r6, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000002040)=ANY=[@ANYBLOB='H\v\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="54000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000024000400000000000100008000000000000000000000000000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYRES16=r3, @ANYRES32=0x0, @ANYBLOB="380102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000002000400fcffffff400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="7c000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="38000100000001006270665f686173685f66756e6300000000000000000000000000000000000000000003000b0000000000040000000000000000000000000000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="ec0102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="8000028038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000046ff030003000000080004000000000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000008000100", @ANYRES32=0x0, @ANYBLOB="3001028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75700000000000000000000000000000000000000000000500", @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000008000100", @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100000001006e6f746966790600656572735f696e74657276616c00000000000000000000000000030003000000000004000700000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000009000300030000000800040000000000400001002400010071756575655f6964000000000000000000000000000000001b000000000000000500030003000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="c00002804c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040000000000000000000000000000000000000000000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB], 0xb48}}, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) 133.827498ms ago: executing program 0 (id=1177): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x3, 0x0, 0x200002af, 0x9b1], 0x2, 0x0, 0x0}, 0x78) 24.282788ms ago: executing program 0 (id=1251): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000001565424728624d94884acda0eeb4796ddc6d954b4e4bb312c6375c7199b7a6986c6b91fc89e9fcbb229be87cb74c329b39bb4bf3d421803f79c19c81261ebe4119fc038fe808c3c9281b5c33c97d9dbfbd9697e56ab0204273fd35bc2d9b2f6e899fcd38cdb95e7c411532", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fcffffff00"/27], 0x50) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x4, 0x0, 0xf}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x1}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000440)) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) 0s ago: executing program 0 (id=1252): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e40)={{r0}, &(0x7f0000000dc0), &(0x7f0000000e00)=r1}, 0x20) kernel console output (not intermixed with test programs): 400 audit(1728181245.236:5144): avc: denied { setopt } for pid=10091 comm="syz.3.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.030319][ T29] audit: type=1400 audit(1728181245.246:5145): avc: denied { bind } for pid=10091 comm="syz.3.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.049809][ T29] audit: type=1400 audit(1728181245.246:5146): avc: denied { name_bind } for pid=10091 comm="syz.3.752" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 97.063076][T10110] loop3: detected capacity change from 0 to 128 [ 97.072062][ T29] audit: type=1400 audit(1728181245.246:5147): avc: denied { node_bind } for pid=10091 comm="syz.3.752" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 97.251094][T10137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.261526][T10137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.272827][T10137] loop3: detected capacity change from 0 to 512 [ 97.287997][T10137] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 97.300525][T10137] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.757: invalid indirect mapped block 4294967295 (level 1) [ 97.314844][T10137] EXT4-fs (loop3): Remounting filesystem read-only [ 97.322420][T10137] EXT4-fs (loop3): 2 truncates cleaned up [ 97.330401][T10137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.343017][T10137] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 97.350417][T10137] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.483136][ T9563] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 97.499890][ T8969] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 97.521671][ T4505] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.572320][ T4505] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.647494][T10169] chnl_net:caif_netlink_parms(): no params data found [ 97.659807][ T4505] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.694091][T10169] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.701264][T10169] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.708612][T10169] bridge_slave_0: entered allmulticast mode [ 97.709363][ T9938] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.715029][T10169] bridge_slave_0: entered promiscuous mode [ 97.733724][ T4505] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.748126][T10169] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.755542][T10169] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.763134][T10169] bridge_slave_1: entered allmulticast mode [ 97.769659][T10169] bridge_slave_1: entered promiscuous mode [ 97.790529][T10169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.801339][T10169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.830659][T10169] team0: Port device team_slave_0 added [ 97.841875][T10169] team0: Port device team_slave_1 added [ 97.883783][ T4505] bridge_slave_1: left allmulticast mode [ 97.889566][ T4505] bridge_slave_1: left promiscuous mode [ 97.895573][ T4505] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.905486][ T4505] bridge_slave_0: left allmulticast mode [ 97.911213][ T4505] bridge_slave_0: left promiscuous mode [ 97.916906][ T4505] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.011247][ T8768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.040842][ T9703] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.064547][T10212] loop0: detected capacity change from 0 to 512 [ 98.068616][ T4505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.081455][ T4505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.091601][ T4505] bond0 (unregistering): Released all slaves [ 98.100048][T10212] EXT4-fs error (device loop0): ext4_quota_enable:7049: comm syz.0.764: Bad quota inum: 1, type: 0 [ 98.111721][T10212] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=1). Please run e2fsck to fix. [ 98.111902][T10169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.127131][T10212] EXT4-fs (loop0): mount failed [ 98.133423][T10169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.164260][T10169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.176539][T10216] vhci_hcd: invalid port number 157 [ 98.181894][T10216] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 98.191573][T10169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.198824][T10169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.224990][T10169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.269911][T10218] loop1: detected capacity change from 0 to 512 [ 98.276956][T10218] EXT4-fs: Ignoring removed bh option [ 98.282626][T10218] EXT4-fs: Ignoring removed i_version option [ 98.314422][T10218] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 98.316601][ T4505] hsr_slave_0: left promiscuous mode [ 98.332434][ T4505] hsr_slave_1: left promiscuous mode [ 98.339539][T10218] Quota error (device loop1): v2_read_file_info: Number of blocks too big for quota file size (103079221248 > 6144). [ 98.358749][ T4505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.358866][T10229] loop3: detected capacity change from 0 to 128 [ 98.366154][ T4505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.373099][T10218] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 98.395686][T10218] EXT4-fs (loop1): mount failed [ 98.398246][ T4505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.408053][ T4505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.417782][ T4505] veth1_macvtap: left promiscuous mode [ 98.423424][ T4505] veth0_macvtap: left promiscuous mode [ 98.423559][T10228] loop0: detected capacity change from 0 to 2048 [ 98.429013][ T4505] veth1_vlan: left promiscuous mode [ 98.440713][ T4505] veth0_vlan: left promiscuous mode [ 98.441311][T10229] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.472310][T10229] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 98.525062][T10228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.533166][T10235] loop1: detected capacity change from 0 to 128 [ 98.590260][T10235] syz.1.770: attempt to access beyond end of device [ 98.590260][T10235] loop1: rw=0, sector=121, nr_sectors = 119 limit=128 [ 98.641041][ T4505] team0 (unregistering): Port device team_slave_1 removed [ 98.651832][ T4505] team0 (unregistering): Port device team_slave_0 removed [ 98.739627][ T29] audit: type=1400 audit(1728181246.976:5148): avc: denied { write } for pid=10227 comm="syz.0.769" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 98.812655][T10240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.858507][T10169] hsr_slave_0: entered promiscuous mode [ 98.878502][T10240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.903970][T10169] hsr_slave_1: entered promiscuous mode [ 99.095794][ T8707] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.207341][T10184] chnl_net:caif_netlink_parms(): no params data found [ 99.257061][ T9703] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.393266][T10265] loop0: detected capacity change from 0 to 512 [ 99.441137][ T4505] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.470790][T10184] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.478587][T10184] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.487554][T10265] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.773: invalid indirect mapped block 4294967295 (level 1) [ 99.505205][T10265] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.773: invalid indirect mapped block 4294967295 (level 1) [ 99.528112][T10184] bridge_slave_0: entered allmulticast mode [ 99.540163][T10184] bridge_slave_0: entered promiscuous mode [ 99.562349][T10184] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.569586][T10184] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.580118][T10265] EXT4-fs (loop0): 2 truncates cleaned up [ 99.586357][T10265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.600329][T10184] bridge_slave_1: entered allmulticast mode [ 99.610009][T10184] bridge_slave_1: entered promiscuous mode [ 99.620062][ T4505] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.636409][T10286] loop3: detected capacity change from 0 to 128 [ 99.675095][ T4505] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.702720][T10184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.727424][T10286] syz.3.774: attempt to access beyond end of device [ 99.727424][T10286] loop3: rw=0, sector=121, nr_sectors = 119 limit=128 [ 99.744236][T10169] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.756411][T10184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.768572][ T4505] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.806322][T10169] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.847016][T10169] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.874058][T10184] team0: Port device team_slave_0 added [ 99.894541][T10184] team0: Port device team_slave_1 added [ 99.917993][T10169] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.943687][ T29] audit: type=1326 audit(1728181248.176:5149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10314 comm="syz.3.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401eb4dff9 code=0x7ffc0000 [ 99.967523][ T29] audit: type=1326 audit(1728181248.176:5150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10314 comm="syz.3.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401eb4dff9 code=0x7ffc0000 [ 99.991309][ T29] audit: type=1326 audit(1728181248.176:5151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10314 comm="syz.3.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f401eb4dff9 code=0x7ffc0000 [ 100.036870][T10184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.043862][T10184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.070096][T10184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.088528][ T29] audit: type=1326 audit(1728181248.176:5152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10314 comm="syz.3.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401eb4dff9 code=0x7ffc0000 [ 100.119091][T10184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.126064][T10184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.137098][T10332] ALSA: seq fatal error: cannot create timer (-22) [ 100.152471][T10184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.262723][T10184] hsr_slave_0: entered promiscuous mode [ 100.274143][T10184] hsr_slave_1: entered promiscuous mode [ 100.285211][T10184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.292926][T10184] Cannot create hsr debugfs directory [ 100.299374][ T4505] bridge_slave_1: left allmulticast mode [ 100.305131][ T4505] bridge_slave_1: left promiscuous mode [ 100.310855][ T4505] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.346091][ T4505] bridge_slave_0: left allmulticast mode [ 100.351799][ T4505] bridge_slave_0: left promiscuous mode [ 100.357542][ T4505] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.427628][T10370] __nla_validate_parse: 5 callbacks suppressed [ 100.427641][T10370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.783'. [ 100.445986][T10370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.783'. [ 100.520519][ T4505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.541698][ T4505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.555082][ T4505] bond0 (unregistering): Released all slaves [ 100.564700][T10398] loop3: detected capacity change from 0 to 256 [ 100.639435][ T4505] hsr_slave_0: left promiscuous mode [ 100.651051][ T4505] hsr_slave_1: left promiscuous mode [ 100.659837][ T4505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.667373][ T4505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.677100][ T4505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.684793][ T4505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.697616][ T4505] veth1_macvtap: left promiscuous mode [ 100.703144][ T4505] veth0_macvtap: left promiscuous mode [ 100.708789][ T4505] veth1_vlan: left promiscuous mode [ 100.714375][ T4505] veth0_vlan: left promiscuous mode [ 100.810003][ T4505] team0 (unregistering): Port device team_slave_1 removed [ 100.820676][ T4505] team0 (unregistering): Port device team_slave_0 removed [ 100.916665][T10169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.933204][T10169] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.960836][ T7605] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.968057][ T7605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.992193][ T3660] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.999454][ T3660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.021645][T10169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.113047][T10169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.266083][T10184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.287501][T10169] veth0_vlan: entered promiscuous mode [ 101.295699][T10184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.311238][T10169] veth1_vlan: entered promiscuous mode [ 101.319027][T10184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.340987][T10184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.361695][T10169] veth0_macvtap: entered promiscuous mode [ 101.369567][T10523] futex_wake_op: syz.3.785 tries to shift op by -1; fix this program [ 101.390177][T10169] veth1_macvtap: entered promiscuous mode [ 101.408827][T10169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.419742][T10169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.429741][T10169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.440186][T10169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.450065][T10169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.460747][T10169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.479607][T10169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.487899][T10169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.498532][T10169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.508525][T10169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.519020][T10169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.528944][T10169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.539650][T10169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.553668][T10169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.569801][T10169] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.578639][T10169] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.587354][T10169] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.597129][T10169] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.637589][T10184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.650709][T10537] loop3: detected capacity change from 0 to 164 [ 101.672447][T10184] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.680990][T10537] Unable to read rock-ridge attributes [ 101.688086][T10537] Unable to read rock-ridge attributes [ 101.707615][ T3653] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.714793][ T3653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.723643][T10537] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 101.742386][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.749599][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.813767][T10184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 101.824385][T10184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.906920][T10570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.919413][T10184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.926904][T10570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.946566][T10570] loop1: detected capacity change from 0 to 512 [ 101.966129][T10570] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 101.982906][T10570] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.792: invalid indirect mapped block 4294967295 (level 1) [ 102.012941][T10570] EXT4-fs (loop1): Remounting filesystem read-only [ 102.014622][T10587] loop2: detected capacity change from 0 to 128 [ 102.019653][T10570] EXT4-fs (loop1): 2 truncates cleaned up [ 102.032414][T10570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.046313][T10570] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 102.054821][T10570] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.080934][T10587] syz.2.795: attempt to access beyond end of device [ 102.080934][T10587] loop2: rw=0, sector=121, nr_sectors = 119 limit=128 [ 102.126449][T10594] loop3: detected capacity change from 0 to 1024 [ 102.136662][T10184] veth0_vlan: entered promiscuous mode [ 102.138085][T10594] EXT4-fs: Ignoring removed orlov option [ 102.145922][T10184] veth1_vlan: entered promiscuous mode [ 102.147802][T10594] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.181472][T10594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.212850][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 102.212865][ T29] audit: type=1326 audit(1728181250.446:5298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10599 comm="syz.2.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645530dff9 code=0x7ffc0000 [ 102.217665][T10184] veth0_macvtap: entered promiscuous mode [ 102.219135][ T29] audit: type=1326 audit(1728181250.446:5299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10599 comm="syz.2.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645530dff9 code=0x7ffc0000 [ 102.251843][T10184] veth1_macvtap: entered promiscuous mode [ 102.280005][ T29] audit: type=1326 audit(1728181250.446:5300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10599 comm="syz.2.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f645530dff9 code=0x7ffc0000 [ 102.303512][ T29] audit: type=1326 audit(1728181250.446:5301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10599 comm="syz.2.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645530dff9 code=0x7ffc0000 [ 102.327733][ T29] audit: type=1326 audit(1728181250.446:5302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10599 comm="syz.2.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f645530dff9 code=0x7ffc0000 [ 102.342192][T10184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.351378][ T29] audit: type=1326 audit(1728181250.446:5303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10599 comm="syz.2.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645530dff9 code=0x7ffc0000 [ 102.361830][T10184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.385120][ T29] audit: type=1326 audit(1728181250.446:5304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10599 comm="syz.2.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f645530dff9 code=0x7ffc0000 [ 102.394925][T10184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.394940][T10184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.394953][T10184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.394964][T10184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.394975][T10184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.418756][ T29] audit: type=1326 audit(1728181250.446:5305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10599 comm="syz.2.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645530dff9 code=0x7ffc0000 [ 102.418779][ T29] audit: type=1326 audit(1728181250.446:5306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10599 comm="syz.2.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645530dff9 code=0x7ffc0000 [ 102.429433][T10184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.439196][ T29] audit: type=1326 audit(1728181250.446:5307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10599 comm="syz.2.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f645530dff9 code=0x7ffc0000 [ 102.526479][T10594] netlink: 16 bytes leftover after parsing attributes in process `syz.3.796'. [ 102.539070][T10184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.551947][T10594] netlink: 268 bytes leftover after parsing attributes in process `syz.3.796'. [ 102.551965][T10594] netlink: 2356 bytes leftover after parsing attributes in process `syz.3.796'. [ 102.595910][T10600] futex_wake_op: syz.2.798 tries to shift op by -1; fix this program [ 102.597446][ T9703] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.615346][T10184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.626010][T10184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.627162][ T8707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.635825][T10184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.655329][T10184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.665161][T10184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.675696][T10184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.686019][T10184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.696925][T10184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.724960][T10604] loop0: detected capacity change from 0 to 256 [ 102.727375][T10608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.734912][T10184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.746896][T10604] msdos: Unknown parameter 'fowner>00000000000000000000' [ 102.755435][T10184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.756057][T10608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.764297][T10184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.780762][T10184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.789951][T10184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.807387][T10609] loop3: detected capacity change from 0 to 512 [ 102.817810][T10607] netlink: 'syz.3.800': attribute type 10 has an invalid length. [ 102.825692][T10607] netlink: 40 bytes leftover after parsing attributes in process `syz.3.800'. [ 102.829393][T10609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.848682][T10609] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.849716][T10607] bridge0: port 3(ipvlan0) entered blocking state [ 102.865932][T10607] bridge0: port 3(ipvlan0) entered disabled state [ 102.873382][T10607] ipvlan0: entered allmulticast mode [ 102.878787][T10607] veth0_vlan: entered allmulticast mode [ 102.885145][T10607] ipvlan0: left allmulticast mode [ 102.890358][T10607] veth0_vlan: left allmulticast mode [ 102.897228][T10607] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 102.920029][T10607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.800'. [ 102.942230][ T8707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.958894][T10616] loop4: detected capacity change from 0 to 256 [ 102.965613][T10616] msdos: Unknown parameter 'fowner>00000000000000000000' [ 103.006594][T10620] loop3: detected capacity change from 0 to 512 [ 103.015016][T10620] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 103.026637][T10620] EXT4-fs (loop3): 1 truncate cleaned up [ 103.034330][T10620] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.462973][T10676] loop1: detected capacity change from 0 to 1024 [ 103.470960][T10676] EXT4-fs: Ignoring removed orlov option [ 103.476738][T10676] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.506038][T10676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.533221][T10610] Process accounting resumed [ 103.560776][T10676] netlink: 16 bytes leftover after parsing attributes in process `syz.1.808'. [ 103.569982][T10676] netlink: 268 bytes leftover after parsing attributes in process `syz.1.808'. [ 103.578956][T10676] netlink: 2356 bytes leftover after parsing attributes in process `syz.1.808'. [ 103.583098][T10689] loop0: detected capacity change from 0 to 2048 [ 103.612661][T10689] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.656997][ T8768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.689536][T10689] sd 0:0:1:0: device reset [ 103.728354][T10705] 9pnet_fd: Insufficient options for proto=fd [ 103.805486][T10616] Process accounting resumed [ 103.881110][T10722] loop4: detected capacity change from 0 to 512 [ 103.928264][ T8707] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 103.948221][ T4499] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 103.999132][ T4499] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 1 with error 28 [ 104.011893][ T4499] EXT4-fs (loop0): This should not happen!! Data will be lost [ 104.011893][ T4499] [ 104.021560][ T4499] EXT4-fs (loop0): Total free blocks count 0 [ 104.027552][ T4499] EXT4-fs (loop0): Free/Dirty block details [ 104.033480][ T4499] EXT4-fs (loop0): free_blocks=2415919104 [ 104.039357][ T4499] EXT4-fs (loop0): dirty_blocks=16 [ 104.044480][ T4499] EXT4-fs (loop0): Block reservation details [ 104.050486][ T4499] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 104.062014][T10722] EXT4-fs (loop4): too many log groups per flexible block group [ 104.062804][ T9703] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.069748][T10722] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 104.085712][T10722] EXT4-fs (loop4): mount failed [ 104.118363][T10722] loop4: detected capacity change from 0 to 164 [ 104.140367][T10624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.155696][T10722] rock: directory entry would overflow storage [ 104.161951][T10722] rock: sig=0x4f50, size=4, remaining=3 [ 104.167564][T10722] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 104.243767][T10760] loop0: detected capacity change from 0 to 128 [ 104.263193][T10764] ALSA: seq fatal error: cannot create timer (-22) [ 104.270627][T10760] vfat: Unknown parameter 'logon' [ 104.303345][T10760] loop0: detected capacity change from 0 to 512 [ 104.341545][T10760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.354362][T10760] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.368255][T10771] vhci_hcd: invalid port number 157 [ 104.373621][T10771] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 104.393423][ T9703] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.439011][T10779] loop0: detected capacity change from 0 to 1024 [ 104.445667][T10779] EXT4-fs: Ignoring removed orlov option [ 104.451498][T10779] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.463434][T10781] loop4: detected capacity change from 0 to 256 [ 104.470148][T10781] msdos: Unknown parameter 'fowner>00000000000000000000' [ 104.479555][T10779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.536029][T10761] chnl_net:caif_netlink_parms(): no params data found [ 104.561226][ T9703] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.572797][ T4499] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.634072][T10761] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.641389][T10761] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.661157][T10761] bridge_slave_0: entered allmulticast mode [ 104.662805][T10793] futex_wake_op: syz.0.824 tries to shift op by -1; fix this program [ 104.674687][T10761] bridge_slave_0: entered promiscuous mode [ 104.695845][ T4499] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.711841][T10761] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.718998][T10761] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.726890][T10761] bridge_slave_1: entered allmulticast mode [ 104.747881][T10761] bridge_slave_1: entered promiscuous mode [ 104.763006][ T4499] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.814192][T10761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.831291][ T4499] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.851557][T10761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.891046][T10761] team0: Port device team_slave_0 added [ 104.902250][T10761] team0: Port device team_slave_1 added [ 104.926115][T10761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.933425][T10761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.959715][T10761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.973097][T10761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.975108][T10805] futex_wake_op: syz.0.830 tries to shift op by -1; fix this program [ 104.980161][T10761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.980189][T10761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.043233][T10761] hsr_slave_0: entered promiscuous mode [ 105.049736][T10761] hsr_slave_1: entered promiscuous mode [ 105.056177][T10761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.067492][T10761] Cannot create hsr debugfs directory [ 105.081950][ T4499] bridge_slave_1: left allmulticast mode [ 105.087619][ T4499] bridge_slave_1: left promiscuous mode [ 105.093281][ T4499] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.119238][ T4499] bridge_slave_0: left allmulticast mode [ 105.125090][ T4499] bridge_slave_0: left promiscuous mode [ 105.131021][ T4499] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.219432][T10810] loop0: detected capacity change from 0 to 256 [ 105.240482][ T4499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.263194][ T4499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.280152][ T4499] bond0 (unregistering): Released all slaves [ 105.308354][T10786] Process accounting resumed [ 105.350753][ T4499] hsr_slave_0: left promiscuous mode [ 105.360032][ T4499] hsr_slave_1: left promiscuous mode [ 105.388147][ T4499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.396236][ T4499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.424092][T10815] loop4: detected capacity change from 0 to 4096 [ 105.432647][ T4499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.438225][T10815] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.440192][ T4499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.479937][T10815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.493320][ T4499] veth1_macvtap: left promiscuous mode [ 105.499021][ T4499] veth0_macvtap: left promiscuous mode [ 105.504996][ T4499] veth1_vlan: left promiscuous mode [ 105.510471][ T4499] veth0_vlan: left promiscuous mode [ 105.539880][T10815] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #15: comm syz.4.832: corrupted inode contents [ 105.567965][T10815] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #15: comm syz.4.832: mark_inode_dirty error [ 105.598784][T10815] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #15: comm syz.4.832: corrupted inode contents [ 105.623259][T10815] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.832: mark_inode_dirty error [ 105.635454][T10815] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #15: comm syz.4.832: corrupted inode contents [ 105.650189][T10815] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.832: mark_inode_dirty error [ 105.661936][ T4499] team0 (unregistering): Port device team_slave_1 removed [ 105.669409][T10815] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #15: comm syz.4.832: corrupted inode contents [ 105.684103][T10815] EXT4-fs error (device loop4): ext4_truncate:4208: inode #15: comm syz.4.832: mark_inode_dirty error [ 105.684154][ T4499] team0 (unregistering): Port device team_slave_0 removed [ 105.705869][T10815] EXT4-fs error (device loop4): ext4_evict_inode:267: comm syz.4.832: couldn't truncate inode 15 (err -117) [ 105.796771][T10835] __nla_validate_parse: 6 callbacks suppressed [ 105.796800][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.834'. [ 105.815664][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.834'. [ 105.891466][T10184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.941239][T10853] loop4: detected capacity change from 0 to 1024 [ 105.950585][T10853] EXT4-fs: Ignoring removed orlov option [ 105.956431][T10853] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.972549][T10856] loop2: detected capacity change from 0 to 256 [ 105.977886][T10858] loop0: detected capacity change from 0 to 512 [ 105.986084][T10858] EXT4-fs: Ignoring removed bh option [ 105.991683][T10858] EXT4-fs: Ignoring removed i_version option [ 106.000124][T10858] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.021431][T10853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.069270][T10858] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 106.106643][T10761] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.121462][T10853] netlink: 16 bytes leftover after parsing attributes in process `syz.4.836'. [ 106.130446][T10853] netlink: 268 bytes leftover after parsing attributes in process `syz.4.836'. [ 106.139690][T10853] netlink: 2356 bytes leftover after parsing attributes in process `syz.4.836'. [ 106.163286][T10858] EXT4-fs (loop0): mount failed [ 106.172459][T10761] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.184109][T10761] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.192668][T10184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.217174][T10761] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.257720][T10891] loop1: detected capacity change from 0 to 512 [ 106.268282][T10891] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 106.282385][T10891] EXT4-fs (loop1): 1 truncate cleaned up [ 106.288425][T10891] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.363138][T10895] futex_wake_op: syz.4.840 tries to shift op by -1; fix this program [ 106.409061][T10919] loop0: detected capacity change from 0 to 256 [ 106.416718][T10919] msdos: Unknown parameter 'fowner>00000000000000000000' [ 106.417201][T10761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.436717][T10761] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.446574][ T3660] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.453749][ T3660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.500154][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.507258][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.553907][T10928] loop4: detected capacity change from 0 to 1024 [ 106.573182][T10928] EXT4-fs: Ignoring removed orlov option [ 106.578999][T10928] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.602947][T10928] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.629372][T10928] netlink: 16 bytes leftover after parsing attributes in process `syz.4.846'. [ 106.638293][T10928] netlink: 268 bytes leftover after parsing attributes in process `syz.4.846'. [ 106.647416][T10928] netlink: 2356 bytes leftover after parsing attributes in process `syz.4.846'. [ 106.657504][T10761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.708475][T10949] ALSA: seq fatal error: cannot create timer (-22) [ 106.725984][T10184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.783126][T10961] loop2: detected capacity change from 0 to 256 [ 106.814679][T10761] veth0_vlan: entered promiscuous mode [ 106.827085][T10761] veth1_vlan: entered promiscuous mode [ 106.859150][T10761] veth0_macvtap: entered promiscuous mode [ 106.873695][T10761] veth1_macvtap: entered promiscuous mode [ 106.884332][T10975] vhci_hcd: invalid port number 157 [ 106.889819][T10975] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 106.895392][T10761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.907626][T10761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.917574][T10761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.928555][T10761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.938473][T10761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.948993][T10761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.949009][T10761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.949024][T10761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.950825][T10761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.954604][T10761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.954622][T10761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.954632][T10761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.954705][T10761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.954714][T10761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.954735][T10761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.954744][T10761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.954813][T10761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.955580][T10761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.094458][T10761] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.103373][T10761] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.112307][T10761] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.121186][T10761] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.222000][ T29] kauditd_printk_skb: 488 callbacks suppressed [ 107.222016][ T29] audit: type=1326 audit(1728181255.446:5795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11025 comm="syz.2.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645530dff9 code=0x7ffc0000 [ 107.251714][ T29] audit: type=1326 audit(1728181255.446:5796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11025 comm="syz.2.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645530dff9 code=0x7ffc0000 [ 107.262745][ T8768] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 107.275974][ T29] audit: type=1326 audit(1728181255.446:5797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11025 comm="syz.2.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f645530dff9 code=0x7ffc0000 [ 107.314172][ T29] audit: type=1326 audit(1728181255.446:5798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11025 comm="syz.2.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645530dff9 code=0x7ffc0000 [ 107.337743][ T29] audit: type=1326 audit(1728181255.446:5799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11025 comm="syz.2.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f645530dff9 code=0x7ffc0000 [ 107.361749][ T29] audit: type=1326 audit(1728181255.446:5800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11025 comm="syz.2.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645530dff9 code=0x7ffc0000 [ 107.385476][ T29] audit: type=1326 audit(1728181255.446:5801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11025 comm="syz.2.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f645530dff9 code=0x7ffc0000 [ 107.409157][ T29] audit: type=1326 audit(1728181255.446:5802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11025 comm="syz.2.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645530dff9 code=0x7ffc0000 [ 107.430372][T11026] futex_wake_op: syz.2.854 tries to shift op by -1; fix this program [ 107.432714][ T29] audit: type=1326 audit(1728181255.446:5803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11025 comm="syz.2.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f645530dff9 code=0x7ffc0000 [ 107.464225][ T29] audit: type=1326 audit(1728181255.446:5804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11025 comm="syz.2.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645530dff9 code=0x7ffc0000 [ 107.500969][T11032] loop2: detected capacity change from 0 to 128 [ 107.541950][T10919] Process accounting resumed [ 107.552684][T11038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.857'. [ 107.564296][T11038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.857'. [ 107.618790][T11046] ALSA: seq fatal error: cannot create timer (-22) [ 107.670762][T11055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.681205][T11055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.689990][T10898] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.705225][ T7609] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.712425][T11052] loop2: detected capacity change from 0 to 2048 [ 107.727262][T11056] loop4: detected capacity change from 0 to 256 [ 107.782716][ T7609] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.808729][T11052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.823045][T11061] loop3: detected capacity change from 0 to 2048 [ 107.902792][ T7609] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.916147][T11061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.159841][T10761] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.176907][ T7609] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.376662][ T7609] bridge_slave_1: left allmulticast mode [ 108.382681][ T7609] bridge_slave_1: left promiscuous mode [ 108.388751][ T7609] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.581564][ T7609] bridge_slave_0: left allmulticast mode [ 108.587350][ T7609] bridge_slave_0: left promiscuous mode [ 108.593048][ T7609] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.659121][T11086] loop0: detected capacity change from 0 to 256 [ 108.675030][T11080] futex_wake_op: syz.3.868 tries to shift op by -1; fix this program [ 108.683912][T11086] msdos: Unknown parameter 'fowner>00000000000000000000' [ 108.694462][T10169] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.814828][T11107] ALSA: seq fatal error: cannot create timer (-22) [ 108.844077][T11110] loop2: detected capacity change from 0 to 256 [ 108.849801][T11105] vhci_hcd: invalid port number 157 [ 108.855687][T11105] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 108.890270][T11116] loop3: detected capacity change from 0 to 128 [ 108.910381][ T7609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.921247][T11117] vhci_hcd: invalid port number 157 [ 108.921287][ T7609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.926449][T11117] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 108.944584][ T7609] bond0 (unregistering): Released all slaves [ 109.014638][ T7609] hsr_slave_0: left promiscuous mode [ 109.027633][ T7609] hsr_slave_1: left promiscuous mode [ 109.034096][ T7609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.042027][ T7609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.049808][ T7609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.057334][ T7609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.073950][ T7609] veth1_macvtap: left promiscuous mode [ 109.080461][ T7609] veth0_macvtap: left promiscuous mode [ 109.086126][ T7609] veth1_vlan: left promiscuous mode [ 109.091556][ T7609] veth0_vlan: left promiscuous mode [ 109.125187][T11128] loop4: detected capacity change from 0 to 2048 [ 109.162171][T11128] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.183318][T10184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.211750][T11141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.223341][T11140] loop4: detected capacity change from 0 to 2048 [ 109.232507][T11141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.241154][ T7609] team0 (unregistering): Port device team_slave_1 removed [ 109.250186][T11140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.263046][ T7609] team0 (unregistering): Port device team_slave_0 removed [ 109.272991][T11140] sd 0:0:1:0: device reset [ 109.295771][ T7603] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 109.329099][ T7603] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 1 with error 28 [ 109.341544][ T7603] EXT4-fs (loop4): This should not happen!! Data will be lost [ 109.341544][ T7603] [ 109.351220][ T7603] EXT4-fs (loop4): Total free blocks count 0 [ 109.357464][ T7603] EXT4-fs (loop4): Free/Dirty block details [ 109.363501][ T7603] EXT4-fs (loop4): free_blocks=2415919104 [ 109.369254][ T7603] EXT4-fs (loop4): dirty_blocks=16 [ 109.374372][ T7603] EXT4-fs (loop4): Block reservation details [ 109.380777][ T7603] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 109.391589][T11064] chnl_net:caif_netlink_parms(): no params data found [ 109.398372][T10184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.420833][T11108] Process accounting resumed [ 109.472102][T11169] loop0: detected capacity change from 0 to 128 [ 109.511079][T11064] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.518249][T11064] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.525534][T11064] bridge_slave_0: entered allmulticast mode [ 109.532187][T11064] bridge_slave_0: entered promiscuous mode [ 109.532650][T11170] vhci_hcd: invalid port number 157 [ 109.539282][T11064] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.543332][T11170] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 109.550395][T11064] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.565071][T11064] bridge_slave_1: entered allmulticast mode [ 109.571602][T11064] bridge_slave_1: entered promiscuous mode [ 109.591956][T11064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.619371][T11064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.667185][T11176] loop0: detected capacity change from 0 to 1024 [ 109.682383][T11064] team0: Port device team_slave_0 added [ 109.688264][T11176] EXT4-fs: Ignoring removed orlov option [ 109.694074][T11176] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.697359][T11064] team0: Port device team_slave_1 added [ 109.732116][T11064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.739123][T11064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.765422][T11064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.787020][T11064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.794226][T11064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.799605][T11176] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.820420][T11064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.912171][ T9703] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.928885][T11201] loop2: detected capacity change from 0 to 1024 [ 109.939392][T11064] hsr_slave_0: entered promiscuous mode [ 109.941607][T11205] loop4: detected capacity change from 0 to 128 [ 109.945727][T11201] EXT4-fs: Ignoring removed orlov option [ 109.956986][T11201] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.965237][T11064] hsr_slave_1: entered promiscuous mode [ 109.969625][T11204] vhci_hcd: invalid port number 157 [ 109.976049][T11204] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 109.983720][T11064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.004978][T11064] Cannot create hsr debugfs directory [ 110.022708][T11207] loop0: detected capacity change from 0 to 2048 [ 110.030343][T11201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.059307][T11207] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.104010][ T9703] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.123929][T11217] syz.3.901[11217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.123991][T11217] syz.3.901[11217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.132726][T10169] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.138402][T11217] syz.3.901[11217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.169162][T11220] futex_wake_op: syz.4.903 tries to shift op by -1; fix this program [ 110.200057][T11217] veth1_macvtap: left promiscuous mode [ 110.323704][T11245] ALSA: seq fatal error: cannot create timer (-22) [ 110.366307][T11252] loop0: detected capacity change from 0 to 128 [ 110.385652][T11254] loop4: detected capacity change from 0 to 128 [ 110.393618][T11254] vfat: Unknown parameter 'logon' [ 110.408700][T11254] loop4: detected capacity change from 0 to 512 [ 110.443038][T11254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.456586][T11254] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.481646][T10184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.559212][T11064] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 110.570000][T11276] loop0: detected capacity change from 0 to 256 [ 110.570428][T11064] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 110.593516][T11277] futex_wake_op: syz.4.916 tries to shift op by -1; fix this program [ 110.606810][T11064] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 110.618454][T11064] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 110.653813][T11064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.666613][T11064] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.676772][ T7607] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.683900][ T7607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.693339][T11285] vhci_hcd: invalid port number 157 [ 110.698593][T11285] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 110.706784][T11288] vhci_hcd: invalid port number 157 [ 110.712035][T11288] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 110.761798][T11297] loop0: detected capacity change from 0 to 128 [ 110.762065][T11064] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 110.773757][T11297] vfat: Unknown parameter 'logon' [ 110.778474][T11064] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.833913][T11297] loop0: detected capacity change from 0 to 512 [ 110.842081][ T7607] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.849248][ T7607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.890663][T11297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.909505][T11297] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.950102][T11319] loop4: detected capacity change from 0 to 128 [ 110.953029][T11064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.965491][ T9703] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.980279][T11319] vfat: Unknown parameter 'logon' [ 111.029403][T11326] loop0: detected capacity change from 0 to 128 [ 111.045071][T11319] loop4: detected capacity change from 0 to 512 [ 111.056285][T11326] vfat: Unknown parameter 'logon' [ 111.094138][T11064] veth0_vlan: entered promiscuous mode [ 111.110998][T11064] veth1_vlan: entered promiscuous mode [ 111.130332][T11319] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.143320][T11319] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.169263][T11064] veth0_macvtap: entered promiscuous mode [ 111.177559][T11064] veth1_macvtap: entered promiscuous mode [ 111.191883][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.202388][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.212240][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.222683][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.233000][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.243635][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.250625][T11356] loop2: detected capacity change from 0 to 256 [ 111.253697][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.270469][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.280757][T10184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.281940][T11064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.318854][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.329450][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.339382][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.349964][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.359916][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.362179][T11360] loop4: detected capacity change from 0 to 2048 [ 111.370627][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.386805][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.397256][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.399244][T11364] vhci_hcd: invalid port number 157 [ 111.412342][T11364] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 111.432754][T11360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.438792][T11064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.457348][T11064] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.466171][T11064] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.475169][T11064] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.484062][T11064] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.506305][T11360] sd 0:0:1:0: device reset [ 111.527526][T11369] loop3: detected capacity change from 0 to 1024 [ 111.570834][T11369] EXT4-fs: Ignoring removed orlov option [ 111.576544][T11369] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.595160][T11385] ALSA: seq fatal error: cannot create timer (-22) [ 111.600956][ T7603] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 111.627988][ T7603] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 1 with error 28 [ 111.640297][ T7603] EXT4-fs (loop4): This should not happen!! Data will be lost [ 111.640297][ T7603] [ 111.650105][ T7603] EXT4-fs (loop4): Total free blocks count 0 [ 111.656171][ T7603] EXT4-fs (loop4): Free/Dirty block details [ 111.662125][ T7603] EXT4-fs (loop4): free_blocks=2415919104 [ 111.667889][ T7603] EXT4-fs (loop4): dirty_blocks=16 [ 111.668278][T11362] netlink: 'syz.0.929': attribute type 15 has an invalid length. [ 111.673030][ T7603] EXT4-fs (loop4): Block reservation details [ 111.673049][ T7603] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 111.685735][T11362] loop0: detected capacity change from 0 to 512 [ 111.720473][T10184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.742193][T11369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.744728][T11399] loop2: detected capacity change from 0 to 128 [ 111.770733][T11362] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #15: comm syz.0.929: casefold flag without casefold feature [ 111.804276][T11369] __nla_validate_parse: 6 callbacks suppressed [ 111.804330][T11369] netlink: 16 bytes leftover after parsing attributes in process `syz.3.930'. [ 111.811547][T11409] loop4: detected capacity change from 0 to 128 [ 111.819657][T11369] netlink: 268 bytes leftover after parsing attributes in process `syz.3.930'. [ 111.819675][T11369] netlink: 2356 bytes leftover after parsing attributes in process `syz.3.930'. [ 111.830551][T11409] vfat: Unknown parameter 'logon' [ 111.850195][T11362] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.929: couldn't read orphan inode 15 (err -117) [ 111.874793][T11407] vhci_hcd: invalid port number 157 [ 111.880313][T11407] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 111.888563][T11362] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.912878][T10761] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.919609][T11409] loop4: detected capacity change from 0 to 512 [ 111.951159][T11409] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.966245][T11399] syz.2.936: attempt to access beyond end of device [ 111.966245][T11399] loop2: rw=0, sector=121, nr_sectors = 119 limit=128 [ 111.975083][T11425] loop1: detected capacity change from 0 to 256 [ 112.012779][T11362] loop0: detected capacity change from 512 to 64 [ 112.064745][ T9703] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 112.100582][T11436] vhci_hcd: invalid port number 157 [ 112.105920][T11436] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 112.113390][T11437] vhci_hcd: invalid port number 157 [ 112.119186][T11437] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 112.136971][T11435] ALSA: seq fatal error: cannot create timer (-22) [ 112.142655][T11439] loop3: detected capacity change from 0 to 1024 [ 112.156583][T11439] EXT4-fs: Ignoring removed orlov option [ 112.156685][T11439] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.180549][T11441] loop4: detected capacity change from 0 to 1024 [ 112.189032][T11441] EXT4-fs: Ignoring removed orlov option [ 112.194793][T11441] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.218670][T11447] loop2: detected capacity change from 0 to 2048 [ 112.224848][T11439] netlink: 16 bytes leftover after parsing attributes in process `syz.3.947'. [ 112.231423][ T29] kauditd_printk_skb: 430 callbacks suppressed [ 112.231437][ T29] audit: type=1326 audit(1728181260.456:6235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.3.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3fe98dff9 code=0x7ffc0000 [ 112.234104][T11439] netlink: 268 bytes leftover after parsing attributes in process `syz.3.947'. [ 112.240518][ T29] audit: type=1326 audit(1728181260.456:6236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.3.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3fe98dff9 code=0x7ffc0000 [ 112.264957][T11439] netlink: 2356 bytes leftover after parsing attributes in process `syz.3.947'. [ 112.274381][ T29] audit: type=1326 audit(1728181260.456:6237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.3.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3fe98dff9 code=0x7ffc0000 [ 112.274405][ T29] audit: type=1326 audit(1728181260.456:6238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.3.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3fe98dff9 code=0x7ffc0000 [ 112.354200][ T29] audit: type=1326 audit(1728181260.456:6239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.3.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3fe98dff9 code=0x7ffc0000 [ 112.378098][ T29] audit: type=1326 audit(1728181260.456:6240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.3.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3fe98dff9 code=0x7ffc0000 [ 112.402075][ T29] audit: type=1326 audit(1728181260.456:6241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.3.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3fe98dff9 code=0x7ffc0000 [ 112.407306][T11441] netlink: 16 bytes leftover after parsing attributes in process `syz.4.948'. [ 112.425746][ T29] audit: type=1326 audit(1728181260.456:6242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.3.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3fe98dff9 code=0x7ffc0000 [ 112.425785][ T29] audit: type=1326 audit(1728181260.456:6243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.3.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3fe98dff9 code=0x7ffc0000 [ 112.434643][T11441] netlink: 268 bytes leftover after parsing attributes in process `syz.4.948'. [ 112.458489][ T29] audit: type=1326 audit(1728181260.456:6244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.3.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3fe98dff9 code=0x7ffc0000 [ 112.482268][T11441] netlink: 2356 bytes leftover after parsing attributes in process `syz.4.948'. [ 112.498583][T11452] loop1: detected capacity change from 0 to 512 [ 112.549293][T11447] sd 0:0:1:0: device reset [ 112.571926][T11452] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.951: invalid indirect mapped block 4294967295 (level 1) [ 112.594630][T11452] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.951: invalid indirect mapped block 4294967295 (level 1) [ 112.618355][T11452] EXT4-fs (loop1): 2 truncates cleaned up [ 112.626308][ T7609] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 112.641564][ T7609] EXT4-fs (loop2): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 1 with error 28 [ 112.653961][ T7609] EXT4-fs (loop2): This should not happen!! Data will be lost [ 112.653961][ T7609] [ 112.663664][ T7609] EXT4-fs (loop2): Total free blocks count 0 [ 112.669704][ T7609] EXT4-fs (loop2): Free/Dirty block details [ 112.675622][ T7609] EXT4-fs (loop2): free_blocks=2415919104 [ 112.681435][ T7609] EXT4-fs (loop2): dirty_blocks=16 [ 112.686626][ T7609] EXT4-fs (loop2): Block reservation details [ 112.692744][ T7609] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 112.774668][T11483] vhci_hcd: invalid port number 157 [ 112.780688][T11483] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 112.861607][T11492] futex_wake_op: syz.3.961 tries to shift op by -1; fix this program [ 112.911967][T11498] loop3: detected capacity change from 0 to 2048 [ 112.938431][T11459] chnl_net:caif_netlink_parms(): no params data found [ 112.974310][T11516] loop2: detected capacity change from 0 to 128 [ 112.987558][T11507] loop4: detected capacity change from 0 to 1024 [ 112.994577][ T3653] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 113.009787][T11260] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 113.013859][T11507] EXT4-fs: Ignoring removed orlov option [ 113.028393][T11507] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.037411][ T3653] EXT4-fs (loop3): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 1 with error 28 [ 113.049754][ T3653] EXT4-fs (loop3): This should not happen!! Data will be lost [ 113.049754][ T3653] [ 113.059479][ T3653] EXT4-fs (loop3): Total free blocks count 0 [ 113.065515][ T3653] EXT4-fs (loop3): Free/Dirty block details [ 113.071495][ T3653] EXT4-fs (loop3): free_blocks=2415919104 [ 113.077218][ T3653] EXT4-fs (loop3): dirty_blocks=16 [ 113.082431][ T3653] EXT4-fs (loop3): Block reservation details [ 113.082589][T11516] syz.2.966: attempt to access beyond end of device [ 113.082589][T11516] loop2: rw=0, sector=121, nr_sectors = 119 limit=128 [ 113.088556][ T3653] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 113.142840][T11507] netlink: 16 bytes leftover after parsing attributes in process `syz.4.965'. [ 113.156089][T11530] futex_wake_op: syz.3.967 tries to shift op by -1; fix this program [ 113.223402][T11459] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.230524][T11459] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.260483][T11459] bridge_slave_0: entered allmulticast mode [ 113.268671][T11459] bridge_slave_0: entered promiscuous mode [ 113.276509][T11459] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.283826][T11459] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.292531][T11459] bridge_slave_1: entered allmulticast mode [ 113.298984][T11459] bridge_slave_1: entered promiscuous mode [ 113.317750][T11459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.343058][T11554] vhci_hcd: invalid port number 157 [ 113.343268][T11459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.348478][T11554] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 113.398156][T11559] futex_wake_op: syz.2.973 tries to shift op by -1; fix this program [ 113.406258][T11556] futex_wake_op: syz.4.974 tries to shift op by -1; fix this program [ 113.423807][T11459] team0: Port device team_slave_0 added [ 113.435610][T11459] team0: Port device team_slave_1 added [ 113.470662][ T3653] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.496661][T11459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.503840][T11459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.530141][T11459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.541982][T11459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.548963][T11459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.575134][T11459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.615016][T11581] loop2: detected capacity change from 0 to 128 [ 113.622714][ T3653] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.669144][T11588] loop4: detected capacity change from 0 to 2048 [ 113.670122][T11459] hsr_slave_0: entered promiscuous mode [ 113.683809][T11581] syz.2.979: attempt to access beyond end of device [ 113.683809][T11581] loop2: rw=0, sector=121, nr_sectors = 119 limit=128 [ 113.702683][T11459] hsr_slave_1: entered promiscuous mode [ 113.709005][T11459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.717066][T11459] Cannot create hsr debugfs directory [ 113.725878][ T3653] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.739763][T11597] loop3: detected capacity change from 0 to 256 [ 113.747041][ T7603] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 113.778100][ T7603] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 1 with error 28 [ 113.790635][ T7603] EXT4-fs (loop4): This should not happen!! Data will be lost [ 113.790635][ T7603] [ 113.800452][ T7603] EXT4-fs (loop4): Total free blocks count 0 [ 113.806906][ T7603] EXT4-fs (loop4): Free/Dirty block details [ 113.813151][ T7603] EXT4-fs (loop4): free_blocks=2415919104 [ 113.819523][ T7603] EXT4-fs (loop4): dirty_blocks=16 [ 113.824641][ T7603] EXT4-fs (loop4): Block reservation details [ 113.830754][ T7603] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 113.854289][ T3653] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.989126][T11627] vhci_hcd: invalid port number 157 [ 113.994491][T11627] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 114.008903][ T3653] bridge_slave_1: left allmulticast mode [ 114.014647][ T3653] bridge_slave_1: left promiscuous mode [ 114.020440][ T3653] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.026327][T11624] futex_wake_op: syz.4.986 tries to shift op by -1; fix this program [ 114.049201][ T3653] bridge_slave_0: left allmulticast mode [ 114.054963][ T3653] bridge_slave_0: left promiscuous mode [ 114.060795][ T3653] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.210660][ T3653] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.221932][ T3653] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.233610][T11657] loop4: detected capacity change from 0 to 1024 [ 114.242169][ T3653] bond0 (unregistering): Released all slaves [ 114.252064][T11657] EXT4-fs: Ignoring removed orlov option [ 114.257778][T11657] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.296220][ T3653] hsr_slave_0: left promiscuous mode [ 114.315372][ T3653] hsr_slave_1: left promiscuous mode [ 114.322648][T11677] loop2: detected capacity change from 0 to 128 [ 114.330132][ T3653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.337576][ T3653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.348646][ T3653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.356129][ T3653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.377418][ T3653] veth1_macvtap: left promiscuous mode [ 114.382972][ T3653] veth0_macvtap: left promiscuous mode [ 114.388913][ T3653] veth1_vlan: left promiscuous mode [ 114.394248][ T3653] veth0_vlan: left promiscuous mode [ 114.417429][T11677] syz.2.992: attempt to access beyond end of device [ 114.417429][T11677] loop2: rw=0, sector=121, nr_sectors = 119 limit=128 [ 114.494666][T11700] loop3: detected capacity change from 0 to 1024 [ 114.562188][T11700] EXT4-fs: Ignoring removed orlov option [ 114.567984][T11700] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.681209][ T3653] team0 (unregistering): Port device team_slave_1 removed [ 114.695186][ T3653] team0 (unregistering): Port device team_slave_0 removed [ 114.736886][T11737] loop2: detected capacity change from 0 to 256 [ 114.779089][T11742] vhci_hcd: invalid port number 157 [ 114.784320][T11742] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 114.845117][T11747] loop3: detected capacity change from 0 to 128 [ 114.851871][T11747] vfat: Unknown parameter 'logon' [ 114.905136][T11754] loop3: detected capacity change from 0 to 128 [ 114.911977][T11754] vfat: Unknown parameter 'logon' [ 114.962495][T11459] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.971718][T11459] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.991192][T11768] loop4: detected capacity change from 0 to 256 [ 114.998607][T11459] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.016046][T11459] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.074075][T11459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.100724][T11459] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.116572][ T7609] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.123715][ T7609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.131297][T11783] loop3: detected capacity change from 0 to 1024 [ 115.139992][ T7609] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.147094][ T7609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.155927][T11783] EXT4-fs: Ignoring removed orlov option [ 115.161746][T11783] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.279218][T11459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.369200][T11459] veth0_vlan: entered promiscuous mode [ 115.384946][T11459] veth1_vlan: entered promiscuous mode [ 115.409920][T11459] veth0_macvtap: entered promiscuous mode [ 115.423149][T11825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.433084][T11459] veth1_macvtap: entered promiscuous mode [ 115.450732][T11825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.459078][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.469853][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.481418][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.492060][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.501906][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.512716][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.514632][T11823] futex_wake_op: syz.1.1013 tries to shift op by -1; fix this program [ 115.522800][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.541631][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.553814][T11459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.569862][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.580483][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.590955][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.602165][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.603118][T11834] ALSA: seq fatal error: cannot create timer (-22) [ 115.612317][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.629894][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.639834][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.650620][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.661988][T11459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.672223][T11459] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.681019][T11459] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.690070][T11459] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.698900][T11459] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.733386][T11840] vhci_hcd: invalid port number 157 [ 115.738670][T11840] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 115.769712][T11846] loop1: detected capacity change from 0 to 128 [ 115.886197][T11861] loop2: detected capacity change from 0 to 1024 [ 115.899337][T11861] EXT4-fs: Ignoring removed orlov option [ 115.905165][T11861] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.919857][T11865] loop0: detected capacity change from 0 to 128 [ 115.926362][T11865] vfat: Unknown parameter 'logon' [ 115.985929][T11872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.995695][T11872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.007087][T11873] loop1: detected capacity change from 0 to 256 [ 116.007200][T11872] loop2: detected capacity change from 0 to 512 [ 116.021457][T11872] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 116.031964][T11872] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.1031: invalid block [ 116.047093][T11872] EXT4-fs (loop2): Remounting filesystem read-only [ 116.054027][T11872] EXT4-fs (loop2): 2 truncates cleaned up [ 116.061533][T11872] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 116.065344][T11875] vhci_hcd: invalid port number 157 [ 116.073354][T11875] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 116.110471][T11877] loop0: detected capacity change from 0 to 128 [ 116.122155][T11877] vfat: Unknown parameter 'logon' [ 116.217071][T11886] loop0: detected capacity change from 0 to 128 [ 116.264858][T11888] Zero length message leads to an empty skb [ 116.275512][T11888] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 116.555066][T11896] loop3: detected capacity change from 0 to 1024 [ 116.569026][T11896] EXT4-fs: Ignoring removed orlov option [ 116.574929][T11896] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.624768][T11900] ALSA: seq fatal error: cannot create timer (-22) [ 116.650286][T11903] loop3: detected capacity change from 0 to 256 [ 116.656901][T11903] msdos: Unknown parameter 'fowner>00000000000000000000' [ 116.688943][T11904] loop0: detected capacity change from 0 to 256 [ 116.810391][T11915] __nla_validate_parse: 28 callbacks suppressed [ 116.810406][T11915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1051'. [ 116.835019][T11918] loop1: detected capacity change from 0 to 1024 [ 116.857141][T11918] EXT4-fs: Ignoring removed orlov option [ 116.863522][T11918] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.877661][T11923] loop4: detected capacity change from 0 to 1024 [ 116.885879][T11915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1051'. [ 116.890367][T11923] EXT4-fs: Ignoring removed orlov option [ 116.900842][T11923] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.921185][T11918] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1049'. [ 116.930481][T11918] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1049'. [ 116.939561][T11918] netlink: 2356 bytes leftover after parsing attributes in process `syz.1.1049'. [ 116.961092][T11923] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1053'. [ 116.970371][T11923] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1053'. [ 116.979648][T11923] netlink: 2356 bytes leftover after parsing attributes in process `syz.4.1053'. [ 117.004740][T11929] loop2: detected capacity change from 0 to 256 [ 117.046031][T11933] loop1: detected capacity change from 0 to 1024 [ 117.061503][T11933] EXT4-fs: Ignoring removed orlov option [ 117.067250][T11933] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.085040][T11937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.093846][T11937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.105641][T11937] loop4: detected capacity change from 0 to 512 [ 117.109682][T11933] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1056'. [ 117.113019][T11937] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 117.121152][T11933] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1056'. [ 117.146512][T11937] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1057: invalid indirect mapped block 4294967295 (level 1) [ 117.162050][T11937] EXT4-fs (loop4): Remounting filesystem read-only [ 117.169734][T11937] EXT4-fs (loop4): 2 truncates cleaned up [ 117.176299][T11937] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 117.335790][T11948] loop1: detected capacity change from 0 to 256 [ 117.398336][ T29] kauditd_printk_skb: 1078 callbacks suppressed [ 117.398350][ T29] audit: type=1400 audit(1728181265.626:7323): avc: denied { write } for pid=11949 comm="syz.0.1060" name="001" dev="devtmpfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 117.479409][T11951] vhci_hcd: invalid port number 157 [ 117.484937][T11951] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 117.485187][T11903] Process accounting resumed [ 117.499591][ T29] audit: type=1400 audit(1728181265.736:7324): avc: denied { unmount } for pid=10761 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 117.520894][ T29] audit: type=1400 audit(1728181265.756:7325): avc: denied { unmount } for pid=10761 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 117.551398][T11953] loop0: detected capacity change from 0 to 2048 [ 117.574201][ T29] audit: type=1400 audit(1728181265.806:7326): avc: denied { create } for pid=11952 comm="syz.0.1062" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 117.594649][ T29] audit: type=1400 audit(1728181265.806:7327): avc: denied { read write open } for pid=11952 comm="syz.0.1062" path="/13/bus/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 117.619103][ T29] audit: type=1400 audit(1728181265.806:7328): avc: denied { append } for pid=11952 comm="syz.0.1062" path="/13/bus/cpu.stat" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 117.643376][ T29] audit: type=1400 audit(1728181265.806:7329): avc: denied { map } for pid=11952 comm="syz.0.1062" path="/13/bus/cpu.stat" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 117.666395][ T29] audit: type=1400 audit(1728181265.806:7330): avc: denied { execute } for pid=11952 comm="syz.0.1062" path="/13/bus/cpu.stat" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 117.689616][ T29] audit: type=1400 audit(1728181265.806:7331): avc: denied { module_request } for pid=11952 comm="syz.0.1062" kmod=7463702D756C702DBFA4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 117.713009][ T29] audit: type=1326 audit(1728181265.876:7332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11959 comm="syz.3.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3fe98dff9 code=0x7ffc0000 [ 117.739920][T11260] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 117.755365][ T7607] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 1 with error 28 [ 117.767637][ T7607] EXT4-fs (loop0): This should not happen!! Data will be lost [ 117.767637][ T7607] [ 117.770540][T11965] loop2: detected capacity change from 0 to 1024 [ 117.777450][ T7607] EXT4-fs (loop0): Total free blocks count 0 [ 117.789856][ T7607] EXT4-fs (loop0): Free/Dirty block details [ 117.795851][ T7607] EXT4-fs (loop0): free_blocks=2415919104 [ 117.796270][T11965] EXT4-fs: Ignoring removed orlov option [ 117.801764][ T7607] EXT4-fs (loop0): dirty_blocks=16 [ 117.807852][T11965] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.812819][ T7607] EXT4-fs (loop0): Block reservation details [ 117.812838][ T7607] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 117.901967][T11975] loop2: detected capacity change from 0 to 2048 [ 117.913390][T11978] loop3: detected capacity change from 0 to 128 [ 117.936891][T11978] syz.3.1069: attempt to access beyond end of device [ 117.936891][T11978] loop3: rw=0, sector=121, nr_sectors = 119 limit=128 [ 117.961235][T11980] ALSA: seq fatal error: cannot create timer (-22) [ 117.987137][ T7603] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 118.002493][ T7603] EXT4-fs (loop2): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 1 with error 28 [ 118.014791][ T7603] EXT4-fs (loop2): This should not happen!! Data will be lost [ 118.014791][ T7603] [ 118.024855][ T7603] EXT4-fs (loop2): Total free blocks count 0 [ 118.031014][ T7603] EXT4-fs (loop2): Free/Dirty block details [ 118.037172][ T7603] EXT4-fs (loop2): free_blocks=2415919104 [ 118.043051][ T7603] EXT4-fs (loop2): dirty_blocks=16 [ 118.048361][ T7603] EXT4-fs (loop2): Block reservation details [ 118.054647][ T7603] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 118.085916][T11991] loop2: detected capacity change from 0 to 256 [ 118.094218][T11991] msdos: Unknown parameter 'fowner>00000000000000000000' [ 118.099352][T11992] loop4: detected capacity change from 0 to 1024 [ 118.108303][T11992] EXT4-fs: Ignoring removed orlov option [ 118.114120][T11992] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.154680][T11994] loop3: detected capacity change from 0 to 2048 [ 118.173714][T11996] loop1: detected capacity change from 0 to 128 [ 118.181035][T11996] vfat: Unknown parameter 'logon' [ 118.212415][ T7609] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 118.227814][ T7609] EXT4-fs (loop3): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 1 with error 28 [ 118.240467][ T7609] EXT4-fs (loop3): This should not happen!! Data will be lost [ 118.240467][ T7609] [ 118.250234][ T7609] EXT4-fs (loop3): Total free blocks count 0 [ 118.256304][ T7609] EXT4-fs (loop3): Free/Dirty block details [ 118.262295][ T7609] EXT4-fs (loop3): free_blocks=2415919104 [ 118.268174][ T7609] EXT4-fs (loop3): dirty_blocks=16 [ 118.273288][ T7609] EXT4-fs (loop3): Block reservation details [ 118.279304][ T7609] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 118.299253][T12007] vhci_hcd: invalid port number 157 [ 118.304498][T12007] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 118.333839][T12010] loop4: detected capacity change from 0 to 128 [ 118.343512][T12010] vfat: Unknown parameter 'logon' [ 118.372985][T12013] loop1: detected capacity change from 0 to 2048 [ 118.400009][ T7612] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 118.415554][T12016] loop3: detected capacity change from 0 to 2048 [ 118.421451][ T7612] EXT4-fs (loop1): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 1 with error 28 [ 118.434087][ T7612] EXT4-fs (loop1): This should not happen!! Data will be lost [ 118.434087][ T7612] [ 118.443809][ T7612] EXT4-fs (loop1): Total free blocks count 0 [ 118.450660][ T7612] EXT4-fs (loop1): Free/Dirty block details [ 118.456682][ T7612] EXT4-fs (loop1): free_blocks=2415919104 [ 118.462444][ T7612] EXT4-fs (loop1): dirty_blocks=16 [ 118.467554][ T7612] EXT4-fs (loop1): Block reservation details [ 118.473621][ T7612] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 118.498412][T12025] ALSA: seq fatal error: cannot create timer (-22) [ 118.528921][T12016] sd 0:0:1:0: device reset [ 118.559414][ T7609] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 118.574320][ T7609] EXT4-fs (loop3): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 1 with error 28 [ 118.587059][ T7609] EXT4-fs (loop3): This should not happen!! Data will be lost [ 118.587059][ T7609] [ 118.596865][ T7609] EXT4-fs (loop3): Total free blocks count 0 [ 118.603117][ T7609] EXT4-fs (loop3): Free/Dirty block details [ 118.609214][ T7609] EXT4-fs (loop3): free_blocks=2415919104 [ 118.609777][T12037] vhci_hcd: invalid port number 157 [ 118.614926][ T7609] EXT4-fs (loop3): dirty_blocks=16 [ 118.614955][ T7609] EXT4-fs (loop3): Block reservation details [ 118.614965][ T7609] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 118.620280][T12037] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 118.674606][T12039] loop3: detected capacity change from 0 to 2048 [ 118.695923][T12041] loop4: detected capacity change from 0 to 1024 [ 118.703165][T12041] EXT4-fs: Ignoring removed orlov option [ 118.708993][T12041] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.749301][ T7612] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 118.778666][ T7612] EXT4-fs (loop3): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 1 with error 28 [ 118.791015][ T7612] EXT4-fs (loop3): This should not happen!! Data will be lost [ 118.791015][ T7612] [ 118.792821][T12053] loop0: detected capacity change from 0 to 128 [ 118.800825][ T7612] EXT4-fs (loop3): Total free blocks count 0 [ 118.811333][T12053] vfat: Unknown parameter 'logon' [ 118.813167][ T7612] EXT4-fs (loop3): Free/Dirty block details [ 118.824083][ T7612] EXT4-fs (loop3): free_blocks=2415919104 [ 118.829950][ T7612] EXT4-fs (loop3): dirty_blocks=16 [ 118.835082][ T7612] EXT4-fs (loop3): Block reservation details [ 118.841170][ T7612] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 118.891139][T12061] loop0: detected capacity change from 0 to 512 [ 118.903859][T12061] EXT4-fs: Ignoring removed bh option [ 118.909496][T12061] EXT4-fs: Ignoring removed i_version option [ 118.917456][T12065] loop4: detected capacity change from 0 to 512 [ 118.922580][T11991] Process accounting resumed [ 118.930011][T12061] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.942674][T12065] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.1102: invalid block [ 118.956418][T12065] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1102: invalid indirect mapped block 4294967295 (level 1) [ 118.971512][T12065] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1102: invalid indirect mapped block 4294967295 (level 1) [ 118.986687][T12061] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 118.991678][T12065] EXT4-fs (loop4): 2 truncates cleaned up [ 119.005461][T12074] loop3: detected capacity change from 0 to 128 [ 119.030667][T12061] EXT4-fs (loop0): mount failed [ 119.101456][T12084] loop3: detected capacity change from 0 to 2048 [ 119.117798][T12088] loop2: detected capacity change from 0 to 512 [ 119.133524][T12088] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 119.149336][T12090] loop0: detected capacity change from 0 to 1024 [ 119.156123][T12090] EXT4-fs: Ignoring removed orlov option [ 119.161861][T12090] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.179741][T12088] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.1111: invalid block [ 119.197484][ T7609] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 119.212463][ T7609] EXT4-fs (loop3): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 1 with error 28 [ 119.224753][ T7609] EXT4-fs (loop3): This should not happen!! Data will be lost [ 119.224753][ T7609] [ 119.234479][ T7609] EXT4-fs (loop3): Total free blocks count 0 [ 119.240097][T12100] loop4: detected capacity change from 0 to 256 [ 119.240531][ T7609] EXT4-fs (loop3): Free/Dirty block details [ 119.248111][T12100] msdos: Unknown parameter 'fowner>00000000000000000000' [ 119.252678][ T7609] EXT4-fs (loop3): free_blocks=2415919104 [ 119.265635][ T7609] EXT4-fs (loop3): dirty_blocks=16 [ 119.270834][ T7609] EXT4-fs (loop3): Block reservation details [ 119.276913][ T7609] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 119.280186][T12088] EXT4-fs (loop2): Remounting filesystem read-only [ 119.290912][T12088] EXT4-fs (loop2): 2 truncates cleaned up [ 119.297027][T12088] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 119.362897][T12109] usb usb9: usbfs: process 12109 (syz.3.1115) did not claim interface 0 before use [ 119.378166][T12111] loop0: detected capacity change from 0 to 128 [ 119.490165][T12115] vhci_hcd: invalid port number 157 [ 119.495526][T12115] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 119.623041][T12132] loop3: detected capacity change from 0 to 1024 [ 119.642262][T12132] EXT4-fs: Ignoring removed orlov option [ 119.648004][T12132] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.746550][T12154] loop0: detected capacity change from 0 to 512 [ 119.754078][T12154] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 119.766261][T12154] EXT4-fs (loop0): 1 truncate cleaned up [ 119.823130][T12170] vhci_hcd: invalid port number 157 [ 119.825408][T12169] loop1: detected capacity change from 0 to 1024 [ 119.828494][T12170] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 119.843099][T12169] EXT4-fs: Ignoring removed orlov option [ 119.848987][T12169] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.871060][T12176] loop3: detected capacity change from 0 to 512 [ 119.883068][T12176] EXT4-fs: Invalid want_extra_isize 129 [ 119.900236][T12176] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 119.924579][T12176] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 119.933200][T12176] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 119.956722][T12186] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.965829][T12186] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.974765][T12186] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.983732][T12186] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.994890][T12186] vxlan0: entered promiscuous mode [ 120.000196][T12186] vxlan0: entered allmulticast mode [ 120.015627][T12186] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.024731][T12186] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.033775][T12186] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.043074][T12186] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.079898][T12100] Process accounting resumed [ 120.107692][T12207] vhci_hcd: invalid port number 157 [ 120.113016][T12207] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 120.125021][T12206] loop2: detected capacity change from 0 to 1024 [ 120.135174][T12206] EXT4-fs: Ignoring removed orlov option [ 120.140998][T12206] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.174151][T12211] loop1: detected capacity change from 0 to 1024 [ 120.195408][T12211] EXT4-fs: Ignoring removed orlov option [ 120.201358][T12211] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.300494][T12228] loop4: detected capacity change from 0 to 1024 [ 120.313708][T12228] EXT4-fs: Ignoring removed orlov option [ 120.319541][T12228] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.329224][T12247] vhci_hcd: invalid port number 157 [ 120.334536][T12247] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 120.366883][T12253] loop3: detected capacity change from 0 to 512 [ 120.379068][T12253] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 120.410717][T12253] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1155: invalid indirect mapped block 4294967295 (level 1) [ 120.449190][T12253] EXT4-fs (loop3): Remounting filesystem read-only [ 120.463991][T12253] EXT4-fs (loop3): 2 truncates cleaned up [ 120.470401][T12253] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 120.610649][T12317] vhci_hcd: invalid port number 157 [ 120.615886][T12317] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 120.655049][T11459] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 120.685877][T12319] loop1: detected capacity change from 0 to 1024 [ 120.705043][T12319] EXT4-fs: Ignoring removed orlov option [ 120.710851][T12319] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.764787][T12326] loop2: detected capacity change from 0 to 1024 [ 120.801099][T12331] loop1: detected capacity change from 0 to 128 [ 120.811292][T12326] EXT4-fs: Ignoring removed orlov option [ 120.817726][T12326] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.853266][T12337] loop4: detected capacity change from 0 to 256 [ 120.858736][T12331] syz.1.1168: attempt to access beyond end of device [ 120.858736][T12331] loop1: rw=0, sector=121, nr_sectors = 119 limit=128 [ 120.934290][ T55] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.949090][T12342] vhci_hcd: invalid port number 157 [ 120.954409][T12342] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 120.984137][ T55] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.031865][ T55] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.042585][T12352] loop2: detected capacity change from 0 to 1024 [ 121.053040][T12352] EXT4-fs: Ignoring removed orlov option [ 121.058963][T12352] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.071625][T12353] futex_wake_op: syz.4.1180 tries to shift op by -1; fix this program [ 121.093212][ T55] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.158511][T12365] vhci_hcd: invalid port number 157 [ 121.163767][T12365] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 121.185755][T12371] futex_wake_op: syz.1.1185 tries to shift op by -1; fix this program [ 121.202677][ T55] bridge_slave_1: left allmulticast mode [ 121.208430][ T55] bridge_slave_1: left promiscuous mode [ 121.214128][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.226285][ T55] bridge_slave_0: left allmulticast mode [ 121.232149][ T55] bridge_slave_0: left promiscuous mode [ 121.238019][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.275995][T12382] loop1: detected capacity change from 0 to 2048 [ 121.313864][T12388] loop4: detected capacity change from 0 to 256 [ 121.358734][ T7612] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 121.373639][ T7612] EXT4-fs (loop1): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 1 with error 28 [ 121.373679][ T7612] EXT4-fs (loop1): This should not happen!! Data will be lost [ 121.373679][ T7612] [ 121.373697][ T7612] EXT4-fs (loop1): Total free blocks count 0 [ 121.373708][ T7612] EXT4-fs (loop1): Free/Dirty block details [ 121.373718][ T7612] EXT4-fs (loop1): free_blocks=2415919104 [ 121.373729][ T7612] EXT4-fs (loop1): dirty_blocks=16 [ 121.373741][ T7612] EXT4-fs (loop1): Block reservation details [ 121.373751][ T7612] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 121.386980][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.411884][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.412002][T12394] vhci_hcd: invalid port number 157 [ 121.412012][T12394] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 121.424716][ T55] bond0 (unregistering): Released all slaves [ 121.502511][T12403] vhci_hcd: invalid port number 157 [ 121.507802][T12403] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 121.549225][T12406] vhci_hcd: invalid port number 157 [ 121.554533][T12406] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 121.556076][T12401] loop1: detected capacity change from 0 to 1024 [ 121.568961][T12401] EXT4-fs: Ignoring removed orlov option [ 121.574765][T12401] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.587080][ T55] hsr_slave_0: left promiscuous mode [ 121.595819][ T55] hsr_slave_1: left promiscuous mode [ 121.601818][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.609300][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.616986][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.624518][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.642742][ T55] veth1_macvtap: left promiscuous mode [ 121.648316][ T55] veth0_macvtap: left promiscuous mode [ 121.653907][ T55] veth1_vlan: left promiscuous mode [ 121.659260][ T55] veth0_vlan: left promiscuous mode [ 121.729486][T12420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.740273][T12421] loop4: detected capacity change from 0 to 256 [ 121.752927][T12420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.765239][T12420] loop1: detected capacity change from 0 to 512 [ 121.773335][T12420] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 121.784249][T12420] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1200: invalid indirect mapped block 4294967295 (level 1) [ 121.798665][T12420] EXT4-fs (loop1): Remounting filesystem read-only [ 121.799208][ T55] team0 (unregistering): Port device team_slave_1 removed [ 121.805295][T12420] EXT4-fs (loop1): 2 truncates cleaned up [ 121.818526][T12420] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 121.818526][ T55] team0 (unregistering): Port device team_slave_0 removed [ 121.862898][T12356] chnl_net:caif_netlink_parms(): no params data found [ 121.928097][T12356] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.935320][T12356] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.942627][T12356] bridge_slave_0: entered allmulticast mode [ 121.949208][T12356] bridge_slave_0: entered promiscuous mode [ 121.956383][T12356] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.963725][T12356] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.971771][T12356] bridge_slave_1: entered allmulticast mode [ 121.978656][T12356] bridge_slave_1: entered promiscuous mode [ 121.998920][T12356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.009930][T12356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.029976][T12356] team0: Port device team_slave_0 added [ 122.036289][T12356] team0: Port device team_slave_1 added [ 122.056744][T12356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.063831][T12356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.090275][T12356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.102153][T12356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.109211][T12356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.135436][T12356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.172546][T12356] hsr_slave_0: entered promiscuous mode [ 122.182787][T12356] hsr_slave_1: entered promiscuous mode [ 122.188919][T12356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.196847][T12356] Cannot create hsr debugfs directory [ 122.210016][T12450] vhci_hcd: invalid port number 157 [ 122.215333][T12450] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 122.400686][T12478] vhci_hcd: invalid port number 157 [ 122.405933][T12478] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 122.479818][ T29] kauditd_printk_skb: 871 callbacks suppressed [ 122.479833][ T29] audit: type=1326 audit(1728181270.716:8201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12490 comm="syz.2.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645530dff9 code=0x7ffc0000 [ 122.517484][ T29] audit: type=1326 audit(1728181270.716:8202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12490 comm="syz.2.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645530dff9 code=0x7ffc0000 [ 122.542364][ T29] audit: type=1326 audit(1728181270.716:8203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12490 comm="syz.2.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f645530dff9 code=0x7ffc0000 [ 122.566087][ T29] audit: type=1326 audit(1728181270.716:8204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12490 comm="syz.2.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645530dff9 code=0x7ffc0000 [ 122.586353][T12500] FAULT_INJECTION: forcing a failure. [ 122.586353][T12500] name failslab, interval 1, probability 0, space 0, times 0 [ 122.589660][ T29] audit: type=1326 audit(1728181270.716:8205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12490 comm="syz.2.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f645530dff9 code=0x7ffc0000 [ 122.602240][T12500] CPU: 1 UID: 0 PID: 12500 Comm: syz.1.1213 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 122.625704][ T29] audit: type=1326 audit(1728181270.716:8206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12490 comm="syz.2.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645530dff9 code=0x7ffc0000 [ 122.636417][T12500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 122.636431][T12500] Call Trace: [ 122.636437][T12500] [ 122.636444][T12500] dump_stack_lvl+0xf2/0x150 [ 122.659897][ T29] audit: type=1326 audit(1728181270.716:8207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12490 comm="syz.2.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f645530dff9 code=0x7ffc0000 [ 122.669873][T12500] dump_stack+0x15/0x20 [ 122.669893][T12500] should_fail_ex+0x223/0x230 [ 122.673165][ T29] audit: type=1326 audit(1728181270.716:8208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12490 comm="syz.2.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645530dff9 code=0x7ffc0000 [ 122.676083][T12500] ? __kvmalloc_node_noprof+0x72/0x170 [ 122.680663][ T29] audit: type=1326 audit(1728181270.726:8209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12490 comm="syz.2.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645530dff9 code=0x7ffc0000 [ 122.704055][T12500] should_failslab+0x8f/0xb0 [ 122.708229][ T29] audit: type=1326 audit(1728181270.726:8210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12490 comm="syz.2.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f645530dff9 code=0x7ffc0000 [ 122.712858][T12500] __kmalloc_node_noprof+0xa8/0x380 [ 122.712885][T12500] __kvmalloc_node_noprof+0x72/0x170 [ 122.712962][T12500] traverse+0x9f/0x3c0 [ 122.712980][T12500] ? terminate_walk+0x260/0x280 [ 122.813870][T12500] seq_read_iter+0x854/0x930 [ 122.813899][T12500] ? _parse_integer_limit+0x167/0x180 [ 122.813974][T12500] seq_read+0x1ed/0x230 [ 122.813996][T12500] ? __pfx_seq_read+0x10/0x10 [ 122.814017][T12500] proc_reg_read+0x13f/0x1d0 [ 122.814048][T12500] vfs_readv+0x3e2/0x660 [ 122.814091][T12500] ? __pfx_proc_reg_read+0x10/0x10 [ 122.814121][T12500] __x64_sys_preadv+0x100/0x1c0 [ 122.814138][T12500] x64_sys_call+0x1d5c/0x2d60 [ 122.814235][T12500] do_syscall_64+0xc9/0x1c0 [ 122.814252][T12500] ? clear_bhb_loop+0x55/0xb0 [ 122.814280][T12500] ? clear_bhb_loop+0x55/0xb0 [ 122.814348][T12500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.814374][T12500] RIP: 0033:0x7fc2b49ddff9 [ 122.814390][T12500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.814423][T12500] RSP: 002b:00007fc2b3651038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 122.814443][T12500] RAX: ffffffffffffffda RBX: 00007fc2b4b95f80 RCX: 00007fc2b49ddff9 [ 122.814462][T12500] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000003 [ 122.814474][T12500] RBP: 00007fc2b3651090 R08: 0000000000000000 R09: 0000000000000000 [ 122.814484][T12500] R10: 000000000000ffff R11: 0000000000000246 R12: 0000000000000001 [ 122.814495][T12500] R13: 0000000000000000 R14: 00007fc2b4b95f80 R15: 00007ffef8058838 [ 122.814512][T12500] [ 122.886635][T12356] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 123.014235][T12535] vhci_hcd: invalid port number 157 [ 123.016843][T12356] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 123.019569][T12535] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 123.036090][T12536] vhci_hcd: invalid port number 157 [ 123.041381][T12536] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 123.063898][T12356] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 123.086220][T12356] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.119785][T12543] futex_wake_op: syz.1.1222 tries to shift op by -1; fix this program [ 123.161958][T12551] loop4: detected capacity change from 0 to 1024 [ 123.166792][T12547] loop2: detected capacity change from 0 to 256 [ 123.178956][T12547] msdos: Unknown parameter 'fowner>00000000000000000000' [ 123.191411][T12551] EXT4-fs: Ignoring removed orlov option [ 123.197106][T12551] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.235310][T12356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.245119][T12559] vhci_hcd: invalid port number 157 [ 123.245703][T12551] __nla_validate_parse: 44 callbacks suppressed [ 123.245715][T12551] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1225'. [ 123.250401][T12559] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 123.267010][T12356] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.273285][T12551] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1225'. [ 123.273300][T12551] netlink: 2356 bytes leftover after parsing attributes in process `syz.4.1225'. [ 123.327284][ T3655] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.334441][ T3655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.355171][ T3655] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.362264][ T3655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.405055][T12583] vhci_hcd: invalid port number 157 [ 123.410379][T12583] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 123.451204][T12595] vhci_hcd: invalid port number 157 [ 123.456447][T12595] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 123.463446][T12356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.480512][T12599] loop1: detected capacity change from 0 to 1024 [ 123.511325][T12601] loop3: detected capacity change from 0 to 1024 [ 123.519691][T12594] futex_wake_op: syz.4.1236 tries to shift op by -1; fix this program [ 123.530574][T12601] EXT4-fs: Ignoring removed orlov option [ 123.536364][T12601] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.543381][T12599] EXT4-fs: Ignoring removed oldalloc option [ 123.580327][T12601] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1238'. [ 123.589419][T12601] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1238'. [ 123.598515][T12601] netlink: 2356 bytes leftover after parsing attributes in process `syz.3.1238'. [ 123.599537][T12611] vhci_hcd: invalid port number 157 [ 123.613060][T12611] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 123.622858][T12356] veth0_vlan: entered promiscuous mode [ 123.631529][T12356] veth1_vlan: entered promiscuous mode [ 123.644581][T12356] veth0_macvtap: entered promiscuous mode [ 123.653217][T12356] veth1_macvtap: entered promiscuous mode [ 123.679540][T12356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.690098][T12356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.699995][T12356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.700010][T12356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.700023][T12356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.700034][T12356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.700047][T12356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.700058][T12356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.715041][T12356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.731339][T12620] loop1: detected capacity change from 0 to 2048 [ 123.735829][T12356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.786912][T12356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.786928][T12356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.787001][T12356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.787013][T12356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.787027][T12356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.787040][T12356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.787054][T12356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.788036][T12356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.829860][T12623] futex_wake_op: syz.4.1243 tries to shift op by -1; fix this program [ 123.846280][T12356] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.883154][T12356] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.883185][T12356] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.883213][T12356] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.931307][T12630] loop4: detected capacity change from 0 to 512 [ 123.937966][T12630] ext4: Unknown parameter 'dont_measure' [ 123.944122][ T55] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 123.959021][ T55] EXT4-fs (loop1): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 1 with error 28 [ 123.971484][ T55] EXT4-fs (loop1): This should not happen!! Data will be lost [ 123.971484][ T55] [ 123.981198][ T55] EXT4-fs (loop1): Total free blocks count 0 [ 123.987443][ T55] EXT4-fs (loop1): Free/Dirty block details [ 123.993496][ T55] EXT4-fs (loop1): free_blocks=2415919104 [ 123.999319][ T55] EXT4-fs (loop1): dirty_blocks=16 [ 124.004444][ T55] EXT4-fs (loop1): Block reservation details [ 124.010072][T12567] Process accounting resumed [ 124.010605][ T55] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 124.033623][T12638] netlink: 'syz.3.1249': attribute type 10 has an invalid length. [ 124.041762][T12638] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1249'. [ 124.051744][T12638] bridge0: port 3(syz_tun) entered blocking state [ 124.058404][T12638] bridge0: port 3(syz_tun) entered disabled state [ 124.065259][T12638] syz_tun: entered allmulticast mode [ 124.069052][T12640] loop2: detected capacity change from 0 to 1024 [ 124.071620][T12638] syz_tun: entered promiscuous mode [ 124.089825][T12638] bridge0: port 3(syz_tun) entered blocking state [ 124.096387][T12638] bridge0: port 3(syz_tun) entered forwarding state [ 124.098148][T12644] ALSA: seq fatal error: cannot create timer (-22) [ 124.106809][T12646] netlink: 'syz.3.1249': attribute type 10 has an invalid length. [ 124.110263][T12640] EXT4-fs: Ignoring removed orlov option [ 124.117446][T12646] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1249'. [ 124.123365][T12640] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.133275][T12646] bridge0: port 4(batadv0) entered blocking state [ 124.145542][T12646] bridge0: port 4(batadv0) entered disabled state [ 124.152217][T12646] batadv0: entered allmulticast mode [ 124.169146][ T2967] ================================================================== [ 124.171699][T12646] batadv0: entered promiscuous mode [ 124.177243][ T2967] BUG: KCSAN: data-race in d_delete / step_into [ 124.182672][T12646] bridge0: port 4(batadv0) entered blocking state [ 124.188641][ T2967] [ 124.188647][ T2967] read-write to 0xffff88810685b180 of 4 bytes by task 12378 on cpu 0: [ 124.188663][ T2967] d_delete+0x73/0x100 [ 124.188687][ T2967] d_delete_notify+0x34/0x100 [ 124.188710][ T2967] vfs_unlink+0x320/0x430 [ 124.195300][T12646] bridge0: port 4(batadv0) entered forwarding state [ 124.197669][ T2967] do_unlinkat+0x236/0x4c0 [ 124.229953][ T2967] __x64_sys_unlink+0x2e/0x40 [ 124.234822][ T2967] x64_sys_call+0x280f/0x2d60 [ 124.239519][ T2967] do_syscall_64+0xc9/0x1c0 [ 124.244029][ T2967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.250022][ T2967] [ 124.252450][ T2967] read to 0xffff88810685b180 of 4 bytes by task 2967 on cpu 1: [ 124.259980][ T2967] step_into+0x12f/0x810 [ 124.264227][ T2967] walk_component+0x169/0x230 [ 124.268983][ T2967] path_lookupat+0x10a/0x2b0 [ 124.273565][ T2967] filename_lookup+0x127/0x300 [ 124.278358][ T2967] do_readlinkat+0x89/0x210 [ 124.282862][ T2967] __x64_sys_readlink+0x47/0x60 [ 124.287712][ T2967] x64_sys_call+0x13c3/0x2d60 [ 124.292479][ T2967] do_syscall_64+0xc9/0x1c0 [ 124.296980][ T2967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.302964][ T2967] [ 124.305275][ T2967] value changed: 0x00600108 -> 0x00008008 [ 124.310979][ T2967] [ 124.313321][ T2967] Reported by Kernel Concurrency Sanitizer on: [ 124.320153][ T2967] CPU: 1 UID: 0 PID: 2967 Comm: udevd Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 124.330643][ T2967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 124.340688][ T2967] ================================================================== [ 124.352262][ T55] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 124.361605][ T55] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 124.371543][T12655] vhci_hcd: invalid port number 157 [ 124.376806][T12655] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 124.386763][T12640] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1250'. [ 124.395829][T12640] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1250'.