last executing test programs: 3.614410004s ago: executing program 3 (id=5609): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x2e, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='mpol=interleave=static,mpol=default']) 3.598038735s ago: executing program 3 (id=5611): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ab0df19d82d458160c371ef0", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'vcan0\x00'}}, 0x1e) close(r3) r4 = dup2(r0, r0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req={0x81, 0x3, 0x8, 0x5}, 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r6 = socket(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7]) fchown(r5, 0x0, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000014b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) lsm_set_self_attr(0x0, 0x0, 0xd1, 0x0) 3.559286408s ago: executing program 3 (id=5613): bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001f901000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x6, 0x0) listen(r7, 0x405) close_range(r7, 0xffffffffffffffff, 0x0) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_DEL_MFC_PROXY(r4, 0x0, 0xd3, &(0x7f00000000c0)={@broadcast, @rand_addr=0x64010102, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x0, 0x0, 0x6c}, 0x3c) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r8}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x8, 0x0, 0x4, 0x6, 0xc8c, 0x100, 0x3, 0x1, 0x0}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={r9, 0x9}, 0x8) openat$vcs(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x20, 0x0, 0x0, 0x8000, 0x308, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/pm_freeze_timeout', 0x0, 0x0) sendfile(r10, r10, 0x0, 0x6) 3.558558339s ago: executing program 3 (id=5614): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = msgget(0x0, 0x28c) msgrcv(r0, 0x0, 0x0, 0x2, 0x1000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) msgsnd(r0, &(0x7f00000004c0)={0x2}, 0x8, 0x0) 3.493293174s ago: executing program 3 (id=5617): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x58, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020093b537022abc4300f8ffff8170cea12700b26335ffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x18) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000600000000000000008500000007000000c5000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket(0x10, 0x3, 0x0) move_pages(0x0, 0x20000000000001ab, &(0x7f0000000000), 0x0, &(0x7f0000000000)=[0x0], 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x7, 0x40, 0x9, 0x3, {{0x7, 0x4, 0x2, 0x2b, 0x1c, 0x65, 0x0, 0xc, 0x4, 0x0, @rand_addr=0x64010102, @multicast1, {[@timestamp={0x44, 0x8, 0x7e, 0x0, 0x9, [0x6568]}]}}}}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff000000f8ffffffbfa400fd0000000096ea5c99f0ffffffb702000008000000182300"/92, @ANYRES32=r4, @ANYBLOB="0000000006003f00b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000b80)={0x2, 0x6, 0x2, 0x2, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}]}, 0x38) connect$packet(r7, &(0x7f0000000ac0)={0x11, 0xfe, r5, 0x1, 0x6, 0x6, @multicast}, 0x14) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000080)='./file0\x00', r6, 0x4000, r4}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000340)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4735}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@norecovery}, {@user_xattr}]}, 0xfd, 0x4fa, &(0x7f00000005c0)="$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") 2.987789237s ago: executing program 0 (id=5631): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) open(&(0x7f0000000000)='./bus\x00', 0x16d43e, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x37, 0x6, 0x5}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x4f08e000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) unshare(0x2c060000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r6 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000240)=ANY=[@ANYRESDEC=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20"], 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa79ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200008b0"], 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="19000000032b32c940a25dd80800000000000000272dd461aea9e33acbf08a73a3951e3e23a2175139440e0fa387efd3d2752c8f329624f2c7cbb46d1a2a08d68acddaf57bf5eac0c6d3a14e0759", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b5181100", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x4, 0x7ffc1ffb}]}) syncfs(0xffffffffffffffff) 2.117097631s ago: executing program 0 (id=5649): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x80000000000, 0x40001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="80"], 0xffd8}}, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000fc00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) r6 = socket$packet(0x11, 0x2, 0x300) close_range(r4, r2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'macsec0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @broadcast}, 0x10) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r7], 0x20}}, 0x0) r9 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000380)={0x1d, r10, 0x1}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r9) sendmsg$ETHTOOL_MSG_WOL_GET(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x7c}}, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a40)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x1c8, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@ipv6={@mcast2, @mcast1, [0xffffff00, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xffffff00, 0xffffffff], 'ip6erspan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x87, 0x10, 0x2, 0x6b}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x32}, [0x0, 0xffffffff, 0xff000000], [0x308671da02021d30, 0xffffffff, 0x0, 0xff000000], '\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x0, 0x4, 0x55}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"59df", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ipv6={@mcast2, @mcast2, [0x0, 0xff000000, 0xff], [0xff000000, 0x0, 0x0, 0xffffffff], 'xfrm0\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x1d, 0x0, 0x2, 0x8}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x5}, {0x3, 0x2}, {0x3, 0x6}, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='bcache_invalidate\x00', 0xffffffffffffffff, 0x0, 0x1000000000001}, 0x18) 1.411646131s ago: executing program 4 (id=5664): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, 0x0, 0x0) 1.315340269s ago: executing program 4 (id=5666): socket$unix(0x1, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000900)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @empty}, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x6, 0x8, 0x400, 0x0, 0x0, r6}) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3c, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x49, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xc5a57f798672d5e0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r9, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x5}, 0x10) 1.222750077s ago: executing program 1 (id=5668): bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001f901000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x6, 0x0) listen(r7, 0x405) close_range(r7, 0xffffffffffffffff, 0x0) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_DEL_MFC_PROXY(r4, 0x0, 0xd3, &(0x7f00000000c0)={@broadcast, @rand_addr=0x64010102, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x0, 0x0, 0x6c}, 0x3c) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r8}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x8, 0x0, 0x4, 0x6, 0xc8c, 0x100, 0x3, 0x1, 0x0}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={r9, 0x9}, 0x8) openat$vcs(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0xf, &(0x7f0000001500)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000", @ANYRES32, @ANYBLOB="000000000000010018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018620000010000000000000003000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/pm_freeze_timeout', 0x0, 0x0) sendfile(r10, r10, 0x0, 0x6) 1.166236091s ago: executing program 1 (id=5669): io_setup(0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0x75, 0x109301) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00ffffffffffffffff942fe811a52149e03ee130193deee72374295c4a1328", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000030000000200"/28], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0xa111, 0x31, &(0x7f0000000740)=""/49, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xfd06, r3, 0x3, 0x0, &(0x7f00000000c0)=[{0x2, 0x5, 0xc, 0x6}, {0x1, 0x1, 0x7, 0x7}, {0x0, 0x4, 0xe, 0x1}], 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000000), 0x20000000000000a4, 0x0, 0x0, 0x0) 1.142397023s ago: executing program 4 (id=5670): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) io_setup(0x5, &(0x7f0000000e80)=0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xa, 0x0, 0x7ffc0002}]}) r3 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000580), &(0x7f0000000080), 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000080)="8c", 0x1}]) io_getevents(r0, 0xd7, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getitimer(0x1, &(0x7f0000000040)) 929.400282ms ago: executing program 4 (id=5671): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe79, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000200)='system_u:object_r:device_t:s0\x00', 0x1e) 807.953252ms ago: executing program 4 (id=5672): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000540)=0x0, &(0x7f00000001c0)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 642.217756ms ago: executing program 4 (id=5673): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000004c0)="e9a272c45fc67be447548f499737a710ee5f509e1bc39c8bdc70a7b8e1c017f08876169c756395208266529dd57634766ee06929ad5328bdf9579bc1a7c4f0e0e5b0cd5fab8cd6179cf855c5310b4279dd99a70e48e0cf915ba42e58406b52a6fc173d69fef2b5a95e0eeab548e9d291eae55a829bd116b494cb0735d5d0ce704551784aa7b5be6c65c0c239a4cf512e7b97f79003a58c75ffeebd9c000065869b1c7da5571f8762a6e60b16294932631a", 0xb1}], 0x1}, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=r7, @ANYBLOB="92010000000000000a000200bbbbbbbbbbbb00001c0016801800018014000a00"], 0x48}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000700)={0x2000a0080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 521.451486ms ago: executing program 0 (id=5675): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 492.870428ms ago: executing program 2 (id=5676): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1ffffffffffffe22, &(0x7f0000000180)=ANY=[@ANYRES16=r0], &(0x7f0000000240)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='svc_xprt_accept\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000700000000000000e9ff8e0000fb", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r5}, 0x38) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r8, @ANYBLOB="000000000000000014001a80100004"], 0x34}}, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/mdstat\x00', 0x0, 0x0) read$char_usb(r9, &(0x7f0000001840)=""/4090, 0xffa) preadv(r9, &(0x7f0000000040)=[{&(0x7f0000000180)=""/128, 0x80}], 0x1, 0x0, 0x0) read$char_usb(r9, &(0x7f0000000240)=""/34, 0x43) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00'}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r10, &(0x7f0000000180), 0x40010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r11, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 436.449934ms ago: executing program 0 (id=5677): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000002000)=ANY=[@ANYBLOB="18050000000000000000ed7100000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000003000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000100b7040000080000008500000095000000a967286ec954377e09c63907f1aa64a6b7100ad59bd482882a69ba23d28fc87ef79104949771f239a93f5232b33bea93951524b26a3a680170ab86dbb9c00cedf3500536fb8672a1a6d9e5ed2bfa31bef696da29"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="17000000000000000400000003", @ANYRES32=0x0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000400)='./file0\x00', r4, &(0x7f0000000440)='./file1\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) r7 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000049c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) 319.368144ms ago: executing program 2 (id=5678): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000002000)=ANY=[@ANYBLOB="18050000000000000000ed7100000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000003000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000100b7040000080000008500000095000000a967286ec954377e09c63907f1aa64a6b7100ad59bd482882a69ba23d28fc87ef79104949771f239a93f5232b33bea93951524b26a3a680170ab86dbb9c00cedf3500536fb8672a1a6d9e5ed2bfa31bef696da29"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="17000000000000000400000003", @ANYRES32=0x0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000400)='./file0\x00', r4, &(0x7f0000000440)='./file1\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) r7 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0xb4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}]}]}]}}]}, 0xb4}, 0x1, 0x7a00}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ff1143243e343fd48650323030302e75"], 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r11, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000049c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) 275.981487ms ago: executing program 0 (id=5679): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) creat(&(0x7f0000000040)='./file0/file1\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x11, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) unlink(&(0x7f0000000100)='./file0/file1\x00') 247.840009ms ago: executing program 1 (id=5680): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = msgget(0x0, 0x28c) msgrcv(r0, 0x0, 0x0, 0x2, 0x1000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) msgsnd(r0, &(0x7f00000004c0)={0x2}, 0x8, 0x0) 245.53317ms ago: executing program 0 (id=5681): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000040)) fcntl$setlease(r0, 0x400, 0x2) r2 = syz_io_uring_setup(0x46bb, &(0x7f0000000380)={0x0, 0x0, 0x10100, 0xfffffffe, 0xffffffff}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x4, r6}, 0x38) io_uring_enter(r2, 0x291c, 0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="27b380aa580b0218566c594c8a7426e88c088b038dd710583a2b0a66449e712cb69ddfce02bb6c4bfec0ccd558bebda665eda3fd88b971a76f793fef2855eb4e9caafaeb601a55c8fb6530fcbab58f2737eb2c7c337ce79e175dba800a8f56a3582a95527eb5ed4bddaf9173c28d35abf47b5ddb7ea6dd2ee6de5ee233a5c39d94142d107b92e1b1aae7b4e8ad8e2ba37472166e4b4cbefafc396302f64817304be88e4ed339d1fe6dc0850a8d5691b055bb3ace331d1aa6c9042a3363977de9ac93205b97f2e98e34f8d191bdc4587995d51f7f67142f8b93f800de2e4407515005"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$nl_audit(0x10, 0x3, 0x9) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r9, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r11, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8011) sendmsg$AUDIT_USER_AVC(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000005304"], 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) 205.401413ms ago: executing program 2 (id=5682): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7020000ffff0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendto$packet(r0, &(0x7f0000000000)="10060800", 0x4, 0x400c800, &(0x7f0000000040)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @local}, 0x14) 168.875586ms ago: executing program 1 (id=5683): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000110000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x40, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000640)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffff"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b81a100850000006d000000040000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2}, &(0x7f0000000640), &(0x7f0000000680)=r3}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r5, 0xc0481273, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21085e, &(0x7f00000001c0), 0x1, 0x504, &(0x7f0000001480)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9sCWE0KoEqJHkNqQuFEUO45ipzShh/TMFYlKnODIH8C5J+5cENy4lAMSPyJQg8TBaMaT1E3tJtokdhR/PtJo3ps3nu97cea9+Dn2C2BoXY2I3YgYi4h7ETGdHc9lW9xqb8l5z/ceLe3vPVrKRat155+5tDw5Fh2PSVzJrlmMiB9+N+InuVfjNrZ31har1cpmlp9t1jZmG9s7N1ZriyuVlcp6ubwwvzD3yc2Py2fW1vdqY1nqq8/+sPutnyXVmsqOdLbjLLWbXjiMkxiNiO+fR7ABGMnaMzboivC55CPi7Yh4P73/p2MkfTYBgMus1ZqO1nRnHgC47PLpHFguX8rmAqYiny+V2nN478RkvlpvNK/fr2+tL7fnymaikL+/Wq3MZXOFM1HIJfn5NP0iXz6SvxkRb0XEL8Yn0nxpqV5dHuQfPgAwxK4cGf//M94e/wGAS6446AoAAH1n/AeA4WP8B4DhY/wHgOHTHv8nBl0NAKCPvP4HgOFj/AeAofKD27eTrbWfff/18oPtrbX6gxvLlcZaqba1VFqqb26UVur1lfQ7e2rHXa9ar2/MfxRbD2e+vdFozja2d+7W6lvrzbvp93rfrRTSs3b70DIAoJe33nv651wyIn86kW7RsZZDYaA1A85bftAVAAZmZNAVAAbGal8wvE7xGt/0AFwSXZbofUmx2weEWq1W6/yqBJyza18y/w/DqmP+338Bw5Ax/w/Dy/w/DK9WK3fSNf/jpCcCABebOX6gx/v/b2f732ZvDvx4+egZT7o+bjfrXs6uggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHABHaz/W8rWAp+KfL5UingjImaikLu/Wq3MRcSbEfGn8cJ4kp8fcJ0BgNPK/y2Xrf91bfrDqZeK3r1ymByLiJ/+6s4vHy42m5t/jBjL/Wv84HjzSXa83P/aAwDHOxin033HC/nne4+WDrZ+1ufv34mIYjv+/t5Y7B/GH43RdF+MQkRM/juX5dtyHXMXp7H7OCK+2K39uZhK50DaK58ejZ/EfqOv8fMvxc+nZe198rP4whnUBYbN06T/udXt/svH1XTf/f4vpj3U6WX9X3Kppf20D3wR/6D/G+nR/109aYyPfv+9dmri1bLHEV8ejTiIvd/R/xzEz/WI/+EJ4//lK+++36us9euIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m85Rz/YeDf7x6fU3e5Ul7Z/sEb94TPu/fsL2/+Z/9370tdfE/+YH3eLn453XxE/GxG+cMP7i5O+KvcqS+Ms92n/c83/9hPGf/XXnlWXDAYDBaWzvrC1Wq5VNCYmLn0h+ZS9ANbomPutXrLHoXvTzD9r39JGiVuv1F/yse1GvHuMsZt2Ai+Dwpo+I/w66MgAAAAAAAAAAAAAAQFf9+MTSoNsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA5fX/AAAA//+YXdZi") utimes(&(0x7f0000000640)='./file0\x00', 0x0) 155.731127ms ago: executing program 2 (id=5684): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000006000000000400"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6, @in6}}, {{}, 0x0, @in6}}, &(0x7f0000000040)=0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={r3, 0x5ef, 0x3}, 0x8) 119.19594ms ago: executing program 3 (id=5685): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) open(&(0x7f0000000000)='./bus\x00', 0x16d43e, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x37, 0x6, 0x5}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x4f08e000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) unshare(0x2c060000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r6 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000240)=ANY=[@ANYRESDEC=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20"], 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa79ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200008b0"], 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="19000000032b32c940a25dd80800000000000000272dd461aea9e33acbf08a73a3951e3e23a2175139440e0fa387efd3d2752c8f329624f2c7cbb46d1a2a08d68acddaf57bf5eac0c6d3a14e0759", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b5181100", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x4, 0x7ffc1ffb}]}) syncfs(0xffffffffffffffff) 85.800713ms ago: executing program 2 (id=5686): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 84.113413ms ago: executing program 1 (id=5687): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d0000"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) io_uring_setup(0x8fd, &(0x7f0000000000)={0x0, 0x949f, 0x100, 0xffffffff, 0x2b}) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0xa50003d1) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0xf, &(0x7f0000000100)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) getpgrp(0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) 83.279593ms ago: executing program 2 (id=5688): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x80000000000, 0x40001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="80"], 0xffd8}}, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000fc00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) r6 = socket$packet(0x11, 0x2, 0x300) close_range(r4, r2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'macsec0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @broadcast}, 0x10) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r7], 0x20}}, 0x0) r9 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000380)={0x1d, r10, 0x1}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r9) sendmsg$ETHTOOL_MSG_WOL_GET(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x7c}}, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a40)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x1c8, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@ipv6={@mcast2, @mcast1, [0xffffff00, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xffffff00, 0xffffffff], 'ip6erspan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x87, 0x10, 0x2, 0x6b}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x32}, [0x0, 0xffffffff, 0xff000000], [0x308671da02021d30, 0xffffffff, 0x0, 0xff000000], '\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x0, 0x4, 0x55}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"59df", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ipv6={@mcast2, @mcast2, [0x0, 0xff000000, 0xff], [0xff000000, 0x0, 0x0, 0xffffffff], 'xfrm0\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x1d, 0x0, 0x2, 0x8}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x5}, {0x3, 0x2}, {0x3, 0x6}, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='bcache_invalidate\x00', 0xffffffffffffffff, 0x0, 0x1000000000001}, 0x18) 0s ago: executing program 1 (id=5689): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) listen(0xffffffffffffffff, 0x3) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x270, 0x168, 0x9, 0x270, 0xb, 0x358, 0x250, 0x250, 0x358, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'veth0_to_bridge\x00', 'nicvf0\x00'}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'team0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r2, &(0x7f0000000400)=[{&(0x7f0000000480)=""/174, 0xae}], 0x1) kernel console output (not intermixed with test programs): 000:0000.0005: unknown main item tag 0x0 [ 471.663694][ T3332] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 471.671126][ T3332] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 471.678558][ T3332] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 471.686039][ T3332] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 471.693441][ T3332] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 471.700960][ T3332] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 471.708455][ T3332] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 471.715980][ T3332] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 471.723397][ T3332] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 471.730822][ T3332] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 471.738264][ T3332] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 471.745691][ T3332] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 471.753079][ T3332] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 471.760526][ T3332] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 471.768031][ T3332] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 471.775477][ T3332] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 471.782909][ T3332] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 471.791052][ T3332] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 471.894013][T20988] syz.3.5214[20988] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 471.894080][T20988] syz.3.5214[20988] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 471.909633][T20988] syz.3.5214[20988] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 471.968509][T20996] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5217'. [ 472.086040][T21005] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 472.086236][T21007] FAULT_INJECTION: forcing a failure. [ 472.086236][T21007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.108859][T21007] CPU: 1 UID: 0 PID: 21007 Comm: syz.3.5220 Not tainted 6.12.0-rc3-syzkaller-00420-g715ca9dd687f #0 [ 472.119646][T21007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 472.129697][T21007] Call Trace: [ 472.132966][T21007] [ 472.135890][T21007] dump_stack_lvl+0xf2/0x150 [ 472.140478][T21007] dump_stack+0x15/0x20 [ 472.144677][T21007] should_fail_ex+0x223/0x230 [ 472.149422][T21007] should_fail+0xb/0x10 [ 472.153583][T21007] should_fail_usercopy+0x1a/0x20 [ 472.158642][T21007] _copy_from_user+0x1e/0xd0 [ 472.163271][T21007] kstrtouint_from_user+0x76/0xe0 [ 472.168449][T21007] ? 0xffffffff81000000 [ 472.172594][T21007] proc_fail_nth_write+0x4f/0x150 [ 472.177669][T21007] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 472.183299][T21007] vfs_write+0x26c/0x910 [ 472.187544][T21007] ? __fget_files+0x1d4/0x210 [ 472.192291][T21007] ksys_write+0xeb/0x1b0 [ 472.196537][T21007] __x64_sys_write+0x42/0x50 [ 472.201150][T21007] x64_sys_call+0x27dd/0x2d60 [ 472.205829][T21007] do_syscall_64+0xc9/0x1c0 [ 472.210429][T21007] ? clear_bhb_loop+0x55/0xb0 [ 472.215148][T21007] ? clear_bhb_loop+0x55/0xb0 [ 472.219907][T21007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.225862][T21007] RIP: 0033:0x7faaaadfcadf [ 472.230265][T21007] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 472.249907][T21007] RSP: 002b:00007faaa9a77030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 472.258313][T21007] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007faaaadfcadf [ 472.266355][T21007] RDX: 0000000000000001 RSI: 00007faaa9a770a0 RDI: 0000000000000006 [ 472.274429][T21007] RBP: 00007faaa9a77090 R08: 0000000000000000 R09: 0000000000000000 [ 472.282389][T21007] R10: 0000000020000000 R11: 0000000000000293 R12: 0000000000000001 [ 472.290348][T21007] R13: 0000000000000000 R14: 00007faaaafb5f80 R15: 00007ffe8e7732a8 [ 472.298380][T21007] [ 472.512957][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.520656][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.528092][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.535512][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.542900][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.550409][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.557889][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.565537][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.572938][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.580500][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.587936][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.595344][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.602731][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.610156][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.617572][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.625062][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.632462][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.639938][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.647428][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.654876][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.662265][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.668516][T21027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.669683][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.680129][T21027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.687513][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.697402][T21027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.704774][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.715160][T21027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.715211][T21027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.722527][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.732419][T21027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.742797][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.742824][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.742846][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.782424][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.789861][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.797258][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.804692][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.812080][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.819671][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.827082][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.834578][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.841970][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.849380][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.856836][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.864248][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.871767][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.879267][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.886763][ T3332] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.895361][ T3332] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 473.060389][T21031] loop0: detected capacity change from 0 to 512 [ 473.082793][T21031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.114435][T21031] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.153818][T20501] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.299163][T21038] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 473.307434][T21038] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 473.359600][T21044] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 473.438198][T21057] Unknown options in mask 5 [ 475.284389][ T5947] kmmpd-loop3: attempt to access beyond end of device [ 475.284389][ T5947] loop3: rw=14337, sector=256, nr_sectors = 4 limit=64 [ 475.298003][ T5947] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 475.684560][ T5960] kmmpd-loop1: attempt to access beyond end of device [ 475.684560][ T5960] loop1: rw=14337, sector=256, nr_sectors = 4 limit=64 [ 475.698203][ T5960] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 480.324532][ T5947] kmmpd-loop3: attempt to access beyond end of device [ 480.324532][ T5947] loop3: rw=14337, sector=256, nr_sectors = 4 limit=64 [ 480.340678][ T5947] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 480.724489][ T5960] kmmpd-loop1: attempt to access beyond end of device [ 480.724489][ T5960] loop1: rw=14337, sector=256, nr_sectors = 4 limit=64 [ 480.738019][ T5960] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 485.364892][ T5947] kmmpd-loop3: attempt to access beyond end of device [ 485.364892][ T5947] loop3: rw=14337, sector=256, nr_sectors = 4 limit=64 [ 485.378833][ T5947] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 485.764732][ T5960] kmmpd-loop1: attempt to access beyond end of device [ 485.764732][ T5960] loop1: rw=14337, sector=256, nr_sectors = 4 limit=64 [ 485.778826][ T5960] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 487.053244][T21069] pim6reg1: entered promiscuous mode [ 487.058663][T21069] pim6reg1: entered allmulticast mode [ 487.080155][T21073] netlink: 'syz.1.5242': attribute type 1 has an invalid length. [ 487.080525][T21074] xt_connbytes: Forcing CT accounting to be enabled [ 487.096767][T21074] Cannot find add_set index 0 as target [ 487.153369][T21081] loop4: detected capacity change from 0 to 512 [ 487.163088][T21081] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 487.226247][T21077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.236777][T21077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.246878][T21077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.257380][T21077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.267316][T21077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.277804][T21077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.288862][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 487.288878][ T29] audit: type=1326 audit(1729465424.057:10942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21090 comm="syz.1.5252" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77879adff9 code=0x0 [ 487.324893][T21089] netlink: 'syz.3.5250': attribute type 1 has an invalid length. [ 487.344802][ T29] audit: type=1326 audit(1729465424.147:10943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21090 comm="syz.1.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77879adff9 code=0x7ffc0000 [ 487.369315][ T29] audit: type=1326 audit(1729465424.167:10944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21090 comm="syz.1.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f77879adff9 code=0x7ffc0000 [ 487.392948][ T29] audit: type=1326 audit(1729465424.167:10945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21090 comm="syz.1.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77879adff9 code=0x7ffc0000 [ 487.403473][T21096] pim6reg1: entered promiscuous mode [ 487.416937][ T29] audit: type=1326 audit(1729465424.167:10946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21090 comm="syz.1.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77879adff9 code=0x7ffc0000 [ 487.416995][ T29] audit: type=1326 audit(1729465424.167:10947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21090 comm="syz.1.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f77879adff9 code=0x7ffc0000 [ 487.422294][T21096] pim6reg1: entered allmulticast mode [ 487.446005][ T29] audit: type=1326 audit(1729465424.167:10948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21090 comm="syz.1.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77879adff9 code=0x7ffc0000 [ 487.489931][T21101] loop2: detected capacity change from 0 to 128 [ 487.499078][ T29] audit: type=1326 audit(1729465424.167:10949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21090 comm="syz.1.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77879adff9 code=0x7ffc0000 [ 487.593707][T21105] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 487.640068][T21111] loop2: detected capacity change from 0 to 512 [ 487.646824][T21111] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 487.675766][ T29] audit: type=1326 audit(1729465424.477:10950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21112 comm="syz.3.5261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaaadfdff9 code=0x7ffc0000 [ 487.684702][T21115] loop2: detected capacity change from 0 to 512 [ 487.699565][ T29] audit: type=1326 audit(1729465424.477:10951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21112 comm="syz.3.5261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaaadfdff9 code=0x7ffc0000 [ 487.731763][T21115] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 487.743187][T21115] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 487.759774][T21115] EXT4-fs (loop2): 1 truncate cleaned up [ 487.766136][T21115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.836148][T17656] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.937126][T21123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.947750][T21123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.957686][T21123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.968387][T21123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.978269][T21123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.988862][T21123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.111393][T21140] netlink: 'syz.2.5271': attribute type 1 has an invalid length. [ 488.149822][T21143] loop2: detected capacity change from 0 to 512 [ 488.157667][T21143] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 488.677955][T21153] sg_write: data in/out 588840944/24 bytes for SCSI command 0x94-- guessing data in; [ 488.677955][T21153] program syz.2.5274 not setting count and/or reply_len properly [ 488.702810][T21168] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 488.715026][T21153] program syz.2.5274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 488.785617][T21172] pim6reg1: entered promiscuous mode [ 488.791110][T21172] pim6reg1: entered allmulticast mode [ 488.890063][T21179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.900634][T21179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.910577][T21179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.921014][T21179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.932446][T21179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.942785][T21183] loop2: detected capacity change from 0 to 1024 [ 488.954000][T21179] batadv_slave_0: entered promiscuous mode [ 489.067379][T21183] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.089590][T21183] bridge0: port 3(vlan2) entered blocking state [ 489.096057][T21183] bridge0: port 3(vlan2) entered disabled state [ 489.108055][T21183] vlan2: entered allmulticast mode [ 489.128528][T21183] vlan2: left allmulticast mode [ 489.132506][T21196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5285'. [ 489.153769][T21198] netlink: 'syz.0.5286': attribute type 1 has an invalid length. [ 489.171350][T21196] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 489.210368][T17656] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.352473][T21205] netlink: 'syz.1.5291': attribute type 1 has an invalid length. [ 489.441569][T21226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.452161][T21226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.462113][T21226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.472609][T21226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.190499][T21242] bridge0: port 3(vlan2) entered blocking state [ 490.197059][T21242] bridge0: port 3(vlan2) entered disabled state [ 490.212841][T21242] vlan2: entered allmulticast mode [ 490.233714][T21246] usb usb8: usbfs: process 21246 (syz.0.5304) did not claim interface 0 before use [ 490.262191][T21242] vlan2: left allmulticast mode [ 490.378674][T21250] loop4: detected capacity change from 0 to 512 [ 490.407593][ T5947] kmmpd-loop3: attempt to access beyond end of device [ 490.407593][ T5947] loop3: rw=14337, sector=256, nr_sectors = 4 limit=64 [ 490.421480][ T5947] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 490.435791][T21257] usb usb8: usbfs: process 21257 (syz.2.5308) did not claim interface 0 before use [ 490.476478][T21259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5309'. [ 490.504101][T21250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.519843][T21261] bridge0: port 3(vlan2) entered blocking state [ 490.526322][T21261] bridge0: port 3(vlan2) entered disabled state [ 490.526561][T21250] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 490.533801][T21261] vlan2: entered allmulticast mode [ 490.549810][T21261] vlan2: left allmulticast mode [ 490.562393][T21268] loop2: detected capacity change from 0 to 512 [ 490.636015][T21268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.667157][T21268] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 490.735127][T17656] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.774881][T21281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5316'. [ 490.786274][T21281] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 490.830345][T21284] loop2: detected capacity change from 0 to 512 [ 490.844421][ T5960] kmmpd-loop1: attempt to access beyond end of device [ 490.844421][ T5960] loop1: rw=14337, sector=256, nr_sectors = 4 limit=64 [ 490.849586][T21284] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 490.858018][ T5960] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 490.940974][T21288] pim6reg1: entered promiscuous mode [ 490.947675][T21288] pim6reg1: entered allmulticast mode [ 491.145547][T21296] loop0: detected capacity change from 0 to 128 [ 491.208778][T21292] netlink: 'syz.2.5320': attribute type 1 has an invalid length. [ 491.253558][T21300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5323'. [ 491.291858][T21302] bridge0: port 3(vlan2) entered blocking state [ 491.298470][T21302] bridge0: port 3(vlan2) entered disabled state [ 491.305734][T21302] vlan2: entered allmulticast mode [ 491.319681][T21302] vlan2: left allmulticast mode [ 491.328111][T21300] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 491.458738][T21321] loop0: detected capacity change from 0 to 1024 [ 491.481751][T21321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.500228][T21321] bridge0: port 3(vlan2) entered blocking state [ 491.506810][T21321] bridge0: port 3(vlan2) entered disabled state [ 491.515570][T21321] vlan2: entered allmulticast mode [ 491.523248][T21321] vlan2: left allmulticast mode [ 491.560572][T21328] netlink: 'syz.3.5336': attribute type 1 has an invalid length. [ 491.560761][T21330] usb usb8: usbfs: process 21330 (syz.2.5337) did not claim interface 0 before use [ 491.650723][T21335] loop2: detected capacity change from 0 to 1024 [ 491.678434][T21335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.699442][T21335] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.699570][T20501] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.714236][T21335] EXT4-fs (loop2): resizing filesystem from 512 to 0 blocks [ 491.726456][T21335] EXT4-fs warning (device loop2): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 491.973695][T21345] netlink: 'syz.0.5342': attribute type 17 has an invalid length. [ 492.019344][T21349] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5343'. [ 492.084998][T21353] loop0: detected capacity change from 0 to 128 [ 492.202117][T18703] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.226300][T21359] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 492.270236][T21363] loop0: detected capacity change from 0 to 512 [ 492.286934][T21361] netlink: 'syz.4.5349': attribute type 1 has an invalid length. [ 492.289310][T21363] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 492.407016][T17656] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.471507][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 492.471521][ T29] audit: type=1400 audit(1729465429.267:11071): avc: denied { create } for pid=21371 comm="syz.2.5352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 492.525737][T21376] loop4: detected capacity change from 0 to 2048 [ 492.554703][T21375] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5355'. [ 492.592855][ T29] audit: type=1400 audit(1729465429.387:11072): avc: denied { bind } for pid=21377 comm="syz.3.5356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 492.601214][T21379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.624173][T21379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.633999][T21379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.644444][T21379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.754063][T21376] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.835228][T21376] Cannot find add_set index 0 as target [ 492.844010][ T29] audit: type=1326 audit(1729465429.637:11073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21391 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaaadfdff9 code=0x7ffc0000 [ 492.867423][T21394] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 492.877410][ T29] audit: type=1326 audit(1729465429.637:11074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21391 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaaadfdff9 code=0x7ffc0000 [ 492.934677][ T29] audit: type=1326 audit(1729465429.637:11075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21391 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faaaadfdff9 code=0x7ffc0000 [ 492.960024][ T29] audit: type=1326 audit(1729465429.637:11076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21391 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaaadfdff9 code=0x7ffc0000 [ 492.983664][ T29] audit: type=1326 audit(1729465429.647:11077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21391 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaaadfdff9 code=0x7ffc0000 [ 493.006816][ T29] audit: type=1326 audit(1729465429.647:11078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21391 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faaaadfdff9 code=0x7ffc0000 [ 493.029885][ T29] audit: type=1326 audit(1729465429.647:11079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21391 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaaadfdff9 code=0x7ffc0000 [ 493.053994][ T29] audit: type=1326 audit(1729465429.647:11080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21391 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faaaadfdff9 code=0x7ffc0000 [ 493.353877][T18703] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.480471][T21409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5367'. [ 493.489638][T21409] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 493.533464][T21415] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 493.790645][T21437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5380'. [ 493.799803][T21437] bridge_slave_1: left allmulticast mode [ 493.805614][T21437] bridge_slave_1: left promiscuous mode [ 493.811288][T21437] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.831804][T21437] bridge_slave_0: left allmulticast mode [ 493.837524][T21437] bridge_slave_0: left promiscuous mode [ 493.843198][T21437] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.865175][T21441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5381'. [ 493.894926][T21445] loop4: detected capacity change from 0 to 1024 [ 493.905339][T21445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.921014][T21441] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 493.923836][T21445] bridge0: port 3(vlan2) entered blocking state [ 493.937037][T21445] bridge0: port 3(vlan2) entered disabled state [ 493.943646][T21445] vlan2: entered allmulticast mode [ 493.948567][T21450] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 493.958638][T21445] vlan2: left allmulticast mode [ 494.057470][T18703] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.070481][T21458] pim6reg1: entered promiscuous mode [ 494.075859][T21458] pim6reg1: entered allmulticast mode [ 494.087208][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.094770][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.102311][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.102560][T21461] pim6reg1: entered promiscuous mode [ 494.109951][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.110025][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.115405][T21461] pim6reg1: entered allmulticast mode [ 494.123183][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.143607][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.151090][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.158776][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.166269][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.173742][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.181286][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.188954][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.196388][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.204049][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.211617][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.219149][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.226603][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.233997][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.242110][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.249595][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.257166][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.264796][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.272263][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.280295][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.287739][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.295142][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.302617][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.310041][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.317616][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.325207][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.332698][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.340668][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.348444][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.355862][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.363317][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.370835][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.378543][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.386009][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.393417][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.401037][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.408967][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.416522][ T3332] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 494.426265][ T3332] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 494.521770][T21473] syz.2.5394[21473] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 494.521868][T21473] syz.2.5394[21473] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 494.542585][T21475] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 494.557037][T21473] syz.2.5394[21473] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 494.600039][T21482] SELinux: Context system_u: is not valid (left unmapped). [ 494.649277][T21486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5402'. [ 494.668603][T21486] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 494.716417][T21496] usb usb8: usbfs: process 21496 (syz.0.5403) did not claim interface 0 before use [ 494.721225][T21494] pim6reg1: entered promiscuous mode [ 494.731551][T21494] pim6reg1: entered allmulticast mode [ 494.762454][T21500] usb usb8: usbfs: process 21500 (syz.0.5407) did not claim interface 0 before use [ 494.779910][T21495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.790588][T21495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.800497][T21495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.811032][T21495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.852527][T21509] syz.0.5410[21509] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 494.852595][T21509] syz.0.5410[21509] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 494.864896][T21509] syz.0.5410[21509] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 494.898004][T21511] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 494.919975][T21516] loop0: detected capacity change from 0 to 512 [ 494.936706][T21516] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 494.976082][T21521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5415'. [ 495.034648][T21521] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 495.504301][ T5947] kmmpd-loop3: attempt to access beyond end of device [ 495.504301][ T5947] loop3: rw=14337, sector=256, nr_sectors = 4 limit=64 [ 495.517951][ T5947] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 496.034309][ T5960] kmmpd-loop1: attempt to access beyond end of device [ 496.034309][ T5960] loop1: rw=14337, sector=256, nr_sectors = 4 limit=64 [ 496.048286][ T5960] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 497.695944][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 497.695959][ T29] audit: type=1107 audit(1729465434.497:11200): pid=21520 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 500.564326][ T5947] kmmpd-loop3: attempt to access beyond end of device [ 500.564326][ T5947] loop3: rw=14337, sector=256, nr_sectors = 4 limit=64 [ 500.578796][ T5947] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 501.044387][ T5960] kmmpd-loop1: attempt to access beyond end of device [ 501.044387][ T5960] loop1: rw=14337, sector=256, nr_sectors = 4 limit=64 [ 501.058027][ T5960] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 505.604345][ T5947] kmmpd-loop3: attempt to access beyond end of device [ 505.604345][ T5947] loop3: rw=14337, sector=256, nr_sectors = 4 limit=64 [ 505.620306][ T5947] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 506.084658][ T5960] kmmpd-loop1: attempt to access beyond end of device [ 506.084658][ T5960] loop1: rw=14337, sector=256, nr_sectors = 4 limit=64 [ 506.098768][ T5960] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 506.109604][ T29] audit: type=1400 audit(1729465442.887:11201): avc: denied { mounton } for pid=21534 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 506.238951][ T28] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.305855][ T28] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.421605][ T28] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.469276][ T28] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.503906][T21544] chnl_net:caif_netlink_parms(): no params data found [ 506.575224][ T29] audit: type=1400 audit(1729465443.367:11202): avc: denied { read } for pid=3006 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 506.603553][T21536] chnl_net:caif_netlink_parms(): no params data found [ 506.633304][T21539] chnl_net:caif_netlink_parms(): no params data found [ 506.660787][ T28] bridge_slave_1: left allmulticast mode [ 506.666599][ T28] bridge_slave_1: left promiscuous mode [ 506.672568][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.680888][ T28] bridge_slave_0: left allmulticast mode [ 506.686875][ T28] bridge_slave_0: left promiscuous mode [ 506.692475][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.766603][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.776894][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.787802][ T28] bond0 (unregistering): Released all slaves [ 506.838830][T21544] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.846048][T21544] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.853721][T21544] bridge_slave_0: entered allmulticast mode [ 506.861193][T21544] bridge_slave_0: entered promiscuous mode [ 506.870312][T21544] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.877601][T21544] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.885188][T21544] bridge_slave_1: entered allmulticast mode [ 506.891874][T21544] bridge_slave_1: entered promiscuous mode [ 506.917805][T21542] chnl_net:caif_netlink_parms(): no params data found [ 506.929934][T21534] chnl_net:caif_netlink_parms(): no params data found [ 506.953860][ T28] hsr_slave_0: left promiscuous mode [ 506.959829][ T28] hsr_slave_1: left promiscuous mode [ 506.967914][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.975670][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.983178][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.993117][ T28] veth0_macvtap: left promiscuous mode [ 506.998653][ T28] veth1_vlan: left promiscuous mode [ 507.003940][ T28] veth0_vlan: left promiscuous mode [ 507.072855][ T28] team0 (unregistering): Port device team_slave_1 removed [ 507.082910][ T28] team0 (unregistering): Port device team_slave_0 removed [ 507.132250][T21544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.160462][T21544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.174921][T21539] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.182549][T21539] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.189882][T21539] bridge_slave_0: entered allmulticast mode [ 507.197066][T21539] bridge_slave_0: entered promiscuous mode [ 507.203783][T21539] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.211572][T21539] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.218928][T21539] bridge_slave_1: entered allmulticast mode [ 507.225453][T21539] bridge_slave_1: entered promiscuous mode [ 507.263901][ T29] audit: type=1400 audit(1729465444.057:11203): avc: denied { search } for pid=3006 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.263910][T21544] team0: Port device team_slave_0 added [ 507.291305][ T29] audit: type=1400 audit(1729465444.057:11204): avc: denied { read } for pid=3006 comm="dhcpcd" name="n161" dev="tmpfs" ino=21857 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 507.313294][ T29] audit: type=1400 audit(1729465444.057:11205): avc: denied { open } for pid=3006 comm="dhcpcd" path="/run/udev/data/n161" dev="tmpfs" ino=21857 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 507.336875][ T29] audit: type=1400 audit(1729465444.057:11206): avc: denied { getattr } for pid=3006 comm="dhcpcd" path="/run/udev/data/n161" dev="tmpfs" ino=21857 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 507.361521][T21536] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.368588][T21536] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.375936][T21536] bridge_slave_0: entered allmulticast mode [ 507.382329][T21536] bridge_slave_0: entered promiscuous mode [ 507.398490][T21544] team0: Port device team_slave_1 added [ 507.413579][T21536] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.420775][T21536] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.428003][T21536] bridge_slave_1: entered allmulticast mode [ 507.434724][T21536] bridge_slave_1: entered promiscuous mode [ 507.449921][T21534] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.457078][T21534] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.464485][T21534] bridge_slave_0: entered allmulticast mode [ 507.470766][T21534] bridge_slave_0: entered promiscuous mode [ 507.483868][T21539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.497570][T21542] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.506551][T21542] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.514911][T21542] bridge_slave_0: entered allmulticast mode [ 507.521566][T21542] bridge_slave_0: entered promiscuous mode [ 507.528808][T21534] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.535948][T21534] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.544070][T21534] bridge_slave_1: entered allmulticast mode [ 507.551511][T21534] bridge_slave_1: entered promiscuous mode [ 507.558181][T21544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.565442][T21544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.568587][ T29] audit: type=1400 audit(1729465444.367:11207): avc: denied { read } for pid=21607 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=343 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.592299][T21544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.623365][ T29] audit: type=1400 audit(1729465444.427:11208): avc: denied { open } for pid=21607 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=343 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.629882][T21544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.651974][ T29] audit: type=1400 audit(1729465444.427:11209): avc: denied { getattr } for pid=21607 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=343 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.658995][T21544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.712155][T21544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.724924][T21539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.735557][ T29] audit: type=1400 audit(1729465444.527:11210): avc: denied { write } for pid=21606 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=342 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.778450][T21536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.788431][T21542] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.795829][T21542] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.803082][T21542] bridge_slave_1: entered allmulticast mode [ 507.810081][T21542] bridge_slave_1: entered promiscuous mode [ 507.838231][T21544] hsr_slave_0: entered promiscuous mode [ 507.844624][T21544] hsr_slave_1: entered promiscuous mode [ 507.850966][T21544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 507.859319][T21544] Cannot create hsr debugfs directory [ 507.867626][T21536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.888004][T21534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.904968][T21542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.915096][T21539] team0: Port device team_slave_0 added [ 507.922435][T21542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.943263][T21534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.953361][T21539] team0: Port device team_slave_1 added [ 507.969960][T21536] team0: Port device team_slave_0 added [ 507.991697][T21539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.998775][T21539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.025262][T21539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.038056][T21542] team0: Port device team_slave_0 added [ 508.044921][T21542] team0: Port device team_slave_1 added [ 508.051436][T21536] team0: Port device team_slave_1 added [ 508.072855][T21534] team0: Port device team_slave_0 added [ 508.079085][T21539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.086519][T21539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.115347][T21539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.148777][T21536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.156022][T21536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.184533][T21536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.196688][T21536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.203730][T21536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.231868][T21536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.244428][T21534] team0: Port device team_slave_1 added [ 508.266565][T21542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.273670][T21542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.300184][T21542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.339312][T21542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.346459][T21542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.372490][T21542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.386811][T21534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.394222][T21534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.423141][T21534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.444052][T21539] hsr_slave_0: entered promiscuous mode [ 508.450528][T21539] hsr_slave_1: entered promiscuous mode [ 508.456538][T21539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 508.464487][T21539] Cannot create hsr debugfs directory [ 508.482376][T21534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.489503][T21534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.516566][T21534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.540817][T21536] hsr_slave_0: entered promiscuous mode [ 508.547094][T21536] hsr_slave_1: entered promiscuous mode [ 508.553267][T21536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 508.561761][T21536] Cannot create hsr debugfs directory [ 508.601930][T21542] hsr_slave_0: entered promiscuous mode [ 508.608155][T21542] hsr_slave_1: entered promiscuous mode [ 508.615209][T21542] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 508.623037][T21542] Cannot create hsr debugfs directory [ 508.637285][ T28] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.671396][T21534] hsr_slave_0: entered promiscuous mode [ 508.678293][T21534] hsr_slave_1: entered promiscuous mode [ 508.685203][T21534] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 508.692770][T21534] Cannot create hsr debugfs directory [ 508.716720][T21544] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.735542][ T28] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.787549][T21544] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.829451][ T28] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.865339][T21544] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.925140][ T28] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.977446][T21544] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.032415][ T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.063664][T21544] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 509.078969][T21539] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.090875][T21544] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 509.103096][ T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.115924][T21544] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 509.128649][T21539] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.143448][T21544] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 509.167863][ T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.194718][T21544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.210391][T21539] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.225716][T21544] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.238027][ T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.259924][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.267263][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.278869][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.287293][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.300871][T21539] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.390857][T21544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.398926][ T28] bridge_slave_1: left allmulticast mode [ 509.404755][ T28] bridge_slave_1: left promiscuous mode [ 509.410702][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.419110][ T28] bridge_slave_0: left allmulticast mode [ 509.425017][ T28] bridge_slave_0: left promiscuous mode [ 509.431674][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.442991][ T28] bridge_slave_1: left allmulticast mode [ 509.448820][ T28] bridge_slave_1: left promiscuous mode [ 509.454545][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.465619][ T28] bridge_slave_0: left allmulticast mode [ 509.471319][ T28] bridge_slave_0: left promiscuous mode [ 509.477156][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.485575][ T28] bridge_slave_1: left allmulticast mode [ 509.491217][ T28] bridge_slave_1: left promiscuous mode [ 509.496981][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.504931][ T28] bridge_slave_0: left allmulticast mode [ 509.510621][ T28] bridge_slave_0: left promiscuous mode [ 509.516397][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.806816][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.817359][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.827469][ T28] bond0 (unregistering): Released all slaves [ 509.836178][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.846356][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.856533][ T28] bond0 (unregistering): Released all slaves [ 509.865498][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.875440][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.886064][ T28] bond0 (unregistering): Released all slaves [ 509.895273][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.905803][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.916172][ T28] bond0 (unregistering): Released all slaves [ 509.954647][ T28] tipc: Left network mode [ 509.962846][ T28] tipc: Disabling bearer [ 509.968112][ T28] tipc: Disabling bearer [ 509.975897][ T28] tipc: Left network mode [ 509.983814][T21539] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 509.997782][T21539] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 510.009141][ T28] tipc: Disabling bearer [ 510.015546][ T28] tipc: Left network mode [ 510.018894][T21539] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 510.044961][ T28] hsr_slave_0: left promiscuous mode [ 510.051023][ T28] hsr_slave_1: left promiscuous mode [ 510.058942][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.067143][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.074886][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.086797][ T28] hsr_slave_0: left promiscuous mode [ 510.092782][ T28] hsr_slave_1: left promiscuous mode [ 510.101309][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.109602][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.117197][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.126948][ T28] hsr_slave_0: left promiscuous mode [ 510.132858][ T28] hsr_slave_1: left promiscuous mode [ 510.138663][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.146432][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.154078][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.163474][ T28] hsr_slave_0: left promiscuous mode [ 510.169857][ T28] hsr_slave_1: left promiscuous mode [ 510.176490][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.184169][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.191669][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.204964][ T28] veth0_macvtap: left promiscuous mode [ 510.210503][ T28] veth1_vlan: left promiscuous mode [ 510.215732][ T28] veth0_vlan: left promiscuous mode [ 510.221429][ T28] veth0_macvtap: left promiscuous mode [ 510.227072][ T28] veth1_vlan: left promiscuous mode [ 510.232336][ T28] veth0_vlan: left promiscuous mode [ 510.238239][ T28] veth0_macvtap: left promiscuous mode [ 510.243758][ T28] veth1_vlan: left promiscuous mode [ 510.249029][ T28] veth0_vlan: left promiscuous mode [ 510.255212][ T28] veth0_macvtap: left promiscuous mode [ 510.260778][ T28] veth1_vlan: left promiscuous mode [ 510.266044][ T28] veth0_vlan: left promiscuous mode [ 510.437842][ T28] team0 (unregistering): Port device team_slave_1 removed [ 510.449111][ T28] team0 (unregistering): Port device team_slave_0 removed [ 510.506718][ T28] team0 (unregistering): Port device team_slave_1 removed [ 510.517077][ T28] team0 (unregistering): Port device team_slave_0 removed [ 510.576825][ T28] team0 (unregistering): Port device team_slave_1 removed [ 510.587220][ T28] team0 (unregistering): Port device team_slave_0 removed [ 510.642111][ T28] team0 (unregistering): Port device team_slave_1 removed [ 510.649455][ T5947] kmmpd-loop3: attempt to access beyond end of device [ 510.649455][ T5947] loop3: rw=14337, sector=256, nr_sectors = 4 limit=64 [ 510.663441][ T5947] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 510.672449][ T28] team0 (unregistering): Port device team_slave_0 removed [ 510.706131][T21539] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 510.727064][T21544] veth0_vlan: entered promiscuous mode [ 510.742047][T21544] veth1_vlan: entered promiscuous mode [ 510.778738][T21544] veth0_macvtap: entered promiscuous mode [ 510.788470][T21539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.801930][T21544] veth1_macvtap: entered promiscuous mode [ 510.815932][T21539] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.827337][T21544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.838423][T21544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.848270][T21544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.858743][T21544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.870268][T21544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.880030][T21544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.890645][T21544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.900658][T21544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.911830][T21544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.921732][T21544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.932209][T21544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.943003][T21544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.971883][ T3353] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.979163][ T3353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.987901][ T3353] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.995040][ T3353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.010755][T21536] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 511.019410][T21536] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 511.034645][T21536] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 511.046390][T21544] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.055308][T21544] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.064063][T21544] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.072877][T21544] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.090967][T21536] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 511.124556][ T5960] kmmpd-loop1: attempt to access beyond end of device [ 511.124556][ T5960] loop1: rw=14337, sector=256, nr_sectors = 4 limit=64 [ 511.138611][ T5960] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 511.161853][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 511.161936][ T29] audit: type=1400 audit(1729465447.957:11217): avc: denied { mounton } for pid=21544 comm="syz-executor" path="/root/syzkaller.IfQJph/syz-tmp" dev="sda1" ino=2008 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 511.192880][ T29] audit: type=1400 audit(1729465447.957:11218): avc: denied { mount } for pid=21544 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 511.215219][ T29] audit: type=1400 audit(1729465447.957:11219): avc: denied { mount } for pid=21544 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 511.222385][T21536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.237390][ T29] audit: type=1400 audit(1729465447.957:11220): avc: denied { mounton } for pid=21544 comm="syz-executor" path="/root/syzkaller.IfQJph/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 511.237418][ T29] audit: type=1400 audit(1729465447.957:11221): avc: denied { mounton } for pid=21544 comm="syz-executor" path="/root/syzkaller.IfQJph/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=67168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 511.299727][ T29] audit: type=1400 audit(1729465447.957:11222): avc: denied { mounton } for pid=21544 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 511.335945][T21536] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.351910][T21539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.354608][ T29] audit: type=1400 audit(1729465448.147:11223): avc: denied { sys_chroot } for pid=21744 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 511.389440][ T29] audit: type=1400 audit(1729465448.147:11224): avc: denied { setgid } for pid=21744 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 511.414288][ T29] audit: type=1400 audit(1729465448.147:11225): avc: denied { setuid } for pid=21744 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 511.435477][T21539] veth0_vlan: entered promiscuous mode [ 511.435854][ T29] audit: type=1400 audit(1729465448.147:11226): avc: denied { setrlimit } for pid=21744 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 511.480362][T21539] veth1_vlan: entered promiscuous mode [ 511.494729][ T6290] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.501940][ T6290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.510353][ T6290] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.517585][ T6290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.545454][T21536] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 511.556118][T21536] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 511.592892][T21539] veth0_macvtap: entered promiscuous mode [ 511.601311][T21539] veth1_macvtap: entered promiscuous mode [ 511.609059][T21755] loop2: detected capacity change from 0 to 128 [ 511.612240][T21539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.626523][T21539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.636484][T21539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.647138][T21539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.657116][T21539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.668141][T21539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.680091][T21539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.688988][T21539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.699479][T21539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.709407][T21539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.720067][T21539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.729909][T21539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.740399][T21539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.750282][T21539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.760812][T21539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.772309][T21539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.787039][T21539] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.795871][T21539] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.804719][T21539] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.807189][T21755] loop2: detected capacity change from 0 to 1024 [ 511.813469][T21539] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.900638][T21536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.923382][T21755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.010932][T21542] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 512.046030][T21542] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 512.076370][T21544] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.097068][T21542] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 512.127229][T21542] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 512.184594][T21783] pim6reg1: entered promiscuous mode [ 512.189958][T21783] pim6reg1: entered allmulticast mode [ 512.242478][T21536] veth0_vlan: entered promiscuous mode [ 512.252111][T21793] syz.3.5424[21793] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 512.252176][T21793] syz.3.5424[21793] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 512.264710][T21793] syz.3.5424[21793] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 512.283630][T21542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.307686][T21542] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.318155][ T6290] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.325708][ T6290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.349478][T21536] veth1_vlan: entered promiscuous mode [ 512.357296][T21798] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 512.362664][T21536] veth0_macvtap: entered promiscuous mode [ 512.401684][T21542] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 512.412291][T21542] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 512.427690][T21536] veth1_macvtap: entered promiscuous mode [ 512.439516][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.446713][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.480231][T21536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.490947][T21536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.500834][T21536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.511444][T21536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.521936][T21536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.532469][T21536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.543135][T21536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.554119][T21536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.572493][T21536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.595089][T21534] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 512.610322][T21536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.621095][T21536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.631287][T21536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.641826][T21536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.651853][T21536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.662542][T21536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.673494][T21536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.685438][T21536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.695601][T21536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.706150][T21536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.722859][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 512.730378][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 512.737847][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 512.745393][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 512.753156][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 512.756161][T21536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.760623][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x2 [ 512.775293][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 512.782902][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 512.784465][T21534] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 512.790314][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 512.804603][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 512.812060][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 512.819508][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 512.827013][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 512.834498][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x2 [ 512.841917][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 512.849457][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 512.856949][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 512.864507][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 512.872215][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 512.879678][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 512.887339][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 512.894825][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 512.902715][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 512.910170][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 512.917637][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 512.925127][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 512.932592][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 512.936286][T21833] usb usb8: usbfs: process 21833 (syz.3.5430) did not claim interface 0 before use [ 512.940013][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 512.957262][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 512.964902][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 512.972323][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 512.979813][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 512.987249][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 512.994709][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 513.002112][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 513.009555][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 513.016997][ T3345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 513.030719][T21542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.038306][ T3345] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 513.063314][T21536] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.072279][T21536] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.081987][T21536] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.090831][T21536] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.104547][T21534] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 513.130094][T21534] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 513.245939][T21861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5434'. [ 513.269005][T21867] sch_tbf: peakrate 64 is lower than or equals to rate 4294967295 ! [ 513.278107][T21861] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 513.312700][T21534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.344079][T21534] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.374409][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.381709][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.391451][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.399276][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.468519][T21542] veth0_vlan: entered promiscuous mode [ 513.479688][T21542] veth1_vlan: entered promiscuous mode [ 513.542894][T21890] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5437'. [ 513.553588][T21890] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5437'. [ 513.616561][T21542] veth0_macvtap: entered promiscuous mode [ 513.640168][T21542] veth1_macvtap: entered promiscuous mode [ 513.698289][T21542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.708812][T21542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.718865][T21542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.729344][T21542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.739217][T21542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.749771][T21542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.759648][T21542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.770258][T21542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.780137][T21542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.791184][T21542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.795798][T21890] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5437'. [ 513.823529][T21542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.831953][T21896] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5437'. [ 513.853825][T21534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.889777][T21896] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 513.901057][T21890] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5437'. [ 513.910260][T21890] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5437'. [ 513.914192][T21542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.923859][T21890] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5437'. [ 513.929938][T21542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.929954][T21542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.929969][T21542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.929983][T21542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.930045][T21542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.991467][T21542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.001948][T21542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.012012][T21542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.022557][T21542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.032787][T21542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.043339][T21542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.055428][T21542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.067829][T21542] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.076706][T21542] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.085521][T21542] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.094375][T21542] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.138029][T21890] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5437'. [ 514.147404][T21890] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5437'. [ 514.190930][T21534] veth0_vlan: entered promiscuous mode [ 514.203124][T21534] veth1_vlan: entered promiscuous mode [ 514.220410][T21534] veth0_macvtap: entered promiscuous mode [ 514.230363][T21534] veth1_macvtap: entered promiscuous mode [ 514.252126][T21534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.263098][T21534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.272991][T21534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.283634][T21534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.293606][T21534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.304080][T21534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.314001][T21534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.324459][T21534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.334359][T21534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.344922][T21534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.354975][T21534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.365437][T21534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.376991][T21534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.385378][T21534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.396030][T21534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.405880][T21534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.416569][T21534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.426847][T21534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.437443][T21534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.439062][T21947] x_tables: ip_tables: osf match: only valid for protocol 6 [ 514.447378][T21534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.447397][T21534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.447408][T21534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.485931][T21534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.495776][T21534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.506310][T21534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.510130][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 514.516126][T21534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.516143][T21534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.523609][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 514.535031][T21534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.544090][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 514.566602][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 514.575079][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 514.583883][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x2 [ 514.586588][T21960] usb usb8: usbfs: process 21960 (syz.4.5443) did not claim interface 0 before use [ 514.592021][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 514.609037][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 514.616543][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 514.623995][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 514.631442][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 514.639613][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 514.648014][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 514.656208][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x2 [ 514.663918][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 514.664968][T21963] loop4: detected capacity change from 0 to 164 [ 514.672088][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 514.686046][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 514.693576][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 514.701858][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 514.709589][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 514.717223][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 514.725169][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 514.729622][T21963] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 514.732676][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 514.748619][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 514.756269][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 514.764060][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 514.771617][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 514.779800][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 514.787327][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 514.791076][T21963] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 514.794783][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 514.810658][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 514.818308][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 514.826321][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 514.833798][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 514.841797][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 514.849279][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 514.856741][T10839] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 514.873644][T10839] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 514.882862][T21534] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.892248][T21534] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.902140][T21534] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.911116][T21534] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.938801][T21968] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 5 - 0 [ 514.947370][T21968] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 5 - 0 [ 514.956376][T21968] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 5 - 0 [ 514.964997][T21968] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 5 - 0 [ 515.308793][T22035] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 515.392391][T22051] loop2: detected capacity change from 0 to 512 [ 515.406633][T22051] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 515.411733][T22054] usb usb8: usbfs: process 22054 (syz.1.5465) did not claim interface 0 before use [ 515.510192][T22067] netlink: 'syz.0.5469': attribute type 1 has an invalid length. [ 515.646881][T22086] loop0: detected capacity change from 0 to 1024 [ 515.684625][ T5947] kmmpd-loop3: attempt to access beyond end of device [ 515.684625][ T5947] loop3: rw=14337, sector=256, nr_sectors = 4 limit=64 [ 515.698254][ T5947] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 515.743183][T22086] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.800105][T22086] bridge0: port 3(vlan2) entered blocking state [ 515.806443][T22086] bridge0: port 3(vlan2) entered disabled state [ 515.813089][T22086] vlan2: entered allmulticast mode [ 515.819603][T22086] vlan2: left allmulticast mode [ 515.831797][T22105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.842441][T22105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.852339][T22105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.862912][T22105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.872872][T22105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.883325][T22105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.893217][T22105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.903917][T22105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.914697][T22105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.925249][T22105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.935130][T22105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.945606][T22105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.960921][T22105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.988549][T22105] batadv_slave_0: entered promiscuous mode [ 516.025783][T22113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.036336][T22113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.046411][T22113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.056855][T22113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.066711][T22113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.077171][T22113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.087327][T22113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.097889][T22113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.108206][T22113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.118685][T22113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.121889][T22128] loop4: detected capacity change from 0 to 1024 [ 516.129469][T22113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.143177][T22113] batadv_slave_0: entered promiscuous mode [ 516.143411][T21534] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.167835][ T5960] kmmpd-loop1: attempt to access beyond end of device [ 516.167835][ T5960] loop1: rw=14337, sector=256, nr_sectors = 4 limit=64 [ 516.181506][ T5960] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 516.194115][T22128] EXT4-fs: dax option not supported [ 516.216828][ T29] kauditd_printk_skb: 431 callbacks suppressed [ 516.216842][ T29] audit: type=1326 audit(1729465453.017:11658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22122 comm="syz.4.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6a23dff9 code=0x7ffc0000 [ 516.304423][ T29] audit: type=1326 audit(1729465453.047:11659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22129 comm="syz.3.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04349bdff9 code=0x7ffc0000 [ 516.328531][ T29] audit: type=1326 audit(1729465453.047:11660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22129 comm="syz.3.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04349bdff9 code=0x7ffc0000 [ 516.352221][ T29] audit: type=1326 audit(1729465453.047:11661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22129 comm="syz.3.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04349bdff9 code=0x7ffc0000 [ 516.375904][ T29] audit: type=1326 audit(1729465453.047:11662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22129 comm="syz.3.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04349bdff9 code=0x7ffc0000 [ 516.399582][ T29] audit: type=1326 audit(1729465453.047:11663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22129 comm="syz.3.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04349bdff9 code=0x7ffc0000 [ 516.423577][ T29] audit: type=1326 audit(1729465453.047:11664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22129 comm="syz.3.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04349bdff9 code=0x7ffc0000 [ 516.447278][ T29] audit: type=1326 audit(1729465453.047:11665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22129 comm="syz.3.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04349bdff9 code=0x7ffc0000 [ 516.471068][ T29] audit: type=1326 audit(1729465453.047:11666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22129 comm="syz.3.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04349bdff9 code=0x7ffc0000 [ 516.495206][ T29] audit: type=1326 audit(1729465453.047:11667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22129 comm="syz.3.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04349bdff9 code=0x7ffc0000 [ 516.572098][T22141] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22141 comm=syz.3.5479 [ 516.632449][T22145] loop0: detected capacity change from 0 to 512 [ 516.646247][T22145] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 516.654468][T22145] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 516.671034][T22145] EXT4-fs (loop0): 1 truncate cleaned up [ 516.677369][T22145] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.760807][T22151] pim6reg1: entered promiscuous mode [ 516.760828][T22151] pim6reg1: entered allmulticast mode [ 516.815405][T21534] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.824480][T22157] sit0: entered promiscuous mode [ 516.847193][T22157] netlink: 'syz.3.5487': attribute type 1 has an invalid length. [ 516.884086][T22159] loop0: detected capacity change from 0 to 512 [ 516.921755][T22169] usb usb8: usbfs: process 22169 (syz.2.5492) did not claim interface 0 before use [ 516.953174][T22176] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 516.961369][T22159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.975577][T22159] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.001016][T21534] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.086370][T22191] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 517.207672][T22203] netlink: 'syz.3.5507': attribute type 1 has an invalid length. [ 517.269308][T22208] loop0: detected capacity change from 0 to 1024 [ 517.276304][T22208] EXT4-fs: dax option not supported [ 517.278227][T22211] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 517.672632][T22236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.683618][T22236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.693729][T22236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.704525][T22236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.714447][T22236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.725325][T22236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.735309][T22236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.745988][T22236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.755790][T22236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.766310][T22236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.849258][T22235] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 517.886453][T22240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.896998][T22240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.907291][T22240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.917713][T22240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.928248][T22240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.938694][T22240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.948640][T22240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.959344][T22240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.969208][T22240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.979728][T22240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.130900][T22255] syz.0.5526[22255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 518.131021][T22255] syz.0.5526[22255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 518.144215][T22255] syz.0.5526[22255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 518.160902][T22255] SELinux: policydb version 2000000000 does not match my version range 15-33 [ 518.182815][T22255] SELinux: failed to load policy [ 518.251154][T22255] syz.0.5526[22255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 518.251351][T22255] syz.0.5526[22255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 518.269052][T22255] syz.0.5526[22255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 518.405242][T22276] __nla_validate_parse: 16 callbacks suppressed [ 518.405258][T22276] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5534'. [ 518.432400][T22276] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5534'. [ 518.488971][T22276] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5534'. [ 518.514971][T22279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.525459][T22279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.535378][T22279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.545833][T22279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.556183][T22279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.566903][T22279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.576934][T22279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.587526][T22279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.598224][T22279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.614481][T22279] batadv_slave_0: entered promiscuous mode [ 518.837895][T22284] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5534'. [ 518.872306][T22276] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5534'. [ 518.881380][T22276] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5534'. [ 518.904426][T22276] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5534'. [ 518.936203][T22276] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5534'. [ 518.945264][T22276] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5534'. [ 518.954713][T22276] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5534'. [ 519.221345][T22296] loop4: detected capacity change from 0 to 512 [ 519.267987][T22296] EXT4-fs (loop4): too many log groups per flexible block group [ 519.275855][T22296] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 519.314927][T22296] EXT4-fs (loop4): mount failed [ 519.345879][T22307] pim6reg1: entered promiscuous mode [ 519.351315][T22307] pim6reg1: entered allmulticast mode [ 519.355009][T22305] x_tables: ip_tables: osf match: only valid for protocol 6 [ 519.479946][T22315] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 519.582321][T22321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.593441][T22321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.603406][T22321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.614090][T22321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.623980][T22321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.634520][T22321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.644678][T22321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.655450][T22321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.886398][T22326] sit0: entered promiscuous mode [ 519.934506][T22326] netlink: 'syz.2.5547': attribute type 1 has an invalid length. [ 520.041859][T22340] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 520.132175][ C0] ------------[ cut here ]------------ [ 520.139276][ C0] refcount_t: underflow; use-after-free. [ 520.146495][ C0] WARNING: CPU: 0 PID: 22343 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230 [ 520.156315][ C0] Modules linked in: [ 520.160422][ C0] CPU: 0 UID: 0 PID: 22343 Comm: syz.3.5554 Not tainted 6.12.0-rc3-syzkaller-00420-g715ca9dd687f #0 [ 520.172970][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 520.183059][ C0] RIP: 0010:refcount_warn_saturate+0x1c6/0x230 [ 520.189356][ C0] Code: 72 ff ff ff e8 0b 84 71 ff 48 c7 c7 7e d7 b2 86 e8 7f 6a 8a ff c6 05 36 2d f4 04 01 90 48 c7 c7 24 a4 1b 86 e8 8b 49 53 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 dc 83 71 ff 48 c7 c7 7b d7 b2 86 e8 [ 520.209361][ C0] RSP: 0018:ffffc90000003b60 EFLAGS: 00010246 [ 520.215471][ C0] RAX: 24afa1ff2a3fef00 RBX: ffff888118da76e4 RCX: ffff88810423e300 [ 520.223646][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 520.231895][ C0] RBP: 0000000000000003 R08: ffffffff8111f547 R09: 0000000000000000 [ 520.240605][ C0] R10: 0001ffffffffffff R11: ffff88810423e300 R12: ffff88812bf13468 [ 520.248732][ C0] R13: ffff888118fa8000 R14: ffff888118da76e4 R15: 0000000000000000 [ 520.256772][ C0] FS: 00007f04336376c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 520.265866][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 520.272465][ C0] CR2: ffffffffffffffe8 CR3: 0000000113a1e000 CR4: 00000000003506f0 [ 520.280578][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 520.288598][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 520.296616][ C0] Call Trace: [ 520.299901][ C0] [ 520.302752][ C0] ? __warn+0x141/0x350 [ 520.306975][ C0] ? report_bug+0x315/0x420 [ 520.311509][ C0] ? refcount_warn_saturate+0x1c6/0x230 [ 520.317100][ C0] ? handle_bug+0x60/0x90 [ 520.321452][ C0] ? exc_invalid_op+0x1a/0x50 [ 520.326161][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 520.331575][ C0] ? __warn_printk+0x167/0x1b0 [ 520.336403][ C0] ? refcount_warn_saturate+0x1c6/0x230 [ 520.342068][ C0] sk_skb_reason_drop+0xe9/0x290 [ 520.347349][ C0] j1939_session_put+0x157/0x2a0 [ 520.352357][ C0] j1939_xtp_rx_eoma+0x1f0/0x260 [ 520.357348][ C0] j1939_tp_recv+0x651/0xa80 [ 520.357803][T22354] usb usb8: usbfs: process 22354 (syz.1.5557) did not claim interface 0 before use [ 520.361969][ C0] j1939_can_recv+0x45f/0x550 [ 520.376310][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 520.381631][ C0] can_rcv_filter+0x225/0x4c0 [ 520.386621][ C0] can_receive+0x182/0x1f0 [ 520.391069][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 520.395626][ C0] can_rcv+0xe7/0x180 [ 520.399745][ C0] ? __pfx_can_rcv+0x10/0x10 [ 520.406149][ C0] __netif_receive_skb+0x123/0x280 [ 520.414028][ C0] process_backlog+0x22e/0x440 [ 520.419335][ C0] __napi_poll+0x63/0x3c0 [ 520.424675][ C0] ? net_rx_action+0x376/0x7f0 [ 520.430094][ C0] net_rx_action+0x3a1/0x7f0 [ 520.435994][ C0] handle_softirqs+0xbf/0x280 [ 520.441110][ C0] irq_exit_rcu+0x3e/0x90 [ 520.445508][ C0] sysvec_apic_timer_interrupt+0x73/0x80 [ 520.451544][ C0] [ 520.454525][ C0] [ 520.457492][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 520.463546][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x3d/0x60 [ 520.470004][ C0] Code: 86 e8 a7 af 17 fc 48 83 3d 67 d7 32 01 00 74 2b 48 89 df e8 05 07 00 00 90 41 f7 c6 00 02 00 00 74 01 fb 65 ff 0d 8b 71 d1 7a <74> 08 5b 41 5e c3 cc cc cc cc 0f 1f 44 00 00 eb f1 90 0f 0b 66 2e [ 520.489764][ C0] RSP: 0018:ffffc90000ebbaf0 EFLAGS: 00000286 [ 520.495844][ C0] RAX: 0000000000000001 RBX: ffff888237c1ff80 RCX: ffffffff85317199 [ 520.504002][ C0] RDX: 0000000000000175 RSI: 0000000000000000 RDI: ffff888237c1ff80 [ 520.512187][ C0] RBP: ffff888237c1ff80 R08: 0001ffff8664490f R09: 0000000000000000 [ 520.520193][ C0] R10: 0001ffffffffffff R11: ffffffff810c1250 R12: ffff88812bf130e8 [ 520.528226][ C0] R13: 0000000000000246 R14: 0000000000000246 R15: ffff88812bf130b8 [ 520.536235][ C0] ? __pfx_lapic_next_event+0x10/0x10 [ 520.541603][ C0] ? _raw_spin_unlock_irqrestore+0x19/0x60 [ 520.547509][ C0] hrtimer_start_range_ns+0x53d/0x580 [ 520.553023][ C0] j1939_tp_schedule_txtimer+0x67/0xa0 [ 520.558802][ C0] j1939_sk_sendmsg+0x954/0xc00 [ 520.563697][ C0] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 520.569115][ C0] __sock_sendmsg+0x140/0x180 [ 520.573881][ C0] ____sys_sendmsg+0x312/0x410 [ 520.578714][ C0] __sys_sendmsg+0x1d9/0x270 [ 520.583698][ C0] ? futex_wait+0x18e/0x1c0 [ 520.589284][ C0] __x64_sys_sendmsg+0x46/0x50 [ 520.594340][ C0] x64_sys_call+0x2689/0x2d60 [ 520.599893][ C0] do_syscall_64+0xc9/0x1c0 [ 520.605236][ C0] ? clear_bhb_loop+0x55/0xb0 [ 520.610740][ C0] ? clear_bhb_loop+0x55/0xb0 [ 520.615629][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.621890][ C0] RIP: 0033:0x7f04349bdff9 [ 520.627831][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.649872][ C0] RSP: 002b:00007f0433637038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 520.659826][ C0] RAX: ffffffffffffffda RBX: 00007f0434b75f80 RCX: 00007f04349bdff9 [ 520.672356][ C0] RDX: 0000000000000000 RSI: 0000000020002700 RDI: 0000000000000007 [ 520.683373][ C0] RBP: 00007f0434a30296 R08: 0000000000000000 R09: 0000000000000000 [ 520.693714][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 520.702016][ C0] R13: 0000000000000000 R14: 00007f0434b75f80 R15: 00007fff9b0abd68 [ 520.710144][ C0] [ 520.713197][ C0] ---[ end trace 0000000000000000 ]--- [ 520.758034][ T5947] kmmpd-loop3: attempt to access beyond end of device [ 520.758034][ T5947] loop3: rw=14337, sector=256, nr_sectors = 4 limit=64 [ 520.773194][ T5947] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 520.822424][T22371] pim6reg1: entered promiscuous mode [ 520.828758][T22371] pim6reg1: entered allmulticast mode [ 520.938267][T22378] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 520.995143][T22384] x_tables: ip_tables: osf match: only valid for protocol 6 [ 521.030058][T22387] loop2: detected capacity change from 0 to 512 [ 521.036857][T22387] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 521.071311][T22389] loop2: detected capacity change from 0 to 512 [ 521.088583][T22389] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.102071][T22389] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.122309][T21544] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.205399][ T5960] kmmpd-loop1: attempt to access beyond end of device [ 521.205399][ T5960] loop1: rw=14337, sector=256, nr_sectors = 4 limit=64 [ 521.219829][ T5960] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 521.688041][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x1 [ 521.695702][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 521.703571][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 521.711005][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 521.718940][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x2 [ 521.726798][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 521.728242][ T29] kauditd_printk_skb: 506 callbacks suppressed [ 521.728255][ T29] audit: type=1326 audit(1729465458.537:12174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22416 comm="syz.4.5583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6a23dff9 code=0x7ffc0000 [ 521.735154][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 521.735182][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 521.755333][ T29] audit: type=1326 audit(1729465458.547:12175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22416 comm="syz.4.5583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6a23dff9 code=0x7ffc0000 [ 521.767178][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 521.767205][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 521.767299][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 521.776160][ T29] audit: type=1326 audit(1729465458.547:12176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22416 comm="syz.4.5583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a6a23dff9 code=0x7ffc0000 [ 521.783437][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 521.807515][ T29] audit: type=1326 audit(1729465458.547:12177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22416 comm="syz.4.5583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6a23dff9 code=0x7ffc0000 [ 521.815001][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x2 [ 521.815068][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 521.823318][ T29] audit: type=1326 audit(1729465458.547:12178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22416 comm="syz.4.5583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a6a23dff9 code=0x7ffc0000 [ 521.831757][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 521.857620][ T29] audit: type=1326 audit(1729465458.547:12179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22416 comm="syz.4.5583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6a23dff9 code=0x7ffc0000 [ 521.857648][ T29] audit: type=1326 audit(1729465458.547:12180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22416 comm="syz.4.5583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a6a23dff9 code=0x7ffc0000 [ 521.857672][ T29] audit: type=1326 audit(1729465458.547:12181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22416 comm="syz.4.5583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6a23dff9 code=0x7ffc0000 [ 521.857720][ T29] audit: type=1326 audit(1729465458.547:12182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22416 comm="syz.4.5583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6a23dff9 code=0x7ffc0000 [ 521.865559][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 521.891020][ T29] audit: type=1326 audit(1729465458.547:12183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22416 comm="syz.4.5583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a6a23dff9 code=0x7ffc0000 [ 521.898756][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 522.074225][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 522.081732][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 522.089329][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 522.097007][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 522.105801][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 522.114787][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 522.123678][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 522.131202][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 522.139756][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 522.147298][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 522.154722][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 522.163543][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 522.171486][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 522.180992][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 522.188623][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 522.196032][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 522.203442][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 522.211263][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 522.218947][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 522.228035][ T24] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 522.387091][T22446] pim6reg1: entered promiscuous mode [ 522.392420][T22446] pim6reg1: entered allmulticast mode [ 522.651120][T22471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.661717][T22471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.672094][T22471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.682668][T22471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.692794][T22471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.703796][T22471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.713817][T22471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.725179][T22471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.908630][T22475] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 523.293690][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.301181][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.309060][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.316467][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.324143][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.331636][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.339399][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.346877][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.354418][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.362243][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.369763][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.377455][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.384969][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.392664][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.400131][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.407708][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.415293][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.422993][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.430818][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.438247][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.445875][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.453433][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.460855][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.468345][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.475773][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.483544][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.491338][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.498783][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.506255][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.513651][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.521161][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.528596][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.536098][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.543481][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.551154][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.558664][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.566698][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.574631][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.582617][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.591187][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.599206][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.607152][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.614570][ T1063] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 523.627078][ T1063] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 523.762333][T22546] sit0: entered promiscuous mode [ 523.775302][T22546] netlink: 'syz.4.5634': attribute type 1 has an invalid length. [ 523.783313][T22546] __nla_validate_parse: 21 callbacks suppressed [ 523.783327][T22546] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5634'. [ 523.841957][T22551] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 523.911273][T22555] loop2: detected capacity change from 0 to 1024 [ 523.923627][T22555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 523.947879][T22555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5638'. [ 523.968779][T21544] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.036518][T22566] pim6reg1: entered promiscuous mode [ 524.041922][T22566] pim6reg1: entered allmulticast mode [ 524.554690][T22579] macsec0: entered promiscuous mode [ 524.594478][T22579] veth1_macvtap: left promiscuous mode [ 524.604387][T22579] macsec0 (unregistering): left promiscuous mode [ 524.613049][T22585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5651'. [ 524.627213][T22583] netlink: 'syz.2.5650': attribute type 1 has an invalid length. [ 524.635133][T22583] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5650'. [ 524.728394][T22592] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5654'. [ 524.737467][T22592] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5654'. [ 524.747370][T22592] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5654'. [ 524.781699][T22599] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 524.793150][T22592] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5654'. [ 524.802281][T22592] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5654'. [ 524.812201][T22592] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5654'. [ 525.027218][T22610] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 525.161855][T22616] loop4: detected capacity change from 0 to 1024 [ 525.200813][T22616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.227392][T21542] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.361806][T22628] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 525.366311][T22626] netlink: 'syz.4.5666': attribute type 1 has an invalid length. [ 525.764406][ T5947] kmmpd-loop3: attempt to access beyond end of device [ 525.764406][ T5947] loop3: rw=14337, sector=256, nr_sectors = 4 limit=64 [ 525.778162][ T5947] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 526.186745][T22651] x_tables: ip_tables: osf match: only valid for protocol 6 [ 526.208019][T22652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.218521][T22652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.228518][T22652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.239798][T22652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.249821][T22652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.260366][T22652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.270244][T22652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.274351][ T5960] kmmpd-loop1: attempt to access beyond end of device [ 526.274351][ T5960] loop1: rw=14337, sector=256, nr_sectors = 4 limit=64 [ 526.281019][T22652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.295128][ T5960] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 526.404405][T22657] x_tables: ip_tables: osf match: only valid for protocol 6 [ 526.450386][T22664] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 526.506213][T22669] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 526.594156][T22677] macsec0: entered promiscuous mode [ 526.613754][T22677] veth1_macvtap: left promiscuous mode [ 526.643727][T22677] macsec0 (unregistering): left promiscuous mode [ 527.014547][ T50] ================================================================== [ 527.022681][ T50] BUG: KCSAN: data-race in __mod_timer / kvfree_call_rcu [ 527.029810][ T50] [ 527.032137][ T50] read to 0xffff888237c1cce8 of 8 bytes by task 22662 on cpu 0: [ 527.039779][ T50] kvfree_call_rcu+0x3b8/0x510 [ 527.044569][ T50] trie_update_elem+0x47c/0x620 [ 527.049524][ T50] bpf_map_update_value+0x324/0x350 [ 527.054741][ T50] generic_map_update_batch+0x401/0x520 [ 527.060307][ T50] bpf_map_do_batch+0x28c/0x3f0 [ 527.065170][ T50] __sys_bpf+0x2e5/0x7a0 [ 527.069513][ T50] __x64_sys_bpf+0x43/0x50 [ 527.073965][ T50] x64_sys_call+0x2625/0x2d60 [ 527.078677][ T50] do_syscall_64+0xc9/0x1c0 [ 527.083330][ T50] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.089428][ T50] [ 527.091758][ T50] write to 0xffff888237c1cce8 of 8 bytes by task 50 on cpu 1: [ 527.099402][ T50] __mod_timer+0x578/0x7f0 [ 527.104011][ T50] add_timer_global+0x51/0x70 [ 527.109316][ T50] __queue_delayed_work+0x127/0x1a0 [ 527.115327][ T50] queue_delayed_work_on+0xdf/0x190 [ 527.121241][ T50] kfree_rcu_monitor+0x5e8/0x660 [ 527.126631][ T50] process_scheduled_works+0x483/0x9a0 [ 527.133206][ T50] worker_thread+0x51d/0x6f0 [ 527.137929][ T50] kthread+0x1d1/0x210 [ 527.142287][ T50] ret_from_fork+0x4b/0x60 [ 527.147165][ T50] ret_from_fork_asm+0x1a/0x30 [ 527.152041][ T50] [ 527.154382][ T50] Reported by Kernel Concurrency Sanitizer on: [ 527.160714][ T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/u8:3 Tainted: G W 6.12.0-rc3-syzkaller-00420-g715ca9dd687f #0 [ 527.173338][ T50] Tainted: [W]=WARN [ 527.177216][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 527.187555][ T50] Workqueue: events_unbound kfree_rcu_monitor [ 527.193971][ T50] ================================================================== [ 530.805163][ T5947] kmmpd-loop3: attempt to access beyond end of device [ 530.805163][ T5947] loop3: rw=14337, sector=256, nr_sectors = 4 limit=64 [ 530.818825][ T5947] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 531.284363][ T5960] kmmpd-loop1: attempt to access beyond end of device [ 531.284363][ T5960] loop1: rw=14337, sector=256, nr_sectors = 4 limit=64 [ 531.298457][ T5960] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 535.844368][ T5947] kmmpd-loop3: attempt to access beyond end of device [ 535.844368][ T5947] loop3: rw=14337, sector=256, nr_sectors = 4 limit=64 [ 535.858031][ T5947] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 536.324467][ T5960] kmmpd-loop1: attempt to access beyond end of device [ 536.324467][ T5960] loop1: rw=14337, sector=256, nr_sectors = 4 limit=64 [ 536.338264][ T5960] Buffer I/O error on dev loop1, logical block 64, lost sync page write