last executing test programs: 7.212110536s ago: executing program 2 (id=247): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_usb_connect(0x2, 0x837, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f00000008c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x4, 0x7, 0x6, 0x20, 0x4}, 0x26, &(0x7f0000000040)=ANY=[@ANYBLOB="050f2600030a10030008000108079403cfaa072ab703100b141004038ab76b82e3b3ccb12908b2a7c8e6d4f5"], 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x42a}}]}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @mcast1, 0x983a}, 0x1c) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000a00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001240)=ANY=[@ANYBLOB="1800006eb1b2f864fb9c0000000000000000000000000018130000f66df143e69f24f5db72bdc75315a229837fbfeeab7d2f0840147f1859cd2a19ea5212bbb30edb", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r3 = syz_open_pts(r0, 0x101) r4 = dup3(r3, r0, 0x0) write$UHID_INPUT(r4, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff5c) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1}, 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000a000000000000000000000901000001003e5f61000000606100"], &(0x7f0000000500)=""/10, 0x2e, 0xa, 0x0, 0x7, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x8, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="18400000fcffffff0000000000000000183200000300000000000000000000001839000005000000000000000000000018120000", @ANYRES32, @ANYBLOB="8000000000000000b703000000000011850000000c000000b7000000000000005084ffff01000000180100000800"/56], &(0x7f0000000140)='syzkaller\x00', 0x6, 0xee, &(0x7f0000000380)=""/238, 0x41100, 0x23, '\x00', 0x0, @fallback=0x9, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x0, 0x3, 0x1, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000740)=[{0x3, 0x1, 0x800b, 0x9}, {0x3, 0x4, 0x6, 0xb}, {0x3, 0x5, 0xa, 0x5}], 0x10, 0x46a68703, @void, @value}, 0x94) fallocate(0xffffffffffffffff, 0x4, 0x0, 0x1001ec) 6.473867126s ago: executing program 2 (id=265): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_bp={0x0, 0xa}, 0x4000, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x45, 0x3ff, 0x10000, 0x3, 0x8, 0x4, 0xa0000, 0x5, 0xa0000001, 0x59bc9fd6, 0x2, 0x2, 0x8000, 0x8, 0x4, 0x8, 0x6, 0x114b6000, 0xfffffffe, 0x2a70, 0xffff73cc, 0x81, 0x5, 0x0, 0x100a, 0x400045, 0x20, 0x8, 0x5, 0x9, 0x3, 0xe, 0xa, 0x2, 0x4, 0x5, 0x3, 0xffff, 0x3, 0xffffdff8, 0x4, 0x8, 0x1a0055ee, 0x800401, 0x1, 0xffff4226, 0x200000, 0x0, 0x22cc, 0x101, 0x4, 0x9, 0x1, 0x800, 0xf9, 0x9, 0x8, 0x2, 0x8, 0x2f, 0x4000006, 0x0, 0x101, 0x9, 0x7, 0xc5, 0x4, 0x2, 0xffffffff, 0x6, 0x5, 0x5, 0x5, 0x2, 0x9b58, 0x0, 0xb, 0x4be, 0x4, 0x100, 0xa, 0xca4, 0x9fa7, 0x7, 0x38, 0x4, 0xb, 0x7, 0x4d, 0x0, 0x200, 0x8, 0x401, 0x7, 0x45, 0x3, 0x9, 0x0, 0x7, 0x46, 0x9, 0x3, 0x7, 0x4, 0xc, 0x7, 0x8001, 0x7, 0x7, 0x1902, 0xc3c, 0x3, 0x28000000, 0x4000000, 0x30c7, 0xfad, 0x7, 0x8, 0x0, 0x5, 0x10, 0x400, 0xd58, 0x5, 0x2, 0x4, 0x2, 0x2, 0x8, 0x8, 0xea, 0x0, 0x5, 0x9, 0x864b, 0xfffffffa, 0x7, 0x9, 0x8001, 0x7, 0x81, 0x3, 0x9, 0x7, 0xffffff80, 0x43, 0x8, 0x1, 0x6, 0x5, 0x9, 0x7fffffff, 0x4, 0x324f035, 0x6, 0x0, 0x7c1, 0x136, 0x2, 0x5, 0x1, 0x3ff, 0x4, 0x0, 0x2, 0x10001, 0xfffffffd, 0x5, 0x4, 0x400, 0x101, 0x4, 0x1b, 0xd589, 0xffffff81, 0x0, 0x4, 0x0, 0x300, 0x8, 0x60000000, 0xd3d, 0x0, 0xfffffffe, 0x1, 0x81, 0x2, 0x55, 0x4000004, 0xbc6, 0xfffe, 0x8, 0x28a6a52, 0x1ff, 0xb, 0x7fff, 0x9, 0x2e4c20b6, 0x4, 0x4, 0x9, 0x7, 0x4, 0x8, 0x0, 0x6, 0x8, 0x3, 0x7, 0x4, 0x9, 0x4, 0xfffffffa, 0x76e8e800, 0x800, 0x400, 0x6, 0x0, 0xcc6, 0xfffffffb, 0x8000, 0xffffff00, 0x894, 0x7, 0x7, 0x6, 0x6, 0x2, 0x9, 0x10001, 0x9, 0x4, 0x8, 0x5d, 0x1000003, 0x7, 0x656, 0x8008, 0x80000001, 0x384, 0x9, 0x58b, 0x80000000, 0xe08, 0x0, 0x1, 0x2c821159, 0x0, 0x9, 0xfff, 0x0, 0x7, 0x0, 0x7f]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x2, 0x8, 0x0, 0xc}, {0xff, 0x1, 0x0, 0x5, 0x5e1d, 0x8}, 0x9, 0x8, 0x99}}]}}]}, 0x45c}}, 0x8840) 6.394863358s ago: executing program 2 (id=267): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), &(0x7f0000000000), 0x0) 6.267702449s ago: executing program 2 (id=269): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1, 0x0, 0xc}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x20000000) 6.21018225s ago: executing program 2 (id=271): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) syz_emit_ethernet(0x6a, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0400000004000000", @ANYRESDEC], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)={0x214, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x15, 0x2a, [@mesh_chsw={0x76, 0x6, {0x4, 0x2, 0x3d, 0x4}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xf9, 0x61}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xffff}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_IE={0xe8, 0x2a, [@peer_mgmt={0x75, 0x16, {0x0, 0x1, @void, @val=0xc, @val="39a8c6fe80e1ebfd1294fe67e4a5b78e"}}, @supported_rates={0x1, 0x8, [{0x5}, {0x18, 0x1}, {0x18}, {0x48, 0x1}, {0x24, 0x1}, {0x24, 0x1}, {0x6c}, {0x36}]}, @ibss={0x6, 0x2, 0x2}, @mic={0x8c, 0x10, {0x7f3, "39f5e4d905e7", @short="8e752aae3695d1c5"}}, @ht={0x2d, 0x1a, {0x8, 0x1, 0x7, 0x0, {0x3, 0x300, 0x0, 0x6d, 0x0, 0x1, 0x1}, 0x1, 0x1, 0x37}}, @preq={0x82, 0x72, {{}, 0x8, 0xff, 0x5, @device_b, 0x9, @void, 0x3, 0x9, 0x8, [{{}, @device_a, 0x11}, {{0x1, 0x0, 0x1}, @broadcast, 0x6}, {{0x1}, @device_b, 0x3}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1}, @device_b, 0x5}, {{0x1}, @device_b, 0x8001}, {{}, @broadcast, 0xfffffffe}, {{0x0, 0x0, 0x1}, @device_b, 0x9}]}}, @ht={0x2d, 0x1a, {0x1000, 0x1, 0x3, 0x0, {0x1, 0x4, 0x0, 0x6, 0x0, 0x1, 0x1, 0x1}, 0x800, 0x5, 0x2}}]}, @NL80211_ATTR_IE={0xe8, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x1, 0x2, @broadcast, 0x6, @value=@device_b, 0xfffffff9, 0x4, @device_b, 0x5}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1, 0x9, 0x49}}, @measure_req={0x26, 0xac, {0x6, 0x80, 0x8, "f68faf387a84c35df5065c3834f4d3a1a708b58fdbc3ee39d8bdd9a610c5625e31e54e603d249b27ee93c99c8251557bba59c882c85669dd0851200283485dbc6d0c5ce5c6039d9ef71d99248eb4888221efe87aaaed1290d742133f92b9cb64dd54ac6ed3dec21a4269f25966bcc7b157997dd012fa7d628c4cf8e922db0ebd07f202599192c554f6ea36a794bcc1d5c461234fa38ff5ab3387454e74761d4e0c84bc6f353d23a183"}}, @chsw_timing={0x68, 0x4, {0x2, 0x9}}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x4c840}, 0x20004010) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r4, 0x5403, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 6.150186581s ago: executing program 2 (id=273): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, 0x0, 0x0, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket(0x1e, 0x1, 0x0) connect$tipc(r8, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r8, &(0x7f0000000340), 0x2000011a) splice(r8, 0x0, r7, 0x0, 0x4ff9c, 0x0) mmap(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x1000000, 0x4010, r8, 0xf0831000) getcwd(&(0x7f0000000140)=""/178, 0xb2) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3ae134cb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5, {r9}}, './file0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r7, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f00000002c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000340)='GPL\x00', 0x101, 0x1000, &(0x7f0000001780)=""/4096, 0x40f00, 0x18, '\x00', 0x0, 0x25, r10, 0x8, &(0x7f00000003c0)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r0, r11, r3, r6, r6], 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet6_int(r8, 0x29, 0x12, &(0x7f0000000280)=0xa, 0x4) 3.428800331s ago: executing program 1 (id=300): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f000000050030000000000005002f00a005000008000300", @ANYRES32=r4], 0x2c}}, 0x0) 3.358017282s ago: executing program 1 (id=302): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a99985000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[]) 3.276144213s ago: executing program 1 (id=304): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a0013", 0x33}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001900)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18b03b1fb2e8e60fa1fbc9905b1c85bdf278f42ad316abe4db8cdc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r1, 0x0, 0x7ffff000) 2.849360809s ago: executing program 4 (id=312): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f000000050030000000000005002f00a005000008000300", @ANYRES32=r4], 0x2c}}, 0x0) 2.78613145s ago: executing program 4 (id=313): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1345, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="89e7ee0000000000000004c988a8", 0xe}, {&(0x7f0000000c00)='q.', 0x2}], 0x2) 1.851271164s ago: executing program 1 (id=314): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_usb_connect(0x2, 0x837, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f00000008c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x4, 0x7, 0x6, 0x20, 0x4}, 0x26, &(0x7f0000000040)=ANY=[@ANYBLOB="050f2600030a10030008000108079403cfaa072ab703100b141004038ab76b82e3b3ccb12908b2a7c8e6d4f5"], 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x42a}}]}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @mcast1, 0x983a}, 0x1c) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000a00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001240)=ANY=[@ANYBLOB="1800006eb1b2f864fb9c0000000000000000000000000018130000f66df143e69f24f5db72bdc75315a229837fbfeeab7d2f0840147f1859cd2a19ea5212bbb30edb1da41624ac39f95a40aef4", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r3 = syz_open_pts(r0, 0x101) r4 = dup3(r3, r0, 0x0) write$UHID_INPUT(r4, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff5c) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1}, 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000a000000000000000000000901000001003e5f61000000606100"], &(0x7f0000000500)=""/10, 0x2e, 0xa, 0x0, 0x7, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x8, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="18400000fcffffff0000000000000000183200000300000000000000000000001839000005000000000000000000000018120000", @ANYRES32, @ANYBLOB="8000000000000000b703000000000011850000000c000000b7000000000000005084ffff01000000180100000800"/56], &(0x7f0000000140)='syzkaller\x00', 0x6, 0xee, &(0x7f0000000380)=""/238, 0x41100, 0x23, '\x00', 0x0, @fallback=0x9, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x0, 0x3, 0x1, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000740)=[{0x3, 0x1, 0x800b, 0x9}, {0x3, 0x4, 0x6, 0xb}, {0x3, 0x5, 0xa, 0x5}], 0x10, 0x46a68703, @void, @value}, 0x94) fallocate(0xffffffffffffffff, 0x4, 0x0, 0x1001ec) 1.754120405s ago: executing program 0 (id=316): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x10000}, 0x18) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth0_macvtap\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x1a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, 0x4000, 0x0, @void, @value}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r9}, 0x8) bind$packet(r5, &(0x7f0000000080)={0x11, 0x4, r6, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffee}, {0xfff1, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket$inet6(0xa, 0x6, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x989680}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000240), 0x8}, 0x1100, 0x5dd8, 0x0, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000001cc0), 0x80000) 1.569361398s ago: executing program 4 (id=319): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a99985000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[]) 1.536796019s ago: executing program 4 (id=321): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001", 0x3, 0xfffffffffffffffd) 1.520094018s ago: executing program 4 (id=322): ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x10000, 0x1}, 0x8002, 0x0, 0x1003, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$eJzs3c9vFGUfAPDvs7stlAItb97kfZGDTUiERG1pwWiMiRDx5sEfJJ5IrG0hhAUaWhNBjJDgf6B/gIk3E2M8EmOIevHqzcSriSESA714WzO7s2WB3f7cMsh8PsnQ55mnk+8zu3z7zDw7MxtAaY1l/1Qi9kbEfIoY6WirRd441vq9u3euzCzduTKTotF4568UKV/X/v2U/xzON94eEb/8kOI/1YfjLly6fHa6Xp+7mNcnFs/NTyxcuvz8mXPTp+dOz52fmnxx8oUjh6eOHOrLfu6KiJ/Gj9eun3pt3zczX+755LuvbqQ4Gjvz9s796JexGFt+TTplr+tL/Q5WkGq+P51vcaoV2CHWpf3+DUTE/2IkqnHvzRuJT98qtHPAlmqkiAZQUkn+Q0m1jwOy89/2UuwRCfCo3D7WmgC4m1pze0vL+V9rzQ3G9ubcwI6lFJ3TOiki+jEzl8WYfyaNZEts0Twc0N3VaxHx/27jf2rm5mhzFj/L/8p9+V+JiDfzn9n6tzcYf+yBuvyHR2cz+f9eR/6/v8H48h8AAAAAAAD65+axiHiu2+d/leXrf6LL9T/DEXG0D/FX//yvcqsPYYAubh+LeCUi2tf+LXXkf260mtd2Na8HGEinztTnDkXE7og4GAPbsvrkCjHG9v080LOt4/q/bMnit68FzPtxq7bt/m1mpxenN7PPQMvtaxFP1brlf1oe/1OX8T8b++fXGKNx/NUfe7Wtnv/AVml8EXGg6/h/78kVaeXnc0w0jwcm2kcFD/vo5I1ve8WX/1CcbPzfsXL+j6bO5/UsrD/Gx3/+ton87378P5hONB85M5iv+3B6cfHiZMRgeuPh9VPr7zM8idr50M6XLP8P7u9+/r/S8f9QRFxdY8wT379+vVeb8R+KM3QtYnZd4//6C/vf/fzvXvHXNv4faY7pB/M15v9gZWtN0KL7CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/RpWI2BmpMr5crlTGxyOGI+K/saNSv7Cw+OypCx+cn83amt//X2l/0+9Iq57a3/8/2lGfeqB+OCL2RMRn1aFmfXzmQn226J0HAAAAAAAAAAAAAAAAAACAx8Rwj/v/M39Ui+4dsOVqRXcAKIz8h/KS/1Be8h/KS/5Decl/KC/5D+Ul/6G85D+UV7Xx9cmi+wAAAAAAAPTNnqdv/poi4urLQ80lM5i3DRTaM2CrHS26A0BhPOIHysulf1Beq53jmwOAJ19apX37hrcEAAAAAAAAAAAAAPrlwF73/0NZVYruAFCY3vf/ezIAPOnc/w/l5RwfcP8/AAAAAAAAAAAAADz+Fi5dPjtdr89d3Ghh2+Y2V1BYa+H33a3/s49Lf9ZfiNSHjHtEhaL/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG3/BAAA//9r5fVk") r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) accept4$packet(r0, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000440)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000001000000001"], 0x24}}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="040027cdecddf440b76ae80055000500040000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8001) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x2, @private1, 0x9c9b}}, 0x80, 0x2, 0x9, 0x3, 0x6}, &(0x7f0000000080)=0x98) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='mm_page_free\x00', r4}, 0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)={r3, 0x1ff}, &(0x7f0000000300)=0x8) 1.506983239s ago: executing program 0 (id=323): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f000000050030000000000005002f00a005000008000300", @ANYRES32=r4], 0x2c}}, 0x0) 1.491124209s ago: executing program 0 (id=324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1345, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="89e7ee00000000", 0x7}, {&(0x7f0000000c00)="712e543da7ded9", 0x7}], 0x2) 1.371929281s ago: executing program 0 (id=326): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a0013", 0x33}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001900)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18b03b1fb2e8e60fa1fbc9905b1c85bdf278f42ad316abe4db8cdc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r1, 0x0, 0x7ffff000) 972.995676ms ago: executing program 1 (id=327): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000580)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@lazytime}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x443, &(0x7f0000000940)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) semget(0x3, 0x1, 0x206) r6 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) socket$netlink(0x10, 0x3, 0x0) semget(0x3, 0x3, 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 540.539292ms ago: executing program 3 (id=329): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xc}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) 439.409154ms ago: executing program 3 (id=330): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1345, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="89e7ee0000000000000004c988a8", 0xe}, {&(0x7f0000000c00)='q.', 0x2}], 0x2) 187.505058ms ago: executing program 0 (id=331): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x5}, 0x18) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x2000}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001cc0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0) 150.620828ms ago: executing program 3 (id=332): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001", 0x3, 0xfffffffffffffffd) 120.488999ms ago: executing program 3 (id=333): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a99985000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[]) 110.799579ms ago: executing program 1 (id=334): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x10000}, 0x18) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth0_macvtap\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x1a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, 0x4000, 0x0, @void, @value}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r9}, 0x8) bind$packet(r5, &(0x7f0000000080)={0x11, 0x4, r6, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffee}, {0xfff1, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket$inet6(0xa, 0x6, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x989680}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000240), 0x8}, 0x1100, 0x5dd8, 0x0, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000001cc0), 0x80000) 68.63723ms ago: executing program 4 (id=335): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_bp={0x0, 0xa}, 0x4000, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x45, 0x3ff, 0x10000, 0x3, 0x8, 0x4, 0xa0000, 0x5, 0xa0000001, 0x59bc9fd6, 0x2, 0x2, 0x8000, 0x8, 0x4, 0x8, 0x6, 0x114b6000, 0xfffffffe, 0x2a70, 0xffff73cc, 0x81, 0x5, 0x0, 0x100a, 0x400045, 0x20, 0x8, 0x5, 0x9, 0x3, 0xe, 0xa, 0x2, 0x4, 0x5, 0x3, 0xffff, 0x3, 0xffffdff8, 0x4, 0x8, 0x1a0055ee, 0x800401, 0x1, 0xffff4226, 0x200000, 0x0, 0x22cc, 0x101, 0x4, 0x9, 0x1, 0x800, 0xf9, 0x9, 0x8, 0x2, 0x8, 0x2f, 0x4000006, 0x0, 0x101, 0x9, 0x7, 0xc5, 0x4, 0x2, 0xffffffff, 0x6, 0x5, 0x5, 0x5, 0x2, 0x9b58, 0x0, 0xb, 0x4be, 0x4, 0x100, 0xa, 0xca4, 0x9fa7, 0x7, 0x38, 0x4, 0xb, 0x7, 0x4d, 0x0, 0x200, 0x8, 0x401, 0x7, 0x45, 0x3, 0x9, 0x0, 0x7, 0x46, 0x9, 0x3, 0x7, 0x4, 0xc, 0x7, 0x8001, 0x7, 0x7, 0x1902, 0xc3c, 0x3, 0x28000000, 0x4000000, 0x30c7, 0xfad, 0x7, 0x8, 0x0, 0x5, 0x10, 0x400, 0xd58, 0x5, 0x2, 0x4, 0x2, 0x2, 0x8, 0x8, 0xea, 0x0, 0x5, 0x9, 0x864b, 0xfffffffa, 0x7, 0x9, 0x8001, 0x7, 0x81, 0x3, 0x9, 0x7, 0xffffff80, 0x43, 0x8, 0x1, 0x6, 0x5, 0x9, 0x7fffffff, 0x4, 0x324f035, 0x6, 0x0, 0x7c1, 0x136, 0x2, 0x5, 0x1, 0x3ff, 0x4, 0x0, 0x2, 0x10001, 0xfffffffd, 0x5, 0x4, 0x400, 0x101, 0x4, 0x1b, 0xd589, 0xffffff81, 0x0, 0x4, 0x0, 0x300, 0x8, 0x60000000, 0xd3d, 0x0, 0xfffffffe, 0x1, 0x81, 0x2, 0x55, 0x4000004, 0xbc6, 0xfffe, 0x8, 0x28a6a52, 0x1ff, 0xb, 0x7fff, 0x9, 0x2e4c20b6, 0x4, 0x4, 0x9, 0x7, 0x4, 0x8, 0x0, 0x6, 0x8, 0x3, 0x7, 0x4, 0x9, 0x4, 0xfffffffa, 0x76e8e800, 0x800, 0x400, 0x6, 0x0, 0xcc6, 0xfffffffb, 0x8000, 0xffffff00, 0x894, 0x7, 0x7, 0x6, 0x6, 0x2, 0x9, 0x10001, 0x9, 0x4, 0x8, 0x5d, 0x1000003, 0x7, 0x656, 0x8008, 0x80000001, 0x384, 0x9, 0x58b, 0x80000000, 0xe08, 0x0, 0x1, 0x2c821159, 0x0, 0x9, 0xfff, 0x0, 0x7, 0x0, 0x7f]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x2, 0x8, 0x0, 0xc}, {0xff, 0x1, 0x0, 0x5, 0x5e1d, 0x8}, 0x9, 0x8, 0x99}}]}}]}, 0x45c}}, 0x8840) 54.16839ms ago: executing program 3 (id=336): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f000000050030000000000005002f00a005000008000300", @ANYRES32=r4], 0x2c}}, 0x0) 27.96178ms ago: executing program 0 (id=337): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r0) 0s ago: executing program 3 (id=338): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x8, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.108' (ED25519) to the list of known hosts. [ 28.176888][ T29] audit: type=1400 audit(1747286262.019:65): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.178024][ T3306] cgroup: Unknown subsys name 'net' [ 28.199636][ T29] audit: type=1400 audit(1747286262.019:66): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.227127][ T29] audit: type=1400 audit(1747286262.059:67): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.404759][ T3306] cgroup: Unknown subsys name 'cpuset' [ 28.411188][ T3306] cgroup: Unknown subsys name 'rlimit' [ 28.503031][ T29] audit: type=1400 audit(1747286262.339:68): avc: denied { setattr } for pid=3306 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.528176][ T29] audit: type=1400 audit(1747286262.349:69): avc: denied { create } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.548149][ T3309] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.548699][ T29] audit: type=1400 audit(1747286262.349:70): avc: denied { write } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.577689][ T29] audit: type=1400 audit(1747286262.349:71): avc: denied { read } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.597954][ T29] audit: type=1400 audit(1747286262.349:72): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.610851][ T3306] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.622901][ T29] audit: type=1400 audit(1747286262.349:73): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.622939][ T29] audit: type=1400 audit(1747286262.409:74): avc: denied { relabelto } for pid=3309 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.791217][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 29.850486][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 29.893670][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 29.910038][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 29.970767][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 29.987246][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.994471][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.001616][ T3317] bridge_slave_0: entered allmulticast mode [ 30.008373][ T3317] bridge_slave_0: entered promiscuous mode [ 30.029120][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.036321][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.044576][ T3317] bridge_slave_1: entered allmulticast mode [ 30.050923][ T3317] bridge_slave_1: entered promiscuous mode [ 30.089109][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.110631][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.118267][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.126204][ T3318] bridge_slave_0: entered allmulticast mode [ 30.133385][ T3318] bridge_slave_0: entered promiscuous mode [ 30.141027][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.158090][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.165203][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.172322][ T3323] bridge_slave_0: entered allmulticast mode [ 30.178741][ T3323] bridge_slave_0: entered promiscuous mode [ 30.185297][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.192460][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.199708][ T3318] bridge_slave_1: entered allmulticast mode [ 30.206283][ T3318] bridge_slave_1: entered promiscuous mode [ 30.221841][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.229045][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.236254][ T3316] bridge_slave_0: entered allmulticast mode [ 30.242712][ T3316] bridge_slave_0: entered promiscuous mode [ 30.265951][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.273168][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.280896][ T3323] bridge_slave_1: entered allmulticast mode [ 30.287348][ T3323] bridge_slave_1: entered promiscuous mode [ 30.310032][ T3317] team0: Port device team_slave_0 added [ 30.316043][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.323362][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.330635][ T3316] bridge_slave_1: entered allmulticast mode [ 30.337162][ T3316] bridge_slave_1: entered promiscuous mode [ 30.358801][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.369019][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.378878][ T3317] team0: Port device team_slave_1 added [ 30.390843][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.398049][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.405264][ T3322] bridge_slave_0: entered allmulticast mode [ 30.411738][ T3322] bridge_slave_0: entered promiscuous mode [ 30.419223][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.428539][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.435791][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.443015][ T3322] bridge_slave_1: entered allmulticast mode [ 30.449739][ T3322] bridge_slave_1: entered promiscuous mode [ 30.457350][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.472566][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.482843][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.511509][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.518652][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.544662][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.565599][ T3318] team0: Port device team_slave_0 added [ 30.581054][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.588116][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.614224][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.630091][ T3318] team0: Port device team_slave_1 added [ 30.637626][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.647387][ T3323] team0: Port device team_slave_0 added [ 30.653804][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.666182][ T3316] team0: Port device team_slave_0 added [ 30.682163][ T3323] team0: Port device team_slave_1 added [ 30.703805][ T3316] team0: Port device team_slave_1 added [ 30.709800][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.716799][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.742740][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.763441][ T3322] team0: Port device team_slave_0 added [ 30.770295][ T3322] team0: Port device team_slave_1 added [ 30.780862][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.787930][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.814831][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.825982][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.833137][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.860100][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.895398][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.902396][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.928391][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.941445][ T3317] hsr_slave_0: entered promiscuous mode [ 30.948610][ T3317] hsr_slave_1: entered promiscuous mode [ 30.959860][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.966857][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.992875][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.018432][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.025488][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.051484][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.062734][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.069803][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.095856][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.118402][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.125561][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.151650][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.172186][ T3318] hsr_slave_0: entered promiscuous mode [ 31.178132][ T3318] hsr_slave_1: entered promiscuous mode [ 31.183962][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.191536][ T3318] Cannot create hsr debugfs directory [ 31.221445][ T3323] hsr_slave_0: entered promiscuous mode [ 31.227544][ T3323] hsr_slave_1: entered promiscuous mode [ 31.233484][ T3323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.241115][ T3323] Cannot create hsr debugfs directory [ 31.262088][ T3316] hsr_slave_0: entered promiscuous mode [ 31.268154][ T3316] hsr_slave_1: entered promiscuous mode [ 31.274322][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.281893][ T3316] Cannot create hsr debugfs directory [ 31.299905][ T3322] hsr_slave_0: entered promiscuous mode [ 31.306237][ T3322] hsr_slave_1: entered promiscuous mode [ 31.312057][ T3322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.319673][ T3322] Cannot create hsr debugfs directory [ 31.501763][ T3317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.515840][ T3317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.529992][ T3317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.541900][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.550527][ T3317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.559464][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.580563][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.589150][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.608447][ T3322] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.621478][ T3322] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.633740][ T3322] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.645967][ T3323] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.658442][ T3322] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.667368][ T3323] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.678433][ T3323] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.687510][ T3323] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.734501][ T3316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.749511][ T3316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.758953][ T3316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.768240][ T3316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.808408][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.831380][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.840527][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.852189][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.859366][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.878263][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.885373][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.903675][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.926556][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.934052][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.948287][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.959959][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.970142][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.977224][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.990371][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.009523][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.016728][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.036697][ T2198] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.043841][ T2198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.062858][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.074296][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.099631][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.107671][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.114921][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.127533][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.134650][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.153578][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.160674][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.195258][ T2198] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.202370][ T2198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.235743][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.313205][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.329624][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.354073][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.375691][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.441918][ T3317] veth0_vlan: entered promiscuous mode [ 32.457842][ T3317] veth1_vlan: entered promiscuous mode [ 32.505042][ T3317] veth0_macvtap: entered promiscuous mode [ 32.525223][ T3317] veth1_macvtap: entered promiscuous mode [ 32.549512][ T3322] veth0_vlan: entered promiscuous mode [ 32.567696][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.579074][ T3322] veth1_vlan: entered promiscuous mode [ 32.598364][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.607405][ T3316] veth0_vlan: entered promiscuous mode [ 32.621738][ T3323] veth0_vlan: entered promiscuous mode [ 32.632637][ T3317] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.641441][ T3317] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.650301][ T3317] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.659068][ T3317] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.672490][ T3323] veth1_vlan: entered promiscuous mode [ 32.683400][ T3318] veth0_vlan: entered promiscuous mode [ 32.699286][ T3316] veth1_vlan: entered promiscuous mode [ 32.707748][ T3322] veth0_macvtap: entered promiscuous mode [ 32.715806][ T3318] veth1_vlan: entered promiscuous mode [ 32.727435][ T3323] veth0_macvtap: entered promiscuous mode [ 32.742570][ T3323] veth1_macvtap: entered promiscuous mode [ 32.751843][ T3322] veth1_macvtap: entered promiscuous mode [ 32.760373][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.763239][ T3316] veth0_macvtap: entered promiscuous mode [ 32.791180][ T3318] veth0_macvtap: entered promiscuous mode [ 32.799945][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.810528][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.821775][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.829760][ T3318] veth1_macvtap: entered promiscuous mode [ 32.839861][ T3316] veth1_macvtap: entered promiscuous mode [ 32.852318][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.862880][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.872739][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.883253][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.900040][ T3455] netlink: 'wÞ£ÿ': attribute type 10 has an invalid length. [ 32.907634][ T3455] netlink: 'wÞ£ÿ': attribute type 19 has an invalid length. [ 32.911627][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.915152][ T3455] netlink: 156 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 32.932372][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.943191][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.955253][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.969809][ T3455] loop3: detected capacity change from 0 to 2048 [ 32.977973][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.988503][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.998346][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.008827][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.022732][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.033080][ T3323] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.041958][ T3323] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.044526][ T3455] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.051049][ T3323] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.071765][ T3323] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.083338][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.083360][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.083371][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.083383][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.083394][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.083411][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.103379][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.106162][ T3322] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.171228][ T3322] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.180543][ T3322] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.189313][ T3322] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.198274][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 33.198287][ T29] audit: type=1400 audit(1747286266.979:105): avc: denied { map_create } for pid=3454 comm=77DEA305FF07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.223619][ T29] audit: type=1400 audit(1747286266.979:106): avc: denied { map_read map_write } for pid=3454 comm=77DEA305FF07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.243409][ T29] audit: type=1400 audit(1747286266.979:107): avc: denied { perfmon } for pid=3454 comm=77DEA305FF07 capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.264280][ T29] audit: type=1400 audit(1747286266.979:108): avc: denied { create } for pid=3454 comm=77DEA305FF07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.292606][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.303235][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.313439][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.324095][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.333990][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.344480][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.356439][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.364812][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.375547][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.385546][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.396057][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.405998][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.416558][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.426421][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.436929][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.448702][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.466864][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.477459][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.487391][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.497877][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.507718][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.518257][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.528107][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.538590][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.550879][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.558975][ T3318] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.567790][ T3318] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.576584][ T3318] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.585603][ T3318] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.615577][ T3316] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.624762][ T3316] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.633488][ T3316] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.642401][ T3316] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.751386][ T29] audit: type=1400 audit(1747286267.569:109): avc: denied { read write } for pid=3466 comm="syz.2.6" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 33.775605][ T29] audit: type=1400 audit(1747286267.569:110): avc: denied { open } for pid=3466 comm="syz.2.6" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 33.800473][ T29] audit: type=1400 audit(1747286267.579:111): avc: denied { prog_run } for pid=3466 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.819308][ T29] audit: type=1400 audit(1747286267.579:112): avc: denied { create } for pid=3465 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.819578][ T3473] loop2: detected capacity change from 0 to 512 [ 33.839639][ T29] audit: type=1400 audit(1747286267.579:113): avc: denied { open } for pid=3467 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.839671][ T29] audit: type=1400 audit(1747286267.579:114): avc: denied { kernel } for pid=3467 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.846265][ T3473] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.893471][ T3473] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.906583][ T3473] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 33.982051][ C0] hrtimer: interrupt took 48623 ns [ 34.000559][ T3473] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 34.015343][ T3473] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.028726][ T3473] EXT4-fs (loop2): 1 truncate cleaned up [ 34.035053][ T3473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.101087][ T3469] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 34.135415][ T3481] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 34.149356][ T3481] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 34.163508][ T3473] syz.2.6 (3473) used greatest stack depth: 10840 bytes left [ 34.212066][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.228733][ T3481] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2'. [ 34.240760][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.333797][ T3486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 34.381793][ T3487] netlink: 'wÞ£ÿ': attribute type 10 has an invalid length. [ 34.389435][ T3487] netlink: 'wÞ£ÿ': attribute type 19 has an invalid length. [ 34.396943][ T3487] netlink: 156 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 34.459083][ T3487] loop3: detected capacity change from 0 to 2048 [ 34.490215][ T3487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.560897][ T3492] loop2: detected capacity change from 0 to 512 [ 34.567849][ T3492] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.616792][ T3493] pim6reg1: entered promiscuous mode [ 34.622178][ T3493] pim6reg1: entered allmulticast mode [ 34.821995][ T3492] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.871176][ T3498] ======================================================= [ 34.871176][ T3498] WARNING: The mand mount option has been deprecated and [ 34.871176][ T3498] and is ignored by this kernel. Remove the mand [ 34.871176][ T3498] option from the mount to silence this warning. [ 34.871176][ T3498] ======================================================= [ 34.980383][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.982834][ T3498] cgroup: Invalid name [ 35.003686][ T3492] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 35.018930][ T3492] EXT4-fs (loop2): 1 truncate cleaned up [ 35.025157][ T3492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.077896][ T3488] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 35.170079][ T3492] syz.2.7 (3492) used greatest stack depth: 10832 bytes left [ 35.189613][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.351966][ T3519] loop2: detected capacity change from 0 to 512 [ 35.364796][ T3519] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 35.373731][ T3519] EXT4-fs (loop2): invalid journal inode [ 35.381749][ T3519] EXT4-fs (loop2): can't get journal size [ 35.388619][ T3519] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c118, mo2=0002] [ 35.399271][ T3519] System zones: 1-12, 13-13 [ 35.435709][ T3523] loop3: detected capacity change from 0 to 512 [ 35.442638][ T3523] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.458950][ T3519] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.13: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 35.476223][ T3523] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 35.509339][ T3523] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 35.524635][ T3523] EXT4-fs (loop3): 1 truncate cleaned up [ 35.530775][ T3523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.555780][ T3523] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 35.679340][ T3519] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.13: couldn't read orphan inode 15 (err -117) [ 35.698982][ T3531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14'. [ 35.723040][ T3519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.771257][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.870755][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.293915][ T3563] loop0: detected capacity change from 0 to 512 [ 36.300846][ T3563] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.387257][ T3552] pim6reg1: entered promiscuous mode [ 36.393314][ T3552] pim6reg1: entered allmulticast mode [ 36.655923][ T3563] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.679354][ T3563] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 36.694967][ T3563] EXT4-fs (loop0): 1 truncate cleaned up [ 36.704786][ T3563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.707557][ T3573] loop4: detected capacity change from 0 to 1024 [ 36.762465][ T3558] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 36.815089][ T3573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.836959][ T3573] process 'syz.4.22' launched './file1' with NULL argv: empty string added [ 36.861410][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.871379][ T3486] syz.1.9 (3486) used greatest stack depth: 10080 bytes left [ 36.919715][ T3585] xt_connbytes: Forcing CT accounting to be enabled [ 36.929580][ T3585] Cannot find set identified by id 0 to match [ 36.948655][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.099574][ T3601] pim6reg1: entered promiscuous mode [ 37.105094][ T3601] pim6reg1: entered allmulticast mode [ 37.107414][ T3610] netlink: 16 bytes leftover after parsing attributes in process `syz.4.31'. [ 37.120329][ T3606] lo speed is unknown, defaulting to 1000 [ 37.126302][ T3610] netlink: 28 bytes leftover after parsing attributes in process `syz.4.31'. [ 37.139562][ T3610] netlink: 76 bytes leftover after parsing attributes in process `syz.4.31'. [ 37.161024][ T3611] 9pnet: Could not find request transport: 0xffffffffffffffff [ 37.169137][ T3606] lo speed is unknown, defaulting to 1000 [ 37.182683][ T3606] lo speed is unknown, defaulting to 1000 [ 37.189319][ T3606] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 37.199980][ T3606] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 37.219213][ T3616] netlink: 'syz.4.33': attribute type 1 has an invalid length. [ 37.241894][ T3606] lo speed is unknown, defaulting to 1000 [ 37.251629][ T3606] lo speed is unknown, defaulting to 1000 [ 37.257924][ T3606] lo speed is unknown, defaulting to 1000 [ 37.264074][ T3606] lo speed is unknown, defaulting to 1000 [ 37.279702][ T3606] lo speed is unknown, defaulting to 1000 [ 38.336262][ T3632] loop3: detected capacity change from 0 to 2048 [ 38.394502][ T3307] loop3: p1 < > p4 [ 38.399449][ T3307] loop3: p4 size 8388608 extends beyond EOD, truncated [ 38.428479][ T3632] loop3: p1 < > p4 [ 38.434318][ T3632] loop3: p4 size 8388608 extends beyond EOD, truncated [ 38.699489][ T3644] loop2: detected capacity change from 0 to 512 [ 38.706148][ T3644] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.414918][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 39.414931][ T29] audit: type=1400 audit(1747286273.259:272): avc: denied { append } for pid=3631 comm="syz.3.39" name="loop3p4" dev="devtmpfs" ino=573 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 39.448277][ T3008] loop3: p1 < > p4 [ 39.544006][ T3644] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.801282][ T3008] loop3: p4 size 8388608 extends beyond EOD, truncated [ 39.820086][ T3654] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.457509][ T29] audit: type=1400 audit(1747286273.609:273): avc: denied { open } for pid=3631 comm="syz.3.39" path=2F6465762F6C6F6F70337034202864656C6574656429 dev="devtmpfs" ino=573 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 40.483313][ T29] audit: type=1400 audit(1747286273.659:274): avc: denied { create } for pid=3638 comm="syz.4.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 40.697523][ T3648] loop0: detected capacity change from 0 to 512 [ 40.704399][ T3648] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.844153][ T3648] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.176125][ T3648] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, [ 41.176141][ T3644] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 41.184466][ T3648] block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 41.199657][ T3644] EXT4-fs (loop2): 1 truncate cleaned up [ 41.213437][ T3644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.223651][ T3648] EXT4-fs (loop0): 1 truncate cleaned up [ 41.232190][ T3648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.278765][ T3639] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 41.386757][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 41.398202][ T3459] udevd[3459]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 41.469410][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.484409][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 41.504907][ T3658] udevd[3658]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 41.506038][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.522369][ T29] audit: type=1326 audit(1747286275.349:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.1.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c312e969 code=0x7ffc0000 [ 41.547803][ T29] audit: type=1326 audit(1747286275.349:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.1.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c312e969 code=0x7ffc0000 [ 41.571083][ T29] audit: type=1326 audit(1747286275.349:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.1.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f57c312e969 code=0x7ffc0000 [ 41.594276][ T29] audit: type=1326 audit(1747286275.349:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.1.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c312e969 code=0x7ffc0000 [ 41.667110][ T29] audit: type=1326 audit(1747286275.399:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.1.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57c312d2d0 code=0x7ffc0000 [ 41.690343][ T29] audit: type=1326 audit(1747286275.399:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.1.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f57c3130197 code=0x7ffc0000 [ 41.713626][ T29] audit: type=1326 audit(1747286275.399:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.1.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f57c312e969 code=0x7ffc0000 [ 41.747997][ T3679] pim6reg1: entered promiscuous mode [ 41.753507][ T3679] pim6reg1: entered allmulticast mode [ 41.885365][ T3687] loop0: detected capacity change from 0 to 512 [ 41.892426][ T3687] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.909335][ T3687] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 42.005660][ T3687] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 42.020926][ T3687] EXT4-fs (loop0): 1 truncate cleaned up [ 42.027665][ T3687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.052339][ T3687] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 42.300430][ T3697] __nla_validate_parse: 2 callbacks suppressed [ 42.300449][ T3697] netlink: 76 bytes leftover after parsing attributes in process `syz.1.51'. [ 42.406680][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.423324][ T3703] netlink: 76 bytes leftover after parsing attributes in process `syz.2.53'. [ 42.490024][ T3706] loop3: detected capacity change from 0 to 512 [ 42.497119][ T3706] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.508107][ T3706] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.528336][ T3706] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 42.543105][ T3706] EXT4-fs (loop3): 1 truncate cleaned up [ 42.549514][ T3706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.575824][ T3706] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 42.822297][ T3716] pim6reg1: entered promiscuous mode [ 42.827716][ T3716] pim6reg1: entered allmulticast mode [ 42.957602][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.116357][ T3730] syzkaller0: entered promiscuous mode [ 43.121917][ T3730] syzkaller0: entered allmulticast mode [ 43.327487][ T3747] loop0: detected capacity change from 0 to 512 [ 43.334705][ T3747] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.385384][ T3747] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 43.416251][ T3747] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 43.431749][ T3747] EXT4-fs (loop0): 1 truncate cleaned up [ 43.438477][ T3747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.788669][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.869254][ T3768] loop1: detected capacity change from 0 to 1024 [ 43.876731][ T3774] netlink: 76 bytes leftover after parsing attributes in process `syz.2.65'. [ 43.987908][ T3768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.074314][ T3788] loop3: detected capacity change from 0 to 512 [ 44.081215][ T3788] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.142464][ T3788] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.157184][ T3788] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 44.173230][ T3788] EXT4-fs (loop3): 1 truncate cleaned up [ 44.179887][ T3788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.203983][ T3788] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 44.227806][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.361804][ T3797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.420155][ T3797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.436589][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 44.436606][ T29] audit: type=1326 audit(1747286278.279:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7efd453a07fc code=0x7ffc0000 [ 44.486904][ T29] audit: type=1326 audit(1747286278.309:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7efd453a0734 code=0x7ffc0000 [ 44.510148][ T29] audit: type=1326 audit(1747286278.309:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7efd453a0734 code=0x7ffc0000 [ 44.533878][ T29] audit: type=1326 audit(1747286278.309:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4539e969 code=0x7ffc0000 [ 44.557543][ T29] audit: type=1326 audit(1747286278.309:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4539e969 code=0x7ffc0000 [ 44.581322][ T29] audit: type=1326 audit(1747286278.329:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efd4539e969 code=0x7ffc0000 [ 44.604481][ T29] audit: type=1326 audit(1747286278.329:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4539e969 code=0x7ffc0000 [ 44.627774][ T29] audit: type=1326 audit(1747286278.329:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4539e969 code=0x7ffc0000 [ 44.639341][ T3798] pim6reg1: entered promiscuous mode [ 44.651115][ T29] audit: type=1326 audit(1747286278.329:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7efd4539e969 code=0x7ffc0000 [ 44.656566][ T3798] pim6reg1: entered allmulticast mode [ 44.679603][ T29] audit: type=1326 audit(1747286278.329:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4539e969 code=0x7ffc0000 [ 44.766651][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.802543][ T3806] netlink: 'wÞ£ÿ': attribute type 10 has an invalid length. [ 44.810110][ T3806] netlink: 'wÞ£ÿ': attribute type 19 has an invalid length. [ 44.817630][ T3806] netlink: 156 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 44.835999][ T3806] loop3: detected capacity change from 0 to 2048 [ 44.946420][ T3806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.037850][ T3820] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 45.110582][ T3823] loop4: detected capacity change from 0 to 512 [ 45.117576][ T3823] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.261585][ T3823] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.365893][ T3827] netlink: 76 bytes leftover after parsing attributes in process `syz.0.81'. [ 45.417217][ T3823] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 45.432504][ T3823] EXT4-fs (loop4): 1 truncate cleaned up [ 45.438961][ T3823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.490981][ T3817] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 45.528928][ T3832] loop0: detected capacity change from 0 to 1024 [ 45.624517][ T3832] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.634661][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.662180][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.673443][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.830911][ T3856] netlink: 76 bytes leftover after parsing attributes in process `syz.0.93'. [ 45.852605][ T3858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.873216][ T3858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.964238][ T3869] loop3: detected capacity change from 0 to 1024 [ 46.036854][ T3869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.133366][ T3876] loop2: detected capacity change from 0 to 512 [ 46.140251][ T3876] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.148168][ T3876] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 46.195602][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.207428][ T3876] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 46.222931][ T3876] EXT4-fs (loop2): 1 truncate cleaned up [ 46.229512][ T3876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.247159][ T3876] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 46.321206][ T3884] siw: device registration error -23 [ 46.460164][ T3890] netlink: 76 bytes leftover after parsing attributes in process `syz.0.105'. [ 46.553966][ T3896] netlink: 52 bytes leftover after parsing attributes in process `syz.1.108'. [ 46.686932][ T3903] loop3: detected capacity change from 0 to 512 [ 46.693878][ T3903] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.704421][ T3900] loop0: detected capacity change from 0 to 512 [ 46.721606][ T3903] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.732836][ T3900] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 46.746038][ T3903] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 46.761463][ T3903] EXT4-fs (loop3): 1 truncate cleaned up [ 46.768041][ T3903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.896751][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.929207][ T3900] EXT4-fs (loop0): invalid journal inode [ 47.035249][ T3900] EXT4-fs (loop0): can't get journal size [ 47.168991][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.191613][ T3900] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c118, mo2=0002] [ 47.199807][ T3900] System zones: 1-12, 13-13 [ 47.204780][ T3900] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.109: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 47.286610][ T3920] loop2: detected capacity change from 0 to 512 [ 47.294238][ T3920] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.884500][ T3922] loop1: detected capacity change from 0 to 512 [ 47.891619][ T3922] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.979712][ T3920] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 47.989984][ T3922] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.010772][ T3900] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.109: couldn't read orphan inode 15 (err -117) [ 48.023339][ T3922] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 48.038420][ T3922] EXT4-fs (loop1): 1 truncate cleaned up [ 48.044646][ T3922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.057830][ T3920] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 48.072828][ T3920] EXT4-fs (loop2): 1 truncate cleaned up [ 48.079171][ T3920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.099376][ T3919] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 48.109697][ T3921] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 48.130893][ T3900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.274853][ T3917] syz.4.113 (3917) used greatest stack depth: 9976 bytes left [ 48.301931][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.311302][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.320954][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.448561][ T3934] pim6reg1: entered promiscuous mode [ 48.454088][ T3934] pim6reg1: entered allmulticast mode [ 48.486740][ T3944] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 48.584490][ T3946] loop0: detected capacity change from 0 to 512 [ 48.591739][ T3946] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.604013][ T3946] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.620226][ T3946] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 48.635291][ T3946] EXT4-fs (loop0): 1 truncate cleaned up [ 48.642075][ T3946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.659582][ T3946] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 48.879663][ T3955] Zero length message leads to an empty skb [ 48.997876][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.091507][ T3965] netlink: 52 bytes leftover after parsing attributes in process `syz.3.123'. [ 49.095998][ T3968] netlink: 'wÞ£ÿ': attribute type 10 has an invalid length. [ 49.108004][ T3968] netlink: 'wÞ£ÿ': attribute type 19 has an invalid length. [ 49.115547][ T3968] netlink: 156 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 49.135647][ T3966] syzkaller0: entered promiscuous mode [ 49.141172][ T3966] syzkaller0: entered allmulticast mode [ 49.158923][ T3968] loop1: detected capacity change from 0 to 2048 [ 49.197193][ T3968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.259266][ T3912] syz.4.113 (3912) used greatest stack depth: 7920 bytes left [ 49.489872][ T3985] loop0: detected capacity change from 0 to 512 [ 49.496915][ T3985] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.514423][ T3985] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 49.527097][ T3985] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 49.541864][ T3985] EXT4-fs (loop0): 1 truncate cleaned up [ 49.548445][ T3985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.568468][ T3985] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 49.588721][ T3983] loop3: detected capacity change from 0 to 512 [ 49.595777][ T3983] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.603592][ T3983] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 49.678152][ T3983] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 49.693161][ T3983] EXT4-fs (loop3): 1 truncate cleaned up [ 49.699689][ T3983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.901672][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 49.901687][ T29] audit: type=1326 audit(1747286283.739:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3978 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf515e969 code=0x7ffc0000 [ 50.136271][ T3983] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 50.219781][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.334864][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.444315][ T29] audit: type=1326 audit(1747286283.999:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3978 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf515e969 code=0x7ffc0000 [ 50.468482][ T29] audit: type=1326 audit(1747286284.009:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3978 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcf515e969 code=0x7ffc0000 [ 50.491815][ T29] audit: type=1326 audit(1747286284.009:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3978 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf515e969 code=0x7ffc0000 [ 50.515237][ T29] audit: type=1326 audit(1747286284.009:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3978 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf515e969 code=0x7ffc0000 [ 50.538756][ T29] audit: type=1326 audit(1747286284.009:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3978 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efcf515e969 code=0x7ffc0000 [ 50.562188][ T29] audit: type=1326 audit(1747286284.009:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3978 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf515e969 code=0x7ffc0000 [ 50.585545][ T29] audit: type=1326 audit(1747286284.009:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3978 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcf515e969 code=0x7ffc0000 [ 50.608856][ T29] audit: type=1326 audit(1747286284.009:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3978 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf515e969 code=0x7ffc0000 [ 50.632208][ T29] audit: type=1326 audit(1747286284.009:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3978 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf515e969 code=0x7ffc0000 [ 50.858351][ T4018] loop2: detected capacity change from 0 to 512 [ 50.866339][ T4018] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.876003][ T4018] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 50.970379][ T4018] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 50.988242][ T4018] EXT4-fs (loop2): 1 truncate cleaned up [ 50.994883][ T4018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.012572][ T4018] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 51.155781][ T4021] syzkaller0: entered promiscuous mode [ 51.161450][ T4021] syzkaller0: entered allmulticast mode [ 51.241453][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.336235][ T4035] netlink: 'wÞ£ÿ': attribute type 10 has an invalid length. [ 51.343789][ T4035] netlink: 'wÞ£ÿ': attribute type 19 has an invalid length. [ 51.351491][ T4035] netlink: 156 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 51.402845][ T4035] loop4: detected capacity change from 0 to 2048 [ 51.483685][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.529380][ T4035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.547473][ T4044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.143'. [ 51.627118][ T4047] loop1: detected capacity change from 0 to 512 [ 51.634042][ T4047] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.641502][ T4047] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 51.736130][ T4047] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 51.751494][ T4047] EXT4-fs (loop1): 1 truncate cleaned up [ 51.757828][ T4047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.775364][ T4047] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 51.932310][ T4049] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 52.050271][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.161610][ T4064] netlink: 'wÞ£ÿ': attribute type 10 has an invalid length. [ 52.169216][ T4064] netlink: 'wÞ£ÿ': attribute type 19 has an invalid length. [ 52.176724][ T4064] netlink: 156 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 52.219846][ T4064] loop0: detected capacity change from 0 to 2048 [ 52.231879][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.283007][ T4069] syzkaller0: entered promiscuous mode [ 52.288695][ T4069] syzkaller0: entered allmulticast mode [ 52.306819][ T4070] loop1: detected capacity change from 0 to 512 [ 52.313599][ T4070] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.324343][ T4070] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 52.382326][ T4064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.394870][ T4070] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 52.409711][ T4070] EXT4-fs (loop1): 1 truncate cleaned up [ 52.416302][ T4070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.434429][ T4070] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 52.565870][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.613309][ T4078] loop3: detected capacity change from 0 to 1024 [ 52.677334][ T4080] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 52.693419][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.707390][ T4078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.823744][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.843816][ T4090] netlink: 76 bytes leftover after parsing attributes in process `syz.4.158'. [ 52.915174][ T4098] netlink: 40 bytes leftover after parsing attributes in process `syz.3.157'. [ 52.934870][ T4101] netlink: 'wÞ£ÿ': attribute type 10 has an invalid length. [ 52.942395][ T4101] netlink: 'wÞ£ÿ': attribute type 19 has an invalid length. [ 52.949984][ T4101] netlink: 156 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 53.034178][ T4101] loop0: detected capacity change from 0 to 2048 [ 53.049314][ T4106] syzkaller0: entered promiscuous mode [ 53.055281][ T4106] syzkaller0: entered allmulticast mode [ 53.158615][ T4101] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.228719][ T4114] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 53.341476][ T4116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'. [ 53.342422][ T4122] loop4: detected capacity change from 0 to 1024 [ 53.410883][ T4122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.426922][ T4130] netlink: 76 bytes leftover after parsing attributes in process `syz.1.171'. [ 53.478265][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.513274][ T4136] netlink: 'wÞ£ÿ': attribute type 10 has an invalid length. [ 53.521009][ T4136] netlink: 'wÞ£ÿ': attribute type 19 has an invalid length. [ 53.560855][ T4136] loop2: detected capacity change from 0 to 2048 [ 53.587619][ T4136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.613587][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.139747][ T4162] loop2: detected capacity change from 0 to 1024 [ 54.183615][ T4166] __nla_validate_parse: 2 callbacks suppressed [ 54.183632][ T4166] netlink: 76 bytes leftover after parsing attributes in process `syz.4.186'. [ 54.199915][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.215917][ T4162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.249415][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.537903][ T4192] loop3: detected capacity change from 0 to 512 [ 54.538450][ T4192] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.541232][ T4192] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.562063][ T4192] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 54.562498][ T4192] EXT4-fs (loop3): 1 truncate cleaned up [ 54.563338][ T4192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.568224][ T4192] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 54.598346][ T4197] netlink: 'wÞ£ÿ': attribute type 10 has an invalid length. [ 54.598363][ T4197] netlink: 'wÞ£ÿ': attribute type 19 has an invalid length. [ 54.598374][ T4197] netlink: 156 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 54.661387][ T4197] loop1: detected capacity change from 0 to 2048 [ 54.666925][ T4197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.806238][ T4205] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 54.908697][ T4209] loop4: detected capacity change from 0 to 1024 [ 54.952575][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.953798][ T4209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.015434][ T4215] netlink: 76 bytes leftover after parsing attributes in process `syz.3.202'. [ 55.121841][ T4222] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 55.137235][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 55.137285][ T29] audit: type=1326 audit(1747286288.979:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4539e969 code=0x7ffc0000 [ 55.207027][ T29] audit: type=1326 audit(1747286289.009:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd4539e969 code=0x7ffc0000 [ 55.230423][ T29] audit: type=1326 audit(1747286289.009:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4539e969 code=0x7ffc0000 [ 55.254144][ T29] audit: type=1326 audit(1747286289.009:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4539e969 code=0x7ffc0000 [ 55.277406][ T29] audit: type=1326 audit(1747286289.009:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd4539e969 code=0x7ffc0000 [ 55.301108][ T29] audit: type=1326 audit(1747286289.009:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4539e969 code=0x7ffc0000 [ 55.324467][ T29] audit: type=1326 audit(1747286289.009:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd4539e969 code=0x7ffc0000 [ 55.347995][ T29] audit: type=1326 audit(1747286289.009:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4539e969 code=0x7ffc0000 [ 55.371437][ T29] audit: type=1326 audit(1747286289.009:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd4539e969 code=0x7ffc0000 [ 55.394916][ T29] audit: type=1326 audit(1747286289.009:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4539e969 code=0x7ffc0000 [ 55.454290][ T4236] loop2: detected capacity change from 0 to 1024 [ 55.506164][ T4239] syzkaller0: entered promiscuous mode [ 55.511799][ T4239] syzkaller0: entered allmulticast mode [ 55.524046][ T4236] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.211: Failed to acquire dquot type 0 [ 55.572308][ T4245] netlink: 156 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 55.581788][ T4236] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 55.599872][ T4236] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.211: corrupted inode contents [ 55.612838][ T4236] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #13: comm syz.2.211: mark_inode_dirty error [ 55.634148][ T4236] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.211: corrupted inode contents [ 55.652345][ T4245] loop3: detected capacity change from 0 to 2048 [ 55.661197][ T4236] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.211: mark_inode_dirty error [ 55.677895][ T4236] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.211: corrupted inode contents [ 55.690225][ T4236] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 55.702035][ T4236] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.211: corrupted inode contents [ 55.721114][ T4236] EXT4-fs error (device loop2): ext4_truncate:4255: inode #13: comm syz.2.211: mark_inode_dirty error [ 55.734638][ T4253] netlink: 76 bytes leftover after parsing attributes in process `syz.0.218'. [ 55.745917][ T4236] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 55.776934][ T4236] EXT4-fs (loop2): 1 truncate cleaned up [ 55.791740][ T4257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.828595][ T4257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.847902][ T4263] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 55.868939][ T4268] netlink: 156 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 55.913642][ T4268] loop4: detected capacity change from 0 to 2048 [ 56.008440][ T4276] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 56.125762][ T4279] syzkaller0: entered promiscuous mode [ 56.131286][ T4279] syzkaller0: entered allmulticast mode [ 56.201522][ T4283] netlink: 156 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 56.223592][ T4283] loop0: detected capacity change from 0 to 2048 [ 56.453188][ T4298] netlink: 76 bytes leftover after parsing attributes in process `syz.3.236'. [ 56.509394][ T4304] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 56.629738][ T4310] syzkaller0: entered promiscuous mode [ 56.635417][ T4310] syzkaller0: entered allmulticast mode [ 56.688882][ T4319] validate_nla: 6 callbacks suppressed [ 56.688896][ T4319] netlink: 'wÞ£ÿ': attribute type 10 has an invalid length. [ 56.702125][ T4319] netlink: 'wÞ£ÿ': attribute type 19 has an invalid length. [ 56.709678][ T4319] netlink: 156 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 56.732590][ T4236] syz.2.211 (4236) used greatest stack depth: 5952 bytes left [ 56.753327][ T4319] loop1: detected capacity change from 0 to 2048 [ 56.810257][ T4325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.828988][ T4325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.899926][ T4332] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 57.032089][ T4347] loop4: detected capacity change from 0 to 1024 [ 57.037949][ T4349] netlink: 'wÞ£ÿ': attribute type 10 has an invalid length. [ 57.046210][ T4349] netlink: 'wÞ£ÿ': attribute type 19 has an invalid length. [ 57.046288][ T4349] netlink: 156 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 57.065511][ T4347] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.258: Failed to acquire dquot type 0 [ 57.077527][ T4349] loop3: detected capacity change from 0 to 2048 [ 57.114519][ T4347] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 57.144829][ T4354] syzkaller0: entered promiscuous mode [ 57.150395][ T4354] syzkaller0: entered allmulticast mode [ 57.157838][ T4347] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.258: corrupted inode contents [ 57.170474][ T4347] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #13: comm syz.4.258: mark_inode_dirty error [ 57.182354][ T4347] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.258: corrupted inode contents [ 57.194418][ T4347] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.258: mark_inode_dirty error [ 57.206189][ T4347] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.258: corrupted inode contents [ 57.206445][ T4355] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 57.218345][ T4347] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 57.237353][ T4347] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.258: corrupted inode contents [ 57.251080][ T4347] EXT4-fs error (device loop4): ext4_truncate:4255: inode #13: comm syz.4.258: mark_inode_dirty error [ 57.269423][ T4347] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 57.287294][ T4347] EXT4-fs (loop4): 1 truncate cleaned up [ 57.486717][ T4366] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 57.871277][ T4382] syzkaller0: entered promiscuous mode [ 57.876906][ T4382] syzkaller0: entered allmulticast mode [ 57.952265][ T4392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.971579][ T4392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.040858][ T4396] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 58.136937][ T4407] netlink: 'wÞ£ÿ': attribute type 10 has an invalid length. [ 58.144588][ T4407] netlink: 'wÞ£ÿ': attribute type 19 has an invalid length. [ 58.164594][ T4407] loop0: detected capacity change from 0 to 2048 [ 58.444498][ T4417] loop4: detected capacity change from 0 to 512 [ 58.451523][ T4417] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.497683][ T4419] netlink: 'wÞ£ÿ': attribute type 10 has an invalid length. [ 58.505356][ T4419] netlink: 'wÞ£ÿ': attribute type 19 has an invalid length. [ 58.535558][ T4419] loop1: detected capacity change from 0 to 2048 [ 58.584993][ T4417] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 58.601214][ T4417] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 58.667982][ T4417] EXT4-fs (loop4): 1 truncate cleaned up [ 58.678492][ T4417] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 58.746330][ T4426] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 58.865126][ T4428] syzkaller0: entered promiscuous mode [ 58.870663][ T4428] syzkaller0: entered allmulticast mode [ 59.065791][ T4440] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 59.143547][ T4446] loop4: detected capacity change from 0 to 1024 [ 59.165673][ T4450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.179349][ T4450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.199107][ T4446] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.295: Failed to acquire dquot type 0 [ 59.212927][ T4446] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 59.227863][ T4446] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.295: corrupted inode contents [ 59.239974][ T4446] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #13: comm syz.4.295: mark_inode_dirty error [ 59.254548][ T4446] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.295: corrupted inode contents [ 59.273343][ T4446] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.295: mark_inode_dirty error [ 59.294970][ T4446] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.295: corrupted inode contents [ 59.337338][ T4446] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 59.362834][ T4446] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.295: corrupted inode contents [ 59.403184][ T4446] EXT4-fs error (device loop4): ext4_truncate:4255: inode #13: comm syz.4.295: mark_inode_dirty error [ 59.423028][ T4446] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 59.432888][ T4446] EXT4-fs (loop4): 1 truncate cleaned up [ 59.545573][ T4458] loop3: detected capacity change from 0 to 512 [ 59.552254][ T4458] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.561862][ T4458] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 59.574282][ T4458] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 59.589351][ T4458] EXT4-fs (loop3): 1 truncate cleaned up [ 60.340698][ T4461] loop1: detected capacity change from 0 to 512 [ 60.347708][ T4461] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.356415][ T4458] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 60.371012][ T4461] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 60.393796][ T4461] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 60.408476][ T4461] EXT4-fs (loop1): 1 truncate cleaned up [ 60.426781][ T4460] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 60.594590][ T4471] __nla_validate_parse: 6 callbacks suppressed [ 60.594605][ T4471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.301'. [ 60.629172][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 60.629189][ T29] audit: type=1326 audit(1747286294.469:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4470 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c4d7e969 code=0x7ffc0000 [ 60.672444][ T29] audit: type=1326 audit(1747286294.509:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4470 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f31c4d7e969 code=0x7ffc0000 [ 60.695860][ T29] audit: type=1326 audit(1747286294.509:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4470 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c4d7e969 code=0x7ffc0000 [ 60.719255][ T29] audit: type=1326 audit(1747286294.509:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4470 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f31c4d7e969 code=0x7ffc0000 [ 60.742526][ T29] audit: type=1326 audit(1747286294.509:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4470 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c4d7e969 code=0x7ffc0000 [ 60.765923][ T29] audit: type=1326 audit(1747286294.509:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4470 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c4d7e969 code=0x7ffc0000 [ 60.804674][ T4481] netlink: 'wÞ£ÿ': attribute type 10 has an invalid length. [ 60.812198][ T4481] netlink: 'wÞ£ÿ': attribute type 19 has an invalid length. [ 60.819724][ T4481] netlink: 156 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 60.874289][ T4485] netlink: 76 bytes leftover after parsing attributes in process `syz.3.306'. [ 60.884260][ T4481] loop1: detected capacity change from 0 to 2048 [ 60.911704][ T4489] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 61.960323][ T4504] loop3: detected capacity change from 0 to 512 [ 61.967360][ T4504] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.980241][ T4505] loop0: detected capacity change from 0 to 512 [ 61.987657][ T4505] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.996945][ T4504] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.006831][ T4505] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 62.019768][ T4504] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 62.034997][ T4504] EXT4-fs (loop3): 1 truncate cleaned up [ 62.043489][ T4505] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 62.050831][ T4500] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 62.060008][ T4505] EXT4-fs (loop0): 1 truncate cleaned up [ 62.082910][ T4503] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 62.174336][ T4516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.211440][ T4520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.316'. [ 62.223790][ T4516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.268498][ T4525] netlink: 76 bytes leftover after parsing attributes in process `syz.3.318'. [ 62.276948][ T29] audit: type=1326 audit(1747286296.109:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4519 comm="syz.0.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0560b4e969 code=0x7ffc0000 [ 62.301087][ T29] audit: type=1326 audit(1747286296.109:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4519 comm="syz.0.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0560b4e969 code=0x7ffc0000 [ 62.325840][ T29] audit: type=1326 audit(1747286296.129:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4519 comm="syz.0.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0560b4e969 code=0x7ffc0000 [ 62.349352][ T29] audit: type=1326 audit(1747286296.129:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4519 comm="syz.0.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0560b4e969 code=0x7ffc0000 [ 62.399811][ T4530] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 62.473537][ T4534] loop4: detected capacity change from 0 to 1024 [ 62.501437][ T4534] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.322: Failed to acquire dquot type 0 [ 62.532435][ T4534] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 62.547272][ T4534] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.322: corrupted inode contents [ 62.561415][ T4534] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #13: comm syz.4.322: mark_inode_dirty error [ 62.578042][ T4545] netlink: 'wÞ£ÿ': attribute type 10 has an invalid length. [ 62.585649][ T4545] netlink: 'wÞ£ÿ': attribute type 19 has an invalid length. [ 62.593209][ T4545] netlink: 156 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 62.609421][ T4534] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.322: corrupted inode contents [ 62.621958][ T4534] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.322: mark_inode_dirty error [ 62.622010][ T4545] loop0: detected capacity change from 0 to 2048 [ 62.633608][ T4534] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.322: corrupted inode contents [ 62.653215][ T4534] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 62.663122][ T4534] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.322: corrupted inode contents [ 62.677719][ T4534] EXT4-fs error (device loop4): ext4_truncate:4255: inode #13: comm syz.4.322: mark_inode_dirty error [ 62.690347][ T4534] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 62.701238][ T4534] EXT4-fs (loop4): 1 truncate cleaned up [ 62.733361][ T4548] loop3: detected capacity change from 0 to 512 [ 62.740151][ T4548] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.751383][ T4548] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.836772][ T4548] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 62.852124][ T4548] EXT4-fs (loop3): 1 truncate cleaned up [ 62.863761][ T4548] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 63.305866][ T4561] loop1: detected capacity change from 0 to 512 [ 63.312624][ T4561] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.366580][ T4561] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.728973][ T4561] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 63.744431][ T4561] EXT4-fs (loop1): 1 truncate cleaned up [ 63.757792][ T4560] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 63.835071][ T4573] netlink: 76 bytes leftover after parsing attributes in process `syz.0.331'. [ 63.905856][ T4577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.334'. [ 63.921017][ T4581] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 63.949641][ T3008] ================================================================== [ 63.957782][ T3008] BUG: KCSAN: data-race in dont_mount / lookup_fast [ 63.960617][ T4585] syzkaller0: entered promiscuous mode [ 63.964402][ T3008] [ 63.964411][ T3008] read-write to 0xffff888100726a80 of 4 bytes by task 3658 on cpu 0: [ 63.964430][ T3008] dont_mount+0x2a/0x40 [ 63.964460][ T3008] vfs_unlink+0x28f/0x420 [ 63.969965][ T4585] syzkaller0: entered allmulticast mode [ 63.972261][ T3008] do_unlinkat+0x28e/0x4c0 [ 63.998889][ T3008] __x64_sys_unlink+0x2e/0x40 [ 64.003603][ T3008] x64_sys_call+0x22a6/0x2fb0 [ 64.008289][ T3008] do_syscall_64+0xd0/0x1a0 [ 64.012900][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.018804][ T3008] [ 64.021130][ T3008] read to 0xffff888100726a80 of 4 bytes by task 3008 on cpu 1: [ 64.028695][ T3008] lookup_fast+0xf0/0x320 [ 64.033045][ T3008] walk_component+0x3f/0x220 [ 64.037658][ T3008] path_lookupat+0xfe/0x2a0 [ 64.042170][ T3008] filename_lookup+0x147/0x340 [ 64.046940][ T3008] do_readlinkat+0x7d/0x320 [ 64.051450][ T3008] __x64_sys_readlink+0x47/0x60 [ 64.056308][ T3008] x64_sys_call+0x2cf3/0x2fb0 [ 64.060995][ T3008] do_syscall_64+0xd0/0x1a0 [ 64.065512][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.071506][ T3008] [ 64.073839][ T3008] value changed: 0x00300008 -> 0x00004008 [ 64.079567][ T3008] [ 64.081892][ T3008] Reported by Kernel Concurrency Sanitizer on: [ 64.088065][ T3008] CPU: 1 UID: 0 PID: 3008 Comm: udevd Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(voluntary) [ 64.100047][ T3008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 64.110107][ T3008] ==================================================================