last executing test programs: 8m18.381093735s ago: executing program 3 (id=21): capset(&(0x7f00000004c0)={0x20071026}, &(0x7f00000002c0)={0x80002, 0xffffffff, 0x80000, 0xfffffffd}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES8=r1], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRES8=r2], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$selinux_access(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB='system_u:object_r:updpwd_exec_t '], 0x56) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRESOCT=r8, @ANYRES16=r1, @ANYRES32=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r9, 0x0, 0xffffffffffffffff}, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r11, 0x400, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r12}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='io_uring_create\x00', r12, 0x0, 0x6}, 0x74) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 8m17.555374386s ago: executing program 3 (id=25): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000080)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x7, 0x0, &(0x7f0000000000)="219a53f271a76d", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socket(0x10, 0x803, 0x0) listen(0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x46e, &(0x7f0000000400)="$eJzs3M9vFFUcAPDvbH8gv2xF/AGioGgkGltaUDl4AKOJB01M9IDH2haCLNTQaoQQXT3g0ZB4Nx5N/As86cWoJxOvejckxHAB9TJmdmfa3WV3bcvWAffzSbb73sxs3/v2zdt9b15nAxhY+7IfScS2iPg1IsYa2dYD9jWebly7OPvntYuzSaTpG38k9eOuX7s4WxxavG5rkam1bm+2eP7C6Zlqdf5cnp9cOvPu5OL5C8+cOjNzcv7k/NnpI0cOH5p6/rnpZ/sSZ1an67s/XNiz65W3Lr82e/zy2z9+nRTxt8Txfl/Ka/rVzYaKxBP9KuU2sb0pnQyXWBHWJDshs+Yaqff/sRiKlcYbi5c/KbVywIZK0zTd1H13LQX+x5IouwZAOfLP+SSiNpvNgZvn84Pg6rHGBCiL+0b+aOwZjkp+zEjb/LafstnW8dpfX2SPaLueAgCwEb491nguxn4r449Ky1X8o/na0HhE3BMROyLi3ojYGRH3RcT9EfFARDzY9JpO6z7t2hdJbh7/VK6sK7BVysZ/L+RrW63jv2L0F+NDeW57Pf6R5MSp6vzBiLg7Ig7EyKYsP9WjjO9e+uWzbvv2NY3/skdWfjEWzOtxZbjtAt3czNLMrcTc7OrHEbuHO8WfLK8EZO24KyJ2711fGaee+mpPt33/Hn8PfVhnSr+MeLLR/rVoi7+Q9F6fnLwrqvMHJ4uz4mY//Xzp9W7l31L8fZC1/5aO5/9y/ONJ83rt4trLuPTbp13nNKs8/0ebX5Od/6PJm/V0seODmaWlc1MRo8mr+faj+fbW8urHTa8cn8V/YH/n/r8jVv4SD0VEdhI/HBGPRMTevO6PRsRjEbG/R/w/vPj4O+uPf2Nl8c+tqf27Joq17Zt2DZ3+/pv6nqKxxnvEn0SH9j9cTx3It6zm/a9nTc/dytkMAAAAd55KRGyLpDKxnK5UJiYa/y+/M7ZUqguLS0+fWHjv7FzjHoHxGKkUV7rGlq+HRm0qn9YX10en2/KH8uvGnw9trucnZheqc2UHDwNua5f+n/l9qOzaARvO/VowuNbb/9M0/ajPVQH+Yz7/YXDp/zC4OvT/zW35Ht8RANzJOn3+m9jDYDD+h8Gl/8Pg0v9hcOn/MJDyO+GHV3OD/4Ylsvef8kpfeyJNSyp9tPzYlxNRKa30KDv2NSb+zr9s83apz6oSZb8zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Mc/AQAA//+4C+Qb") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4048081}, 0x40000) 8m16.476458171s ago: executing program 3 (id=33): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8800, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x28d5, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x0, 0x214}) close(r5) msgsnd(0x0, &(0x7f0000003900)=ANY=[@ANYBLOB], 0xfd1, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000002880)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x17}, 0x0, 0x0, 0x1, 0x1414, 0x10041, 0x4e, 0xffffffffffffffc9, 0x8, 0x8582, 0x6}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$eJzs3MtvG8UfAPDv+pG+m/yq/oA+gCBAlAJJk5bSAxcQSBxAQoJDOYYkrUrdBjVBIlUFBaFyRJU4cUEckfgLOMEFASckLhzgjipVqJcWTkYb76a2a+dVP0j9+UjrzuyuO/P1ztizM7EDGFij6UMSsTMifo+I4Vq28YTR2j+3blya/vvGpekkqtU3/kpK6eGbNy5N56fmz9uRZ0oRhU+SONCi3PnFi2enKpXZC1l+fOHcu+PzixefOXNu6vTs6dnzkydOHDs68dzxyWc7Emca1839H8wd3PfKW1dfmz559e2fvkny+Jvi6JDRlQ4+Xq12uLj+2lWXrrUMNoNirZtGean/D0cxbl+84Xj5475WDuiqarVava/94ctV4B6WRL9rAPRH/kGf3v/mW4+GHv8J11+o3QClcd/KttqRUhSyc8pN97edNBoRJy//82W6RXfmIQAAGnyXjn+ebjX+K0T9vNDubA1lJCL+FxF7IuJ4ROyNiP9HLJ17f0Q8sM7ymxdJ7hz/FK5tKLA1Ssd/z2drW43jv3z0FyPFLLdrKf5ycupMZfZI9pocivKWND+xQhnfv/TrZ+2O1Y//0i0tPx8LZvW4VtrS+JyZqYWpu4m53vWPIvaXWsWfLK8EJBGxLyL2b7CMM4e/Ptju2Orxr6AD60zVryKeqF3/y9EUfy5ZeX1yfGtUZo+M563iTj//cuX1duXfVfwdkF7/7S3b/3L8I0n9eu38ev73L55MH6/88Wnbe5qNtv+h5M2Gfe9PLSxcmIgYSl6tVbp+/2TTeZO3z0/jP/Ro6/6/J26/EgciIm3ED0bEQxHxcFb3R37bveqr8OOLj72z8fi7K41/Zu3XvzockTeExaHIEst7WieKZ3/4tqHQkdbx7257/Y8tpQ5le9by/reWeq23NQMAAMBmVYiInZEUxpbThcLYWO1v+PfG9kJlbn7hqVNz752fqX1HYCTKhXyma7huPnQiu63P85NN+aPZvPHnxW1L+bHpucpMv4OHAbejTf9P/Vnsd+2ArvN9LRhc+j8MLv0fBted/X9rX+oB9F6Lz/9t/agH0Hutxv8fruWJOztfF6C3mvq/ZT8YIOb/YHBtpP97z4B7Q2mln2we6mlVgN6Z3xarf0leYjMl8l+u6UYR5bS1HI6IxYtR6HukEl1M9PudCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+DQAA//+CSeFs") 8m16.339573983s ago: executing program 3 (id=35): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x129c51, 0x0) 8m16.239948224s ago: executing program 3 (id=36): r0 = gettid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) timer_create(0x0, 0x0, &(0x7f00000001c0)=0x0) timer_getoverrun(r2) tkill(r0, 0x28) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2, 0x9}}, './file0\x00'}) write$binfmt_script(r3, &(0x7f0000000240)={'#! ', './file0', [{0x20, '$'}, {0x20, 'H}*\xc6@$R'}, {0x20, 'syzkaller\x00'}, {}, {0x20, '$'}, {0x20, 'syzkaller\x00'}], 0xa, "f43b54a640de"}, 0x34) prlimit64(r0, 0xd, &(0x7f0000000000)={0xfffffffffffffffb, 0x7}, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x801f6, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28dfd66a, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0xe, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x8000) sendmsg$NFT_BATCH(r4, 0x0, 0x14091) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x62, 0x62, 0x4, [@const={0x7}, @datasec={0x7, 0x3, 0x0, 0xf, 0x2, [{0x3, 0x6, 0x4}, {0x2, 0x1000, 0x4}, {0x5, 0x5d, 0x8}], "baf7"}, @enum64={0x3, 0x2, 0x0, 0x13, 0x1, 0x1, [{0x6, 0x8, 0xd}, {0xc, 0x30be837d, 0xf}]}]}, {0x0, [0x30, 0x2e]}}, &(0x7f0000000680)=""/75, 0x80, 0x4b, 0x0, 0x1}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0xe093, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x11, 0x2, @broadcast, @local}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket(0x10, 0x2, 0x0) write(r8, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r11, @ANYBLOB="74b783cfacd2e037ccf7a0a8f4b52cdea26e2ca9d9e7898d306780d6020000000000000076a4263948f3529da7d630aa2acfc756c8c0c581e5417ec344831d3f77d03e665bf31856acbd4f00c3f56932249bfbda59f20bae14358a850af88316844b568b3d3ca1d74260311da858032ac5149290bad06403f98d9f8b65"], 0x3c}}, 0x8000) 8m16.008738027s ago: executing program 3 (id=38): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x11, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 8m16.008226067s ago: executing program 32 (id=38): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x11, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 3.855782713s ago: executing program 4 (id=6586): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) writev(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xffe) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 3.799377544s ago: executing program 5 (id=6588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x27c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8864}, @NFTA_RULE_COMPAT_FLAGS={0x4, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14}}, 0x2a4}}, 0x4048010) 3.775348304s ago: executing program 2 (id=6589): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 3.774927745s ago: executing program 4 (id=6590): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x36) write$RDMA_USER_CM_CMD_SET_OPTION(r3, 0x0, 0x0) 3.753072015s ago: executing program 5 (id=6591): socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x4410, 0x0, 0x0, 0x3, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 3.720023315s ago: executing program 4 (id=6592): r0 = bpf$PROG_LOAD(0x5, 0x0, 0xfe72) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000002540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_tgsigqueueinfo(0x0, 0x0, 0x2f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000562010c00000000009500000000200000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="090000000700000000800000"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'tunl0\x00', 0x0}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r7, 0x5608) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x2, 0x4, 0x6, 0x28, 0xffffffffffffffff, 0x3, '\x00', 0x0, r5, 0x1, 0x4, 0x5, 0x9}, 0x50) 3.579535077s ago: executing program 5 (id=6596): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000df0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x36) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000700)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) 3.439603439s ago: executing program 2 (id=6597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004000) sendmsg$NFT_BATCH(r2, 0x0, 0x0) 3.200626853s ago: executing program 5 (id=6598): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="02000000040000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x44209400, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) 3.200207523s ago: executing program 2 (id=6599): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r2, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 3.112965734s ago: executing program 2 (id=6600): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES64=0x0], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1000000000000071}, 0x0) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f00000002c0)=0x9, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000b40)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x2, 0x3a, 'T\f||\xbd2\xd7\xdb*\x96\x94g/M\x9f\xea\xae\xf3\x16\b\x9a\x84\xb7$;\xd9\x8d\xdb8\xea\xdbs&\xb5W\xc6\a\xaeOA\xffm\x8dA[\xc4j\xf3\xa8;\xbaT)k\xca.\xc8C\v\xf6\xd5\xe4\xce\xdc\xa4\f\x15;\x05\xd0\xdcD}\xdf{\xd8\xfdU\xdb\x978P\xe3a[\xb7\x04\x91\xd0\fG\xacs\xc2\xe2}\xbeb\xe1\x1a\xe2\x97\xb85\xf81\xa7\x15\x06\xa4l\xa6\x17\x8f\\\xa2u1\xd0=P\x8c\x91\x00\xa0\xd7p\f\xff\xe0\x88 \xa5\xf1\x131\rK\xdf\xb6\xa9|\x92Kvt\xb9\xe8\xa0d\xb7\xb9\xf5\x92I_\xef\x99\xd4\x95*\xfeD\x00>\ns-k+9\xd4\xf1E\xe36Y4\xf4\xe0\xfd\xe5=\xc4@Z\xe7\x93\xbc\xef^\xa2\xebb\x94\x94l\x0f\xc0\xb8\xf1\a\x1b\x93\xb1\xc7\x18\x92>*o\x00c\x15x\xc08\xe2\x9c.\xfe\xf4\xdb\xb0\x16\xd0\xba\xf1\xab\a\xdd\x88@\xfdQ\xc6\xa77 \x8f}^Q\xfeY\v\xf7\xcfY\b}\xd1\xf9?U\xd9\xaaj\xdb\b\xe1\xfc\x18\xd9\x95+y\ax\x1c\x949{\x86\xd2\x16\xedod\xc4\x1b\x03i\xa9*H\xc3\xd9(\xb8-\xc4\xe8\x9b\xda\x9e\x8a\xe6\xa7\x00', 0x3a, '', 0x3a, './bus/file0', 0x3a, [0x50, 0x43, 0x50, 0x4f]}, 0x15b) connect$inet6(r6, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000880)='./bus/file0\x00', 0x40, 0x41) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r8, &(0x7f0000004200)='t', 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r8, 0x402c5342, &(0x7f0000000780)={0x3, 0x8, 0xaaf, {0x5, 0x7ff}, 0x6, 0x400}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000000c0)={[{@oldalloc}, {@stripe={'stripe', 0x3d, 0x6}}, {@noblock_validity}, {@grpjquota}, {@noinit_itable}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) 2.556152313s ago: executing program 4 (id=6601): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) writev(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xffe) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 1.485528778s ago: executing program 4 (id=6605): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES64=0x0], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}, 0x0) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f00000002c0)=0x9, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4000000}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000b40)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x2, 0x3a, 'T\f||\xbd2\xd7\xdb*\x96\x94g/M\x9f\xea\xae\xf3\x16\b\x9a\x84\xb7$;\xd9\x8d\xdb8\xea\xdbs&\xb5W\xc6\a\xaeOA\xffm\x8dA[\xc4j\xf3\xa8;\xbaT)k\xca.\xc8C\v\xf6\xd5\xe4\xce\xdc\xa4\f\x15;\x05\xd0\xdcD}\xdf{\xd8\xfdU\xdb\x978P\xe3a[\xb7\x04\x91\xd0\fG\xacs\xc2\xe2}\xbeb\xe1\x1a\xe2\x97\xb85\xf81\xa7\x15\x06\xa4l\xa6\x17\x8f\\\xa2u1\xd0=P\x8c\x91\x00\xa0\xd7p\f\xff\xe0\x88 \xa5\xf1\x131\rK\xdf\xb6\xa9|\x92Kvt\xb9\xe8\xa0d\xb7\xb9\xf5\x92I_\xef\x99\xd4\x95*\xfeD\x00>\ns-k+9\xd4\xf1E\xe36Y4\xf4\xe0\xfd\xe5=\xc4@Z\xe7\x93\xbc\xef^\xa2\xebb\x94\x94l\x0f\xc0\xb8\xf1\a\x1b\x93\xb1\xc7\x18\x92>*o\x00c\x15x\xc08\xe2\x9c.\xfe\xf4\xdb\xb0\x16\xd0\xba\xf1\xab\a\xdd\x88@\xfdQ\xc6\xa77 \x8f}^Q\xfeY\v\xf7\xcfY\b}\xd1\xf9?U\xd9\xaaj\xdb\b\xe1\xfc\x18\xd9\x95+y\ax\x1c\x949{\x86\xd2\x16\xedod\xc4\x1b\x03i\xa9*H\xc3\xd9(\xb8-\xc4\xe8\x9b\xda\x9e\x8a\xe6\xa7\x00', 0x3a, '', 0x3a, './bus/file0', 0x3a, [0x50, 0x43, 0x50, 0x4f]}, 0x15b) connect$inet6(r6, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000880)='./bus/file0\x00', 0x40, 0x41) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r8, 0x402c5342, &(0x7f0000000780)={0x3, 0x8, 0xaaf, {0x5, 0x7ff}, 0x6, 0x400}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000000c0)={[{@oldalloc}, {@stripe={'stripe', 0x3d, 0x6}}, {@noblock_validity}, {@grpjquota}, {@noinit_itable}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 984.830106ms ago: executing program 0 (id=6607): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r0}, 0x38) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_io_uring_setup(0x131, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x2, 0xffffbffd}, &(0x7f0000000140)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r3, 0x1e76, 0xf728, 0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01030000000000000000320000000c009900000000000000000005001801"], 0x40}}, 0x0) 968.989806ms ago: executing program 0 (id=6608): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000df0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x36) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000700)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) 908.702817ms ago: executing program 0 (id=6609): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 828.933768ms ago: executing program 1 (id=6611): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r1, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 718.61933ms ago: executing program 1 (id=6612): socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x4410, 0x0, 0x0, 0x3, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 717.07355ms ago: executing program 2 (id=6613): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 561.482822ms ago: executing program 1 (id=6614): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x52, &(0x7f0000000200)={@local, @random="e38f6cc55385", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x6, "5c164408"}]}}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(r2, 0xf, 0x0, &(0x7f0000000180)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e0000003e000511d25a80698c6394090224fc602f6e354008000180", 0x1c}], 0x1, 0x0, 0x0, 0x39c}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000300), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="d50900000000245a3e437b000000007e00a67a6c00403519204701f2598377005a4be800000800010100001791efb5f29bb966dcab15990b8faf672e885227b6bb8a722a27ec504b1f043f5711761fd96dfbb6a61b4a377d5478062153381867a4c75f6a898762", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) 517.249553ms ago: executing program 0 (id=6615): r0 = bpf$PROG_LOAD(0x5, 0x0, 0xfe72) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000002540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_tgsigqueueinfo(0x0, 0x0, 0x2f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000562010c00000000009500000000200000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="090000000700000000800000"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'tunl0\x00', 0x0}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r7, 0x5608) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x2, 0x4, 0x6, 0x28, 0xffffffffffffffff, 0x3, '\x00', 0x0, r5, 0x1, 0x4, 0x5, 0x9}, 0x50) 104.004619ms ago: executing program 1 (id=6616): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xca, &(0x7f0000000800)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x25, 0x4, 0x0, 0x0, 0xbc, 0x300, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0x62, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x29}]}, @timestamp_addr={0x44, 0x2c, 0x29, 0x1, 0x7, [{@loopback}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4}, {@rand_addr=0x64010100}, {@broadcast, 0xa643}, {@broadcast, 0xf}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x17, 0x6e, [@empty, @rand_addr=0x64010100, @empty, @empty, @multicast1]}, @end, @timestamp={0x44, 0xc, 0x7b, 0x0, 0xb, [0xffff, 0x0]}, @end, @lsrr={0x83, 0x1b, 0xcf, [@dev={0xac, 0x14, 0x14, 0x33}, @loopback, @private=0xa010102, @local, @remote, @empty]}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x10, @local, {[@lsrr={0x83, 0xb, 0xfd, [@dev, @empty]}, @end]}}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x8001000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x2b8, 0xf8, 0x11, 0x148, 0xf8, 0x0, 0x220, 0x2a8, 0x2a8, 0x220, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'geneve0\x00'}, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@ttl={{0x28}}, @common=@icmp={{0x28}, {0x0, "e3ec"}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000200)={@loopback, @initdev, 0x0}, &(0x7f0000000380)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl2\x00', r3, 0x1573a78f90c9ce5e, 0x6, 0x2, 0x5, 0x4, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x80, 0x0, 0x10000002}}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x100000) 99.356119ms ago: executing program 5 (id=6617): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000"], 0x30}}], 0x1, 0x4008804) 93.797809ms ago: executing program 2 (id=6618): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x40200) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x4410, 0x0, 0x0, 0x3, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000140)={{0xa, 0x1}, {0x0, 0x9}, 0x3, 0x6, 0x7}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x900, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x4c}}, 0x0) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0x0, 0x10001}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x20, 0x27, &(0x7f0000000900)=@raw=[@jmp={0x5, 0x1, 0xb, 0x0, 0x8, 0xfffffffffffffffc, 0x1}, @call={0x85, 0x0, 0x0, 0xb1}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0x9, 0x1, 0x0, r2}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x28}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_fd={0x18, 0xb, 0x1, 0x0, r3}], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x68, '\x00', r7, @netfilter=0x2d, r3, 0x8, &(0x7f0000000240)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x10, 0x6, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000300)=[r3, r2, r8, r3], &(0x7f0000000380)=[{0x0, 0x3, 0x3, 0xc}, {0x1, 0x5, 0x5, 0x6}], 0x10, 0x9}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x7}, 0x18) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 72.246039ms ago: executing program 5 (id=6619): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) writev(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xffe) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 49.0432ms ago: executing program 0 (id=6620): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000df0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x36) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000700)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) 48.25484ms ago: executing program 1 (id=6621): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000"], &(0x7f00000014c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r2, 0x0, 0x2008}, 0x18) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x70bd26, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}, 0x1, 0x7}, 0x0) 41.24735ms ago: executing program 4 (id=6622): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000018c0)={0x28, 0x0, 0xacf5e67dd0b583a1, 0x0, 0x25dfdbfd, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x8000}}}}}, 0x28}}, 0x24040010) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r6 = syz_open_pts(r5, 0x900) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000340)={0x7, 0x8001, 0x93, 0x81, 0x17, "7d842c024ce98365396b231d10675e7e275bf0"}) r7 = dup3(r6, r5, 0x80000) read(r7, &(0x7f00000000c0)=""/226, 0xe2) 574.811µs ago: executing program 0 (id=6623): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) 0s ago: executing program 1 (id=6624): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000540)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x6}, 0x18) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 0 as target [ 501.002828][T22081] veth0_vlan: entered promiscuous mode [ 501.019112][T22081] veth1_vlan: entered promiscuous mode [ 501.034460][T22081] veth0_macvtap: entered promiscuous mode [ 501.048987][T22081] veth1_macvtap: entered promiscuous mode [ 501.128107][T22081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.139274][T22081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.166149][T22081] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.175012][T22081] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.184016][T22081] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.193303][T22081] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.211437][ T3368] hid-generic 0000:3000000:0000.010C: unknown main item tag 0x0 [ 501.219492][ T3368] hid-generic 0000:3000000:0000.010C: unknown main item tag 0x0 [ 501.227544][ T3368] hid-generic 0000:3000000:0000.010C: unknown main item tag 0x0 [ 501.235296][ T3368] hid-generic 0000:3000000:0000.010C: unknown main item tag 0x0 [ 501.243073][ T3368] hid-generic 0000:3000000:0000.010C: unknown main item tag 0x0 [ 501.250795][ T3368] hid-generic 0000:3000000:0000.010C: unknown main item tag 0x0 [ 501.258487][ T3368] hid-generic 0000:3000000:0000.010C: unknown main item tag 0x0 [ 501.266307][ T3368] hid-generic 0000:3000000:0000.010C: unknown main item tag 0x0 [ 501.268437][T22220] xt_hashlimit: max too large, truncated to 1048576 [ 501.273989][ T3368] hid-generic 0000:3000000:0000.010C: unknown main item tag 0x0 [ 501.288424][ T3368] hid-generic 0000:3000000:0000.010C: unknown main item tag 0x0 [ 501.296333][ T3368] hid-generic 0000:3000000:0000.010C: unknown main item tag 0x0 [ 501.304021][ T3368] hid-generic 0000:3000000:0000.010C: unknown main item tag 0x0 [ 501.311818][ T3368] hid-generic 0000:3000000:0000.010C: unknown main item tag 0x0 [ 501.319645][ T3368] hid-generic 0000:3000000:0000.010C: unknown main item tag 0x0 [ 501.327522][ T3368] hid-generic 0000:3000000:0000.010C: unknown main item tag 0x0 [ 501.335246][ T3368] hid-generic 0000:3000000:0000.010C: unknown main item tag 0x0 [ 501.343051][ T3368] hid-generic 0000:3000000:0000.010C: unknown main item tag 0x0 [ 501.350807][ T3368] hid-generic 0000:3000000:0000.010C: unknown main item tag 0x0 [ 501.358572][ T3368] hid-generic 0000:3000000:0000.010C: unknown main item tag 0x0 [ 501.366326][ T3368] hid-generic 0000:3000000:0000.010C: unknown main item tag 0x0 [ 501.374143][ T3368] hid-generic 0000:3000000:0000.010C: unknown main item tag 0x0 [ 501.381877][ T3368] hid-generic 0000:3000000:0000.010C: unknown main item tag 0x0 [ 501.389744][ T3368] hid-generic 0000:3000000:0000.010C: unknown main item tag 0x0 [ 501.397480][ T3368] hid-generic 0000:3000000:0000.010C: unknown main item tag 0x0 [ 501.405217][ T3368] hid-generic 0000:3000000:0000.010C: unknown main item tag 0x0 [ 501.413162][ T3368] hid-generic 0000:3000000:0000.010C: unknown main item tag 0x0 [ 501.420920][ T3368] hid-generic 0000:3000000:0000.010C: unknown main item tag 0x0 [ 501.428945][ T3368] hid-generic 0000:3000000:0000.010C: unknown main item tag 0x0 [ 501.436648][ T3368] hid-generic 0000:3000000:0000.010C: unknown main item tag 0x0 [ 501.444331][ T3368] hid-generic 0000:3000000:0000.010C: unknown main item tag 0x0 [ 501.452308][ T3368] hid-generic 0000:3000000:0000.010C: unknown main item tag 0x0 [ 501.460223][ T3368] hid-generic 0000:3000000:0000.010C: unknown main item tag 0x0 [ 501.473180][ T3368] hid-generic 0000:3000000:0000.010C: hidraw0: HID v0.00 Device [sy] on syz0 [ 501.537042][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 501.537062][ T29] audit: type=1326 audit(1752384244.379:14753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22225 comm="syz.1.5991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa75a8e929 code=0x7ffc0000 [ 501.593719][ T29] audit: type=1326 audit(1752384244.379:14754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22225 comm="syz.1.5991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa75a8e929 code=0x7ffc0000 [ 501.617526][ T29] audit: type=1326 audit(1752384244.379:14755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22225 comm="syz.1.5991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7ffa75a8e929 code=0x7ffc0000 [ 501.641210][ T29] audit: type=1326 audit(1752384244.379:14756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22225 comm="syz.1.5991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa75a8e929 code=0x7ffc0000 [ 501.664994][ T29] audit: type=1326 audit(1752384244.379:14757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22225 comm="syz.1.5991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa75a8e929 code=0x7ffc0000 [ 501.688793][ T29] audit: type=1326 audit(1752384244.379:14758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22225 comm="syz.1.5991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa75a8e929 code=0x7ffc0000 [ 501.712926][ T29] audit: type=1326 audit(1752384244.379:14759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22225 comm="syz.1.5991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa75a8e929 code=0x7ffc0000 [ 501.736756][ T29] audit: type=1326 audit(1752384244.379:14760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22225 comm="syz.1.5991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa75a8e929 code=0x7ffc0000 [ 501.749573][T22235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5950'. [ 501.760598][ T29] audit: type=1326 audit(1752384244.379:14761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22225 comm="syz.1.5991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa75a8e929 code=0x7ffc0000 [ 501.794674][ T29] audit: type=1326 audit(1752384244.379:14762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22225 comm="syz.1.5991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa75a8e929 code=0x7ffc0000 [ 502.032089][T22256] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5997'. [ 502.070030][T22238] lo speed is unknown, defaulting to 1000 [ 502.080052][T22256] hsr_slave_0: left promiscuous mode [ 502.101207][T22256] hsr_slave_1: left promiscuous mode [ 502.213213][T22263] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5999'. [ 502.284034][T22265] Cannot find add_set index 0 as target [ 502.562486][T22269] xt_hashlimit: max too large, truncated to 1048576 [ 502.758844][T22283] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6009'. [ 502.861036][T12746] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 502.985337][T22291] netlink: 'syz.2.6012': attribute type 1 has an invalid length. [ 502.993190][T22291] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6012'. [ 503.337477][ T31] bond0 (unregistering): Released all slaves [ 503.421389][ T31] tipc: Left network mode [ 503.579544][T22238] chnl_net:caif_netlink_parms(): no params data found [ 503.631549][T22316] Cannot find add_set index 0 as target [ 503.638007][T22238] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.645483][T22238] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.656224][T22238] bridge_slave_0: entered allmulticast mode [ 503.663301][T22238] bridge_slave_0: entered promiscuous mode [ 503.671785][T22238] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.678984][T22238] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.689400][T22238] bridge_slave_1: entered allmulticast mode [ 503.696702][T22238] bridge_slave_1: entered promiscuous mode [ 503.726430][T22319] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6021'. [ 503.749507][T22238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.763135][T22238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.784689][T22238] team0: Port device team_slave_0 added [ 503.791660][T22238] team0: Port device team_slave_1 added [ 503.812970][T22238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.820086][T22238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.846527][T22238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.859509][T22238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.866584][T22238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.880534][ T3368] hid-generic 0000:3000000:0000.010D: unknown main item tag 0x4 [ 503.892718][T22238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.900358][ T3368] hid-generic 0000:3000000:0000.010D: unknown main item tag 0x2 [ 503.900390][ T3368] hid-generic 0000:3000000:0000.010D: unknown main item tag 0x0 [ 503.926648][ T3368] hid-generic 0000:3000000:0000.010D: unknown main item tag 0x0 [ 503.933865][T22322] xt_hashlimit: max too large, truncated to 1048576 [ 503.934324][ T3368] hid-generic 0000:3000000:0000.010D: unknown main item tag 0x0 [ 503.948958][ T3368] hid-generic 0000:3000000:0000.010D: unknown main item tag 0x0 [ 503.956699][ T3368] hid-generic 0000:3000000:0000.010D: unknown main item tag 0x0 [ 503.958835][T22333] xt_hashlimit: max too large, truncated to 1048576 [ 503.964359][ T3368] hid-generic 0000:3000000:0000.010D: unknown main item tag 0x0 [ 503.979068][ T3368] hid-generic 0000:3000000:0000.010D: unknown main item tag 0x0 [ 503.986777][ T3368] hid-generic 0000:3000000:0000.010D: unknown main item tag 0x0 [ 503.994553][ T3368] hid-generic 0000:3000000:0000.010D: unknown main item tag 0x0 [ 504.002239][ T3368] hid-generic 0000:3000000:0000.010D: unknown main item tag 0x0 [ 504.009990][ T3368] hid-generic 0000:3000000:0000.010D: unknown main item tag 0x0 [ 504.017725][ T3368] hid-generic 0000:3000000:0000.010D: unknown main item tag 0x0 [ 504.025426][ T3368] hid-generic 0000:3000000:0000.010D: unknown main item tag 0x0 [ 504.033145][ T3368] hid-generic 0000:3000000:0000.010D: unknown main item tag 0x0 [ 504.040895][ T3368] hid-generic 0000:3000000:0000.010D: unknown main item tag 0x0 [ 504.048724][ T3368] hid-generic 0000:3000000:0000.010D: unknown main item tag 0x0 [ 504.056566][ T3368] hid-generic 0000:3000000:0000.010D: unknown main item tag 0x0 [ 504.064236][ T3368] hid-generic 0000:3000000:0000.010D: unknown main item tag 0x0 [ 504.071947][ T3368] hid-generic 0000:3000000:0000.010D: unknown main item tag 0x0 [ 504.079639][ T3368] hid-generic 0000:3000000:0000.010D: unknown main item tag 0x0 [ 504.087336][ T3368] hid-generic 0000:3000000:0000.010D: unknown main item tag 0x0 [ 504.095164][ T3368] hid-generic 0000:3000000:0000.010D: unknown main item tag 0x0 [ 504.102853][ T3368] hid-generic 0000:3000000:0000.010D: unknown main item tag 0x0 [ 504.110542][ T3368] hid-generic 0000:3000000:0000.010D: unknown main item tag 0x0 [ 504.118300][ T3368] hid-generic 0000:3000000:0000.010D: unknown main item tag 0x0 [ 504.126117][ T3368] hid-generic 0000:3000000:0000.010D: unknown main item tag 0x0 [ 504.133824][ T3368] hid-generic 0000:3000000:0000.010D: unknown main item tag 0x0 [ 504.142182][ T3368] hid-generic 0000:3000000:0000.010D: hidraw0: HID v0.00 Device [sy] on syz0 [ 504.160315][T22238] hsr_slave_0: entered promiscuous mode [ 504.167460][T22238] hsr_slave_1: entered promiscuous mode [ 504.173585][T22238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 504.181440][T22238] Cannot create hsr debugfs directory [ 504.443221][T22354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6034'. [ 504.475010][T22238] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 504.484318][T22238] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 504.494562][T22238] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 504.504406][T22238] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 504.642033][T22238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.657980][T22238] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.671935][T16759] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.679110][T16759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.707361][T22238] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 504.717977][T22238] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 505.060254][T22238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.086330][T16759] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.093468][T16759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.126413][T22397] __nla_validate_parse: 2 callbacks suppressed [ 505.126434][T22397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6045'. [ 505.212141][T22407] netlink: 'syz.2.6048': attribute type 1 has an invalid length. [ 505.220390][T22407] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6048'. [ 505.309785][T22238] veth0_vlan: entered promiscuous mode [ 505.318788][T22238] veth1_vlan: entered promiscuous mode [ 505.336042][T22238] veth0_macvtap: entered promiscuous mode [ 505.343662][T22238] veth1_macvtap: entered promiscuous mode [ 505.355600][T22238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.371468][T22238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.383717][T22238] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.392622][T22238] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.401384][T22238] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.410197][T22238] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.477837][T22428] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6053'. [ 505.583615][T22440] xt_hashlimit: max too large, truncated to 1048576 [ 505.695451][T22443] lo speed is unknown, defaulting to 1000 [ 506.152797][T16790] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.236882][T22456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6059'. [ 506.362237][T22461] netlink: 100 bytes leftover after parsing attributes in process `syz.5.6061'. [ 506.512891][T16790] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.596716][T22467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6062'. [ 506.909806][T16790] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.099517][T22473] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6064'. [ 507.110102][T22442] lo speed is unknown, defaulting to 1000 [ 507.133988][T16790] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.185655][T22473] hsr_slave_0: left promiscuous mode [ 507.216389][T22473] hsr_slave_1: left promiscuous mode [ 507.700622][T22488] xt_hashlimit: max too large, truncated to 1048576 [ 507.826917][T22491] xt_hashlimit: max too large, truncated to 1048576 [ 507.828040][ T3414] hid-generic 0000:3000000:0000.010E: unknown main item tag 0x4 [ 507.841504][ T3414] hid-generic 0000:3000000:0000.010E: unknown main item tag 0x2 [ 507.849515][ T3414] hid-generic 0000:3000000:0000.010E: unknown main item tag 0x0 [ 507.857256][ T3414] hid-generic 0000:3000000:0000.010E: unknown main item tag 0x0 [ 507.865070][ T3414] hid-generic 0000:3000000:0000.010E: unknown main item tag 0x0 [ 507.872857][ T3414] hid-generic 0000:3000000:0000.010E: unknown main item tag 0x0 [ 507.880686][ T3414] hid-generic 0000:3000000:0000.010E: unknown main item tag 0x0 [ 507.888469][ T3414] hid-generic 0000:3000000:0000.010E: unknown main item tag 0x0 [ 507.896274][ T3414] hid-generic 0000:3000000:0000.010E: unknown main item tag 0x0 [ 507.904058][ T3414] hid-generic 0000:3000000:0000.010E: unknown main item tag 0x0 [ 507.911783][ T3414] hid-generic 0000:3000000:0000.010E: unknown main item tag 0x0 [ 507.919489][ T3414] hid-generic 0000:3000000:0000.010E: unknown main item tag 0x0 [ 507.927180][ T3414] hid-generic 0000:3000000:0000.010E: unknown main item tag 0x0 [ 507.934882][ T3414] hid-generic 0000:3000000:0000.010E: unknown main item tag 0x0 [ 507.942555][ T3414] hid-generic 0000:3000000:0000.010E: unknown main item tag 0x0 [ 507.950269][ T3414] hid-generic 0000:3000000:0000.010E: unknown main item tag 0x0 [ 507.958106][ T3414] hid-generic 0000:3000000:0000.010E: unknown main item tag 0x0 [ 507.965964][ T3414] hid-generic 0000:3000000:0000.010E: unknown main item tag 0x0 [ 507.973641][ T3414] hid-generic 0000:3000000:0000.010E: unknown main item tag 0x0 [ 507.981440][ T3414] hid-generic 0000:3000000:0000.010E: unknown main item tag 0x0 [ 507.989129][ T3414] hid-generic 0000:3000000:0000.010E: unknown main item tag 0x0 [ 507.999613][ T3414] hid-generic 0000:3000000:0000.010E: hidraw0: HID v0.00 Device [sy] on syz0 [ 508.323434][T22494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6072'. [ 508.767321][T16790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.777763][T16790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.788193][T16790] bond0 (unregistering): Released all slaves [ 508.828833][T16790] tipc: Left network mode [ 508.881409][T22503] loop5: detected capacity change from 0 to 512 [ 508.905602][T16790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.913172][T16790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.963451][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 508.963466][ T29] audit: type=1326 audit(1752384251.769:14802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22505 comm="syz.4.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c122e929 code=0x7ffc0000 [ 508.993848][ T29] audit: type=1326 audit(1752384251.769:14803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22505 comm="syz.4.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c122e929 code=0x7ffc0000 [ 509.017874][ T29] audit: type=1326 audit(1752384251.769:14804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22505 comm="syz.4.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f46c122e929 code=0x7ffc0000 [ 509.043718][ T29] audit: type=1326 audit(1752384251.769:14805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22505 comm="syz.4.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c122e929 code=0x7ffc0000 [ 509.067721][ T29] audit: type=1326 audit(1752384251.799:14806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22507 comm="syz.2.6077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6c1de929 code=0x7ffc0000 [ 509.091938][ T29] audit: type=1326 audit(1752384251.799:14807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22507 comm="syz.2.6077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fbf6c1de929 code=0x7ffc0000 [ 509.115639][ T29] audit: type=1326 audit(1752384251.799:14808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22507 comm="syz.2.6077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6c1de929 code=0x7ffc0000 [ 509.139399][ T29] audit: type=1326 audit(1752384251.799:14809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22507 comm="syz.2.6077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6c1de929 code=0x7ffc0000 [ 509.163042][ T29] audit: type=1326 audit(1752384251.799:14810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22507 comm="syz.2.6077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf6c1de929 code=0x7ffc0000 [ 509.187296][ T29] audit: type=1326 audit(1752384251.799:14811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22507 comm="syz.2.6077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6c1de929 code=0x7ffc0000 [ 509.215737][T16790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.215858][T16790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.236152][T16790] veth1_macvtap: left promiscuous mode [ 509.242735][T22503] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 509.258252][T16790] veth1_vlan: left promiscuous mode [ 509.263728][T16790] veth0_vlan: left promiscuous mode [ 509.303389][T22503] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 509.380193][T22532] Cannot find add_set index 0 as target [ 509.388882][T22532] loop4: detected capacity change from 0 to 512 [ 509.417664][T22533] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6083'. [ 509.429195][T22532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.450167][T22532] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 509.453225][T16790] pim6reg (unregistering): left allmulticast mode [ 509.534756][T16790] team0 (unregistering): Port device team_slave_1 removed [ 509.548909][T16790] team0 (unregistering): Port device team_slave_0 removed [ 509.557228][T22081] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.599106][T22442] chnl_net:caif_netlink_parms(): no params data found [ 509.617616][T22508] bridge0: entered promiscuous mode [ 509.623150][T22508] bridge0: entered allmulticast mode [ 509.648413][T22533] hsr_slave_0: left promiscuous mode [ 509.660906][T22533] hsr_slave_1: left promiscuous mode [ 509.697467][T22537] xt_hashlimit: max too large, truncated to 1048576 [ 509.752794][ T3368] hid-generic 0000:3000000:0000.010F: unknown main item tag 0x4 [ 509.760740][ T3368] hid-generic 0000:3000000:0000.010F: unknown main item tag 0x2 [ 509.768549][ T3368] hid-generic 0000:3000000:0000.010F: unknown main item tag 0x0 [ 509.776366][ T3368] hid-generic 0000:3000000:0000.010F: unknown main item tag 0x0 [ 509.784116][ T3368] hid-generic 0000:3000000:0000.010F: unknown main item tag 0x0 [ 509.791924][ T3368] hid-generic 0000:3000000:0000.010F: unknown main item tag 0x0 [ 509.799628][ T3368] hid-generic 0000:3000000:0000.010F: unknown main item tag 0x0 [ 509.807406][ T3368] hid-generic 0000:3000000:0000.010F: unknown main item tag 0x0 [ 509.811259][T22543] xt_hashlimit: max too large, truncated to 1048576 [ 509.815107][ T3368] hid-generic 0000:3000000:0000.010F: unknown main item tag 0x0 [ 509.829565][ T3368] hid-generic 0000:3000000:0000.010F: unknown main item tag 0x0 [ 509.837360][ T3368] hid-generic 0000:3000000:0000.010F: unknown main item tag 0x0 [ 509.837384][ T3368] hid-generic 0000:3000000:0000.010F: unknown main item tag 0x0 [ 509.837410][ T3368] hid-generic 0000:3000000:0000.010F: unknown main item tag 0x0 [ 509.860562][ T3368] hid-generic 0000:3000000:0000.010F: unknown main item tag 0x0 [ 509.860592][ T3368] hid-generic 0000:3000000:0000.010F: unknown main item tag 0x0 [ 509.875963][ T3368] hid-generic 0000:3000000:0000.010F: unknown main item tag 0x0 [ 509.883634][ T3368] hid-generic 0000:3000000:0000.010F: unknown main item tag 0x0 [ 509.891384][ T3368] hid-generic 0000:3000000:0000.010F: unknown main item tag 0x0 [ 509.899107][ T3368] hid-generic 0000:3000000:0000.010F: unknown main item tag 0x0 [ 509.906914][ T3368] hid-generic 0000:3000000:0000.010F: unknown main item tag 0x0 [ 509.914655][ T3368] hid-generic 0000:3000000:0000.010F: unknown main item tag 0x0 [ 509.945993][T22442] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.953274][T22442] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.979121][T22442] bridge_slave_0: entered allmulticast mode [ 509.992333][ T3368] hid-generic 0000:3000000:0000.010F: hidraw0: HID v0.00 Device [sy] on syz0 [ 509.994069][T22442] bridge_slave_0: entered promiscuous mode [ 510.029018][T22442] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.036205][T22442] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.062019][T22442] bridge_slave_1: entered allmulticast mode [ 510.070342][T22442] bridge_slave_1: entered promiscuous mode [ 510.085415][T22555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6091'. [ 510.106728][T22442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.121399][T22557] netlink: 'syz.2.6092': attribute type 1 has an invalid length. [ 510.136458][T22442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.167530][T22559] Cannot find add_set index 0 as target [ 510.183837][T22442] team0: Port device team_slave_0 added [ 510.193901][T22442] team0: Port device team_slave_1 added [ 510.207369][T22559] loop4: detected capacity change from 0 to 512 [ 510.232848][T22442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.239941][T22442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.266093][T22442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.279965][T22442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.287018][T22442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.313109][T22442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.332160][T22559] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.347121][T22559] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 510.358003][T22569] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.365304][T22569] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.389474][T22081] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.404952][T22569] bridge0: entered allmulticast mode [ 510.419112][T22571] bridge_slave_1: left allmulticast mode [ 510.424910][T22571] bridge_slave_1: left promiscuous mode [ 510.430655][T22571] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.446733][T22571] bridge_slave_0: left allmulticast mode [ 510.452590][T22571] bridge_slave_0: left promiscuous mode [ 510.459344][T22571] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.508433][T22574] __nla_validate_parse: 1 callbacks suppressed [ 510.508452][T22574] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6098'. [ 510.556786][T22574] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.595612][T22442] hsr_slave_0: entered promiscuous mode [ 510.602007][T22442] hsr_slave_1: entered promiscuous mode [ 510.729264][T22590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6103'. [ 510.977834][T22442] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 510.990922][T22442] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 511.008736][T22442] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 511.030932][T22442] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 511.108981][T22442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.126928][T22442] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.140165][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.147312][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.161147][T22613] xt_hashlimit: max too large, truncated to 1048576 [ 511.172668][T22442] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 511.183187][T22442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 511.196930][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.204042][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.221356][T22615] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6110'. [ 511.282385][T22442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.283547][T22624] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6111'. [ 511.317098][T22624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6111'. [ 511.386437][T22634] netlink: 'syz.4.6113': attribute type 1 has an invalid length. [ 511.394333][T22634] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6113'. [ 511.395296][T22636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6114'. [ 511.484689][T22642] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6115'. [ 511.488889][T22442] veth0_vlan: entered promiscuous mode [ 511.509285][T22442] veth1_vlan: entered promiscuous mode [ 511.525797][T22644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6116'. [ 511.548346][T22442] veth0_macvtap: entered promiscuous mode [ 511.559167][T22644] bridge0: port 3(batadv1) entered blocking state [ 511.565769][T22644] bridge0: port 3(batadv1) entered disabled state [ 511.574567][T22644] batadv1: entered allmulticast mode [ 511.583156][T22644] batadv1: entered promiscuous mode [ 511.593938][T22442] veth1_macvtap: entered promiscuous mode [ 511.607471][T22442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.617229][T22442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.628177][T22650] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 511.642300][T22442] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.651184][T22442] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.660133][T22442] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.668968][T22442] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.727791][T22657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6121'. [ 511.763570][T22661] xt_hashlimit: max too large, truncated to 1048576 [ 511.771600][ T3507] hid-generic 0000:3000000:0000.0110: unknown main item tag 0x4 [ 511.779515][ T3507] hid-generic 0000:3000000:0000.0110: unknown main item tag 0x2 [ 511.787427][ T3507] hid-generic 0000:3000000:0000.0110: unknown main item tag 0x0 [ 511.795159][ T3507] hid-generic 0000:3000000:0000.0110: unknown main item tag 0x0 [ 511.803222][ T3507] hid-generic 0000:3000000:0000.0110: unknown main item tag 0x0 [ 511.811088][ T3507] hid-generic 0000:3000000:0000.0110: unknown main item tag 0x0 [ 511.819042][ T3507] hid-generic 0000:3000000:0000.0110: unknown main item tag 0x0 [ 511.826784][ T3507] hid-generic 0000:3000000:0000.0110: unknown main item tag 0x0 [ 511.834511][ T3507] hid-generic 0000:3000000:0000.0110: unknown main item tag 0x0 [ 511.842217][ T3507] hid-generic 0000:3000000:0000.0110: unknown main item tag 0x0 [ 511.850098][ T3507] hid-generic 0000:3000000:0000.0110: unknown main item tag 0x0 [ 511.857950][ T3507] hid-generic 0000:3000000:0000.0110: unknown main item tag 0x0 [ 511.865753][ T3507] hid-generic 0000:3000000:0000.0110: unknown main item tag 0x0 [ 511.873449][ T3507] hid-generic 0000:3000000:0000.0110: unknown main item tag 0x0 [ 511.881168][ T3507] hid-generic 0000:3000000:0000.0110: unknown main item tag 0x0 [ 511.888884][ T3507] hid-generic 0000:3000000:0000.0110: unknown main item tag 0x0 [ 511.896613][ T3507] hid-generic 0000:3000000:0000.0110: unknown main item tag 0x0 [ 511.904360][ T3507] hid-generic 0000:3000000:0000.0110: unknown main item tag 0x0 [ 511.912218][ T3507] hid-generic 0000:3000000:0000.0110: unknown main item tag 0x0 [ 511.920189][ T3507] hid-generic 0000:3000000:0000.0110: unknown main item tag 0x0 [ 511.927935][ T3507] hid-generic 0000:3000000:0000.0110: unknown main item tag 0x0 [ 511.937569][ T3507] hid-generic 0000:3000000:0000.0110: hidraw0: HID v0.00 Device [sy] on syz0 [ 512.005903][T22670] netlink: 'syz.4.6126': attribute type 1 has an invalid length. [ 512.067082][ T31] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 512.076424][ T31] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 512.639708][T22238] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 512.662889][T22692] bridge0: left promiscuous mode [ 512.774297][ T3368] hid-generic 0000:3000000:0000.0111: unknown main item tag 0x4 [ 512.774337][T22709] xt_hashlimit: max too large, truncated to 1048576 [ 512.789472][ T3368] hid-generic 0000:3000000:0000.0111: unknown main item tag 0x2 [ 512.797338][ T3368] hid-generic 0000:3000000:0000.0111: unknown main item tag 0x0 [ 512.805307][ T3368] hid-generic 0000:3000000:0000.0111: unknown main item tag 0x0 [ 512.813076][ T3368] hid-generic 0000:3000000:0000.0111: unknown main item tag 0x0 [ 512.820930][ T3368] hid-generic 0000:3000000:0000.0111: unknown main item tag 0x0 [ 512.829040][ T3368] hid-generic 0000:3000000:0000.0111: unknown main item tag 0x0 [ 512.836973][ T3368] hid-generic 0000:3000000:0000.0111: unknown main item tag 0x0 [ 512.844671][ T3368] hid-generic 0000:3000000:0000.0111: unknown main item tag 0x0 [ 512.852487][ T3368] hid-generic 0000:3000000:0000.0111: unknown main item tag 0x0 [ 512.860301][ T3368] hid-generic 0000:3000000:0000.0111: unknown main item tag 0x0 [ 512.868051][ T3368] hid-generic 0000:3000000:0000.0111: unknown main item tag 0x0 [ 512.875834][ T3368] hid-generic 0000:3000000:0000.0111: unknown main item tag 0x0 [ 512.883513][ T3368] hid-generic 0000:3000000:0000.0111: unknown main item tag 0x0 [ 512.891221][ T3368] hid-generic 0000:3000000:0000.0111: unknown main item tag 0x0 [ 512.898953][ T3368] hid-generic 0000:3000000:0000.0111: unknown main item tag 0x0 [ 512.906703][ T3368] hid-generic 0000:3000000:0000.0111: unknown main item tag 0x0 [ 512.914393][ T3368] hid-generic 0000:3000000:0000.0111: unknown main item tag 0x0 [ 512.922152][ T3368] hid-generic 0000:3000000:0000.0111: unknown main item tag 0x0 [ 512.929902][ T3368] hid-generic 0000:3000000:0000.0111: unknown main item tag 0x0 [ 512.937654][ T3368] hid-generic 0000:3000000:0000.0111: unknown main item tag 0x0 [ 512.992883][ T3368] hid-generic 0000:3000000:0000.0111: hidraw0: HID v0.00 Device [sy] on syz0 [ 513.086080][T22730] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 513.096460][T22730] loop2: detected capacity change from 0 to 512 [ 513.128892][T22730] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.162374][T22730] ext4 filesystem being mounted at /597/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 513.272306][T12746] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.933438][T22772] lo speed is unknown, defaulting to 1000 [ 514.053414][T22772] chnl_net:caif_netlink_parms(): no params data found [ 514.115556][T22772] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.122676][T22772] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.130304][T22772] bridge_slave_0: entered allmulticast mode [ 514.136966][T22772] bridge_slave_0: entered promiscuous mode [ 514.146547][T22772] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.153725][T22772] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.156073][ T3368] hid-generic 0000:3000000:0000.0112: unknown main item tag 0x4 [ 514.168541][ T3368] hid-generic 0000:3000000:0000.0112: unknown main item tag 0x2 [ 514.174655][T22772] bridge_slave_1: entered allmulticast mode [ 514.176288][ T3368] hid-generic 0000:3000000:0000.0112: unknown main item tag 0x0 [ 514.185261][T22815] xt_hashlimit: max too large, truncated to 1048576 [ 514.189946][ T3368] hid-generic 0000:3000000:0000.0112: unknown main item tag 0x0 [ 514.203802][T22772] bridge_slave_1: entered promiscuous mode [ 514.204222][ T3368] hid-generic 0000:3000000:0000.0112: unknown main item tag 0x0 [ 514.217944][ T3368] hid-generic 0000:3000000:0000.0112: unknown main item tag 0x0 [ 514.225655][ T3368] hid-generic 0000:3000000:0000.0112: unknown main item tag 0x0 [ 514.234006][ T3368] hid-generic 0000:3000000:0000.0112: unknown main item tag 0x0 [ 514.241763][ T3368] hid-generic 0000:3000000:0000.0112: unknown main item tag 0x0 [ 514.249584][ T3368] hid-generic 0000:3000000:0000.0112: unknown main item tag 0x0 [ 514.256280][T22816] xt_hashlimit: max too large, truncated to 1048576 [ 514.257323][ T3368] hid-generic 0000:3000000:0000.0112: unknown main item tag 0x0 [ 514.271599][ T3368] hid-generic 0000:3000000:0000.0112: unknown main item tag 0x0 [ 514.279442][ T3368] hid-generic 0000:3000000:0000.0112: unknown main item tag 0x0 [ 514.287297][ T3368] hid-generic 0000:3000000:0000.0112: unknown main item tag 0x0 [ 514.295107][ T3368] hid-generic 0000:3000000:0000.0112: unknown main item tag 0x0 [ 514.302890][ T3368] hid-generic 0000:3000000:0000.0112: unknown main item tag 0x0 [ 514.310696][ T3368] hid-generic 0000:3000000:0000.0112: unknown main item tag 0x0 [ 514.318456][ T3368] hid-generic 0000:3000000:0000.0112: unknown main item tag 0x0 [ 514.326216][ T3368] hid-generic 0000:3000000:0000.0112: unknown main item tag 0x0 [ 514.333901][ T3368] hid-generic 0000:3000000:0000.0112: unknown main item tag 0x0 [ 514.341674][ T3368] hid-generic 0000:3000000:0000.0112: unknown main item tag 0x0 [ 514.350722][ T3368] hid-generic 0000:3000000:0000.0112: hidraw0: HID v0.00 Device [sy] on syz0 [ 514.368845][T22772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.382422][T22772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.976820][ T31] bond0 (unregistering): Released all slaves [ 514.988224][T22772] team0: Port device team_slave_0 added [ 515.002518][T22772] team0: Port device team_slave_1 added [ 515.029764][ T31] tipc: Left network mode [ 515.034819][T22772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.041907][T22772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.068039][T22772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.081955][T22772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.089040][T22772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.115063][T22772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.341685][T22772] hsr_slave_0: entered promiscuous mode [ 515.348158][T22772] hsr_slave_1: entered promiscuous mode [ 515.358004][T22772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 515.366682][T22772] Cannot create hsr debugfs directory [ 515.380431][T22873] Cannot find add_set index 0 as target [ 515.557825][T22890] __nla_validate_parse: 22 callbacks suppressed [ 515.557840][T22890] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6202'. [ 515.578031][T22896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6203'. [ 515.629231][T22902] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6206'. [ 515.701871][T22906] netlink: 100 bytes leftover after parsing attributes in process `syz.5.6208'. [ 515.734993][T22913] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6211'. [ 515.793242][T22772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 515.803930][T22918] netlink: 'syz.5.6212': attribute type 1 has an invalid length. [ 515.812285][T22918] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6212'. [ 515.834453][T22772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 515.854047][T22772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 515.866684][T22772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 515.893094][T22930] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.900361][T22930] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.908905][T22930] bridge0: entered allmulticast mode [ 515.926868][T22930] bridge_slave_1: left allmulticast mode [ 515.932651][T22930] bridge_slave_1: left promiscuous mode [ 515.938508][T22930] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.946677][T22930] bridge_slave_0: left allmulticast mode [ 515.952356][T22930] bridge_slave_0: left promiscuous mode [ 515.958279][T22930] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.041793][T22772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.055491][T22772] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.065827][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.072988][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.085106][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.092280][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.138699][T22942] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6229'. [ 516.192500][T22772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.224205][ T3414] hid-generic 0000:3000000:0000.0113: unknown main item tag 0x4 [ 516.232034][ T3414] hid-generic 0000:3000000:0000.0113: unknown main item tag 0x2 [ 516.246140][T22953] xt_hashlimit: max too large, truncated to 1048576 [ 516.260345][ T3414] hid-generic 0000:3000000:0000.0113: unknown main item tag 0x0 [ 516.268197][ T3414] hid-generic 0000:3000000:0000.0113: unknown main item tag 0x0 [ 516.275921][ T3414] hid-generic 0000:3000000:0000.0113: unknown main item tag 0x0 [ 516.283693][ T3414] hid-generic 0000:3000000:0000.0113: unknown main item tag 0x0 [ 516.290781][T22772] veth0_vlan: entered promiscuous mode [ 516.291425][ T3414] hid-generic 0000:3000000:0000.0113: unknown main item tag 0x0 [ 516.291448][ T3414] hid-generic 0000:3000000:0000.0113: unknown main item tag 0x0 [ 516.291470][ T3414] hid-generic 0000:3000000:0000.0113: unknown main item tag 0x0 [ 516.302182][T22772] veth1_vlan: entered promiscuous mode [ 516.304645][ T3414] hid-generic 0000:3000000:0000.0113: unknown main item tag 0x0 [ 516.333308][ T3414] hid-generic 0000:3000000:0000.0113: unknown main item tag 0x0 [ 516.341214][ T3414] hid-generic 0000:3000000:0000.0113: unknown main item tag 0x0 [ 516.343424][T22772] veth0_macvtap: entered promiscuous mode [ 516.349013][ T3414] hid-generic 0000:3000000:0000.0113: unknown main item tag 0x0 [ 516.362384][ T3414] hid-generic 0000:3000000:0000.0113: unknown main item tag 0x0 [ 516.370179][ T3414] hid-generic 0000:3000000:0000.0113: unknown main item tag 0x0 [ 516.374476][T22772] veth1_macvtap: entered promiscuous mode [ 516.377885][ T3414] hid-generic 0000:3000000:0000.0113: unknown main item tag 0x0 [ 516.396380][T22772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.407983][ T3414] hid-generic 0000:3000000:0000.0113: hidraw0: HID v0.00 Device [sy] on syz0 [ 516.420719][T22772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.437629][T22772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.446685][T22772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.448682][T22964] Cannot find add_set index 0 as target [ 516.455428][T22772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.455469][T22772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.482495][T22964] loop4: detected capacity change from 0 to 512 [ 516.496122][T22967] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6225'. [ 516.510581][T22964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.526713][T22964] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 516.569889][T22081] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.619899][T22975] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6159'. [ 516.660801][T22981] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.668108][T22981] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.678297][T22981] bridge0: entered allmulticast mode [ 516.688135][T22981] bridge_slave_1: left allmulticast mode [ 516.694154][T22981] bridge_slave_1: left promiscuous mode [ 516.700126][T22981] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.710514][T22981] bridge_slave_0: left allmulticast mode [ 516.716436][T22981] bridge_slave_0: left promiscuous mode [ 516.722205][T22981] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.783264][T22990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6233'. [ 516.883147][T22988] lo speed is unknown, defaulting to 1000 [ 516.981307][ T1036] hid-generic 0000:3000000:0000.0114: unknown main item tag 0x4 [ 516.989296][ T1036] hid-generic 0000:3000000:0000.0114: unknown main item tag 0x2 [ 517.183710][ T1036] hid-generic 0000:3000000:0000.0114: unknown main item tag 0x0 [ 517.191568][ T1036] hid-generic 0000:3000000:0000.0114: unknown main item tag 0x0 [ 517.199330][ T1036] hid-generic 0000:3000000:0000.0114: unknown main item tag 0x0 [ 517.207102][ T1036] hid-generic 0000:3000000:0000.0114: unknown main item tag 0x0 [ 517.214880][ T1036] hid-generic 0000:3000000:0000.0114: unknown main item tag 0x0 [ 517.222559][ T1036] hid-generic 0000:3000000:0000.0114: unknown main item tag 0x0 [ 517.230447][ T1036] hid-generic 0000:3000000:0000.0114: unknown main item tag 0x0 [ 517.238182][ T1036] hid-generic 0000:3000000:0000.0114: unknown main item tag 0x0 [ 517.245934][ T1036] hid-generic 0000:3000000:0000.0114: unknown main item tag 0x0 [ 517.253674][ T1036] hid-generic 0000:3000000:0000.0114: unknown main item tag 0x0 [ 517.261426][ T1036] hid-generic 0000:3000000:0000.0114: unknown main item tag 0x0 [ 517.269144][ T1036] hid-generic 0000:3000000:0000.0114: unknown main item tag 0x0 [ 517.277116][ T1036] hid-generic 0000:3000000:0000.0114: unknown main item tag 0x0 [ 517.284823][ T1036] hid-generic 0000:3000000:0000.0114: unknown main item tag 0x0 [ 517.461355][ T1036] hid-generic 0000:3000000:0000.0114: hidraw0: HID v0.00 Device [sy] on syz0 [ 517.518729][T23008] xt_hashlimit: max too large, truncated to 1048576 [ 517.526616][ T1036] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x4 [ 517.534419][ T1036] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x2 [ 517.579091][ T1036] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x0 [ 517.586975][ T1036] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x0 [ 517.594645][ T1036] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x0 [ 517.602426][ T1036] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x0 [ 517.610266][ T1036] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x0 [ 517.618049][ T1036] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x0 [ 517.625752][ T1036] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x0 [ 517.633450][ T1036] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x0 [ 517.641239][ T1036] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x0 [ 517.649003][ T1036] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x0 [ 517.656789][ T1036] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x0 [ 517.664503][ T1036] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x0 [ 517.672237][ T1036] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x0 [ 517.680046][ T1036] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x0 [ 517.737808][T23010] loop2: detected capacity change from 0 to 512 [ 517.755748][T23010] EXT4-fs: Ignoring removed oldalloc option [ 517.767465][T23010] EXT4-fs: Ignoring removed orlov option [ 517.774256][T23010] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 517.784105][T23010] EXT4-fs (loop2): orphan cleanup on readonly fs [ 517.793207][T23010] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6237: bg 0: block 248: padding at end of block bitmap is not set [ 517.812598][T23010] __quota_error: 55 callbacks suppressed [ 517.812614][T23010] Quota error (device loop2): write_blk: dquota write failed [ 517.826016][T23010] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 517.836060][T23010] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.6237: Failed to acquire dquot type 1 [ 517.879534][ T1036] hid-generic 0000:3000000:0000.0115: hidraw0: HID v0.00 Device [sy] on syz0 [ 517.897155][T23010] EXT4-fs (loop2): 1 truncate cleaned up [ 517.903724][T23010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 517.944013][T23010] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.007368][T23017] loop4: detected capacity change from 0 to 512 [ 518.068883][T23017] EXT4-fs: Ignoring removed oldalloc option [ 518.091593][T23017] EXT4-fs: Ignoring removed orlov option [ 518.132408][T23017] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 518.212632][T23017] EXT4-fs (loop4): orphan cleanup on readonly fs [ 518.251030][T23017] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6241: bg 0: block 248: padding at end of block bitmap is not set [ 518.371858][T23017] Quota error (device loop4): write_blk: dquota write failed [ 518.380257][T23017] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 518.393060][T23017] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.6241: Failed to acquire dquot type 1 [ 518.428574][T23017] EXT4-fs (loop4): 1 truncate cleaned up [ 518.442599][T23017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 518.489859][ T10] hid-generic 0000:3000000:0000.0116: unknown main item tag 0x4 [ 518.497764][ T10] hid-generic 0000:3000000:0000.0116: unknown main item tag 0x2 [ 518.541984][ T10] hid-generic 0000:3000000:0000.0116: unknown main item tag 0x0 [ 518.549967][ T10] hid-generic 0000:3000000:0000.0116: unknown main item tag 0x0 [ 518.557684][ T10] hid-generic 0000:3000000:0000.0116: unknown main item tag 0x0 [ 518.565403][ T10] hid-generic 0000:3000000:0000.0116: unknown main item tag 0x0 [ 518.573104][ T10] hid-generic 0000:3000000:0000.0116: unknown main item tag 0x0 [ 518.580843][ T10] hid-generic 0000:3000000:0000.0116: unknown main item tag 0x0 [ 518.588567][ T10] hid-generic 0000:3000000:0000.0116: unknown main item tag 0x0 [ 518.596353][ T10] hid-generic 0000:3000000:0000.0116: unknown main item tag 0x0 [ 518.604120][ T10] hid-generic 0000:3000000:0000.0116: unknown main item tag 0x0 [ 518.611883][ T10] hid-generic 0000:3000000:0000.0116: unknown main item tag 0x0 [ 518.619564][ T10] hid-generic 0000:3000000:0000.0116: unknown main item tag 0x0 [ 518.627407][ T10] hid-generic 0000:3000000:0000.0116: unknown main item tag 0x0 [ 518.635174][ T10] hid-generic 0000:3000000:0000.0116: unknown main item tag 0x0 [ 518.642897][ T10] hid-generic 0000:3000000:0000.0116: unknown main item tag 0x0 [ 518.670846][T23017] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.839983][ T10] hid-generic 0000:3000000:0000.0116: hidraw0: HID v0.00 Device [sy] on syz0 [ 518.993240][T23081] bridge0: entered allmulticast mode [ 519.380185][ T29] audit: type=1326 audit(1752384262.219:14867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23117 comm="syz.0.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6945e929 code=0x7ffc0000 [ 519.406002][ T29] audit: type=1326 audit(1752384262.239:14868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23117 comm="syz.0.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fda6945e929 code=0x7ffc0000 [ 519.429747][ T29] audit: type=1326 audit(1752384262.239:14869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23117 comm="syz.0.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6945e929 code=0x7ffc0000 [ 519.453419][ T29] audit: type=1326 audit(1752384262.239:14870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23117 comm="syz.0.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda6945e929 code=0x7ffc0000 [ 519.477103][ T29] audit: type=1326 audit(1752384262.239:14871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23117 comm="syz.0.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6945e929 code=0x7ffc0000 [ 519.500886][ T29] audit: type=1326 audit(1752384262.239:14872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23117 comm="syz.0.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda6945e929 code=0x7ffc0000 [ 519.691356][T19295] hid-generic 0000:3000000:0000.0117: unknown main item tag 0x4 [ 519.693363][T23149] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.699216][T19295] hid-generic 0000:3000000:0000.0117: unknown main item tag 0x2 [ 519.706770][T23149] bridge0: entered allmulticast mode [ 519.722264][T19295] hid-generic 0000:3000000:0000.0117: unknown main item tag 0x0 [ 519.730176][T19295] hid-generic 0000:3000000:0000.0117: unknown main item tag 0x0 [ 519.737917][T19295] hid-generic 0000:3000000:0000.0117: unknown main item tag 0x0 [ 519.741664][T23149] batadv1: left allmulticast mode [ 519.745730][T19295] hid-generic 0000:3000000:0000.0117: unknown main item tag 0x0 [ 519.750690][T23149] batadv1: left promiscuous mode [ 519.758369][T19295] hid-generic 0000:3000000:0000.0117: unknown main item tag 0x0 [ 519.758397][T19295] hid-generic 0000:3000000:0000.0117: unknown main item tag 0x0 [ 519.758419][T19295] hid-generic 0000:3000000:0000.0117: unknown main item tag 0x0 [ 519.763552][T23149] bridge0: port 3(batadv1) entered disabled state [ 519.771185][T19295] hid-generic 0000:3000000:0000.0117: unknown main item tag 0x0 [ 519.800802][T19295] hid-generic 0000:3000000:0000.0117: unknown main item tag 0x0 [ 519.806183][ T2959] hid-generic 0000:3000000:0000.0118: unknown main item tag 0x4 [ 519.808601][T19295] hid-generic 0000:3000000:0000.0117: unknown main item tag 0x0 [ 519.816269][ T2959] hid-generic 0000:3000000:0000.0118: unknown main item tag 0x2 [ 519.824053][T19295] hid-generic 0000:3000000:0000.0117: unknown main item tag 0x0 [ 519.831717][ T2959] hid-generic 0000:3000000:0000.0118: unknown main item tag 0x0 [ 519.831742][ T2959] hid-generic 0000:3000000:0000.0118: unknown main item tag 0x0 [ 519.839635][T19295] hid-generic 0000:3000000:0000.0117: unknown main item tag 0x0 [ 519.847305][ T2959] hid-generic 0000:3000000:0000.0118: unknown main item tag 0x0 [ 519.847329][ T2959] hid-generic 0000:3000000:0000.0118: unknown main item tag 0x0 [ 519.847350][ T2959] hid-generic 0000:3000000:0000.0118: unknown main item tag 0x0 [ 519.847375][ T2959] hid-generic 0000:3000000:0000.0118: unknown main item tag 0x0 [ 519.855186][T19295] hid-generic 0000:3000000:0000.0117: unknown main item tag 0x0 [ 519.862657][ T2959] hid-generic 0000:3000000:0000.0118: unknown main item tag 0x0 [ 519.870355][T19295] hid-generic 0000:3000000:0000.0117: unknown main item tag 0x0 [ 519.877953][ T2959] hid-generic 0000:3000000:0000.0118: unknown main item tag 0x0 [ 519.910681][T19295] hid-generic 0000:3000000:0000.0117: hidraw0: HID v0.00 Device [sy] on syz0 [ 519.916715][ T2959] hid-generic 0000:3000000:0000.0118: unknown main item tag 0x0 [ 519.925089][T23153] xt_hashlimit: max too large, truncated to 1048576 [ 519.934231][ T2959] hid-generic 0000:3000000:0000.0118: unknown main item tag 0x0 [ 519.956515][ T2959] hid-generic 0000:3000000:0000.0118: unknown main item tag 0x0 [ 519.956545][ T2959] hid-generic 0000:3000000:0000.0118: unknown main item tag 0x0 [ 519.956567][ T2959] hid-generic 0000:3000000:0000.0118: unknown main item tag 0x0 [ 519.956589][ T2959] hid-generic 0000:3000000:0000.0118: unknown main item tag 0x0 [ 519.956611][ T2959] hid-generic 0000:3000000:0000.0118: unknown main item tag 0x0 [ 519.956635][ T2959] hid-generic 0000:3000000:0000.0118: unknown main item tag 0x0 [ 519.956660][ T2959] hid-generic 0000:3000000:0000.0118: unknown main item tag 0x0 [ 519.956686][ T2959] hid-generic 0000:3000000:0000.0118: unknown main item tag 0x0 [ 519.956719][ T2959] hid-generic 0000:3000000:0000.0118: unknown main item tag 0x0 [ 519.958374][T23149] bridge_slave_1: left allmulticast mode [ 519.958376][ T2959] hid-generic 0000:3000000:0000.0118: hidraw1: HID v0.00 Device [sy] on syz0 [ 519.958397][T23149] bridge_slave_1: left promiscuous mode [ 519.958513][T23149] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.968643][T23149] bridge_slave_0: left allmulticast mode [ 520.063518][T23149] bridge_slave_0: left promiscuous mode [ 520.063691][T23149] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.222083][T23175] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 520.242065][T23175] loop4: detected capacity change from 0 to 512 [ 520.269237][T23175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.282902][T23175] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 520.338633][T22081] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.371430][T23185] bridge0: port 3(batadv1) entered blocking state [ 520.378580][T23185] bridge0: port 3(batadv1) entered disabled state [ 520.386291][T23185] batadv1: entered allmulticast mode [ 520.392599][T23185] batadv1: entered promiscuous mode [ 520.427595][ T3368] hid-generic 0000:3000000:0000.0119: unknown main item tag 0x4 [ 520.435607][ T3368] hid-generic 0000:3000000:0000.0119: unknown main item tag 0x2 [ 520.443336][ T3368] hid-generic 0000:3000000:0000.0119: unknown main item tag 0x0 [ 520.451198][ T3368] hid-generic 0000:3000000:0000.0119: unknown main item tag 0x0 [ 520.458922][ T3368] hid-generic 0000:3000000:0000.0119: unknown main item tag 0x0 [ 520.466642][ T3368] hid-generic 0000:3000000:0000.0119: unknown main item tag 0x0 [ 520.474381][ T3368] hid-generic 0000:3000000:0000.0119: unknown main item tag 0x0 [ 520.482169][ T3368] hid-generic 0000:3000000:0000.0119: unknown main item tag 0x0 [ 520.489889][ T3368] hid-generic 0000:3000000:0000.0119: unknown main item tag 0x0 [ 520.497620][ T3368] hid-generic 0000:3000000:0000.0119: unknown main item tag 0x0 [ 520.505413][ T3368] hid-generic 0000:3000000:0000.0119: unknown main item tag 0x0 [ 520.513128][ T3368] hid-generic 0000:3000000:0000.0119: unknown main item tag 0x0 [ 520.520860][ T3368] hid-generic 0000:3000000:0000.0119: unknown main item tag 0x0 [ 520.528605][ T3368] hid-generic 0000:3000000:0000.0119: unknown main item tag 0x0 [ 520.536324][ T3368] hid-generic 0000:3000000:0000.0119: unknown main item tag 0x0 [ 520.544009][ T3368] hid-generic 0000:3000000:0000.0119: unknown main item tag 0x0 [ 520.552453][ T3368] hid-generic 0000:3000000:0000.0119: hidraw0: HID v0.00 Device [sy] on syz0 [ 520.640168][T23205] xt_hashlimit: max too large, truncated to 1048576 [ 520.640881][ T3414] hid-generic 0000:3000000:0000.011A: unknown main item tag 0x4 [ 520.655027][ T3414] hid-generic 0000:3000000:0000.011A: unknown main item tag 0x2 [ 520.662899][ T3414] hid-generic 0000:3000000:0000.011A: unknown main item tag 0x0 [ 520.670765][ T3414] hid-generic 0000:3000000:0000.011A: unknown main item tag 0x0 [ 520.678485][ T3414] hid-generic 0000:3000000:0000.011A: unknown main item tag 0x0 [ 520.686228][ T3414] hid-generic 0000:3000000:0000.011A: unknown main item tag 0x0 [ 520.694054][ T3414] hid-generic 0000:3000000:0000.011A: unknown main item tag 0x0 [ 520.701759][ T3414] hid-generic 0000:3000000:0000.011A: unknown main item tag 0x0 [ 520.709450][ T3414] hid-generic 0000:3000000:0000.011A: unknown main item tag 0x0 [ 520.717216][ T3414] hid-generic 0000:3000000:0000.011A: unknown main item tag 0x0 [ 520.724910][ T3414] hid-generic 0000:3000000:0000.011A: unknown main item tag 0x0 [ 520.732586][ T3414] hid-generic 0000:3000000:0000.011A: unknown main item tag 0x0 [ 520.740384][ T3414] hid-generic 0000:3000000:0000.011A: unknown main item tag 0x0 [ 520.748064][ T3414] hid-generic 0000:3000000:0000.011A: unknown main item tag 0x0 [ 520.755732][ T3414] hid-generic 0000:3000000:0000.011A: unknown main item tag 0x0 [ 520.763391][ T3414] hid-generic 0000:3000000:0000.011A: unknown main item tag 0x0 [ 520.771072][ T3414] hid-generic 0000:3000000:0000.011A: unknown main item tag 0x0 [ 520.778783][ T3414] hid-generic 0000:3000000:0000.011A: unknown main item tag 0x0 [ 520.786483][ T3414] hid-generic 0000:3000000:0000.011A: unknown main item tag 0x0 [ 520.794154][ T3414] hid-generic 0000:3000000:0000.011A: unknown main item tag 0x0 [ 520.801966][ T3414] hid-generic 0000:3000000:0000.011A: unknown main item tag 0x0 [ 520.815587][ T3414] hid-generic 0000:3000000:0000.011A: hidraw0: HID v0.00 Device [sy] on syz0 [ 520.880476][T23208] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.887816][T23208] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.888771][T16768] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 520.900610][T23208] bridge0: entered allmulticast mode [ 520.904178][T16768] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 520.916163][T23208] batadv1: left allmulticast mode [ 520.923850][T23208] batadv1: left promiscuous mode [ 520.929033][T23208] bridge0: port 3(batadv1) entered disabled state [ 520.936576][T23208] bridge_slave_1: left allmulticast mode [ 520.942289][T23208] bridge_slave_1: left promiscuous mode [ 520.948162][T23208] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.956363][T23208] bridge_slave_0: left allmulticast mode [ 520.962154][T23208] bridge_slave_0: left promiscuous mode [ 520.968068][T23208] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.983778][T23214] __nla_validate_parse: 19 callbacks suppressed [ 520.983794][T23214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6314'. [ 521.044125][T23220] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 521.057482][T23220] loop4: detected capacity change from 0 to 512 [ 521.102352][T23226] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6319'. [ 521.119274][T23220] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.145589][T23220] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 521.177596][T22081] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.291264][T23250] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6328'. [ 521.310920][ T2959] hid-generic 0000:3000000:0000.011B: unknown main item tag 0x4 [ 521.318911][ T2959] hid-generic 0000:3000000:0000.011B: unknown main item tag 0x2 [ 521.326681][ T2959] hid-generic 0000:3000000:0000.011B: unknown main item tag 0x0 [ 521.334364][ T2959] hid-generic 0000:3000000:0000.011B: unknown main item tag 0x0 [ 521.341337][T23240] xt_hashlimit: max too large, truncated to 1048576 [ 521.342067][ T2959] hid-generic 0000:3000000:0000.011B: unknown main item tag 0x0 [ 521.356670][ T2959] hid-generic 0000:3000000:0000.011B: unknown main item tag 0x0 [ 521.364406][ T2959] hid-generic 0000:3000000:0000.011B: unknown main item tag 0x0 [ 521.372338][ T2959] hid-generic 0000:3000000:0000.011B: unknown main item tag 0x0 [ 521.380354][ T2959] hid-generic 0000:3000000:0000.011B: unknown main item tag 0x0 [ 521.388087][ T2959] hid-generic 0000:3000000:0000.011B: unknown main item tag 0x0 [ 521.395933][ T2959] hid-generic 0000:3000000:0000.011B: unknown main item tag 0x0 [ 521.403624][ T2959] hid-generic 0000:3000000:0000.011B: unknown main item tag 0x0 [ 521.411412][ T2959] hid-generic 0000:3000000:0000.011B: unknown main item tag 0x0 [ 521.419139][ T2959] hid-generic 0000:3000000:0000.011B: unknown main item tag 0x0 [ 521.426858][ T2959] hid-generic 0000:3000000:0000.011B: unknown main item tag 0x0 [ 521.434680][ T2959] hid-generic 0000:3000000:0000.011B: unknown main item tag 0x0 [ 521.435972][T23259] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 521.442417][ T2959] hid-generic 0000:3000000:0000.011B: unknown main item tag 0x0 [ 521.457550][ T2959] hid-generic 0000:3000000:0000.011B: unknown main item tag 0x0 [ 521.465263][ T2959] hid-generic 0000:3000000:0000.011B: unknown main item tag 0x0 [ 521.471045][ T3368] hid-generic 0000:3000000:0000.011C: unknown main item tag 0x4 [ 521.472975][ T2959] hid-generic 0000:3000000:0000.011B: unknown main item tag 0x0 [ 521.473008][ T2959] hid-generic 0000:3000000:0000.011B: unknown main item tag 0x0 [ 521.480762][ T3368] hid-generic 0000:3000000:0000.011C: unknown main item tag 0x2 [ 521.499694][ T2959] hid-generic 0000:3000000:0000.011B: hidraw0: HID v0.00 Device [sy] on syz0 [ 521.537055][T23257] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6330'. [ 521.542414][ T3368] hid-generic 0000:3000000:0000.011C: unknown main item tag 0x0 [ 521.546150][T23257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6330'. [ 521.554207][T23256] loop2: detected capacity change from 0 to 512 [ 521.563042][ T3368] hid-generic 0000:3000000:0000.011C: unknown main item tag 0x0 [ 521.577198][ T3368] hid-generic 0000:3000000:0000.011C: unknown main item tag 0x0 [ 521.584963][ T3368] hid-generic 0000:3000000:0000.011C: unknown main item tag 0x0 [ 521.592778][ T3368] hid-generic 0000:3000000:0000.011C: unknown main item tag 0x0 [ 521.600525][ T3368] hid-generic 0000:3000000:0000.011C: unknown main item tag 0x0 [ 521.608316][ T3368] hid-generic 0000:3000000:0000.011C: unknown main item tag 0x0 [ 521.616392][ T3368] hid-generic 0000:3000000:0000.011C: unknown main item tag 0x0 [ 521.624157][ T3368] hid-generic 0000:3000000:0000.011C: unknown main item tag 0x0 [ 521.632103][ T3368] hid-generic 0000:3000000:0000.011C: unknown main item tag 0x0 [ 521.639978][ T3368] hid-generic 0000:3000000:0000.011C: unknown main item tag 0x0 [ 521.647690][ T3368] hid-generic 0000:3000000:0000.011C: unknown main item tag 0x0 [ 521.655446][ T3368] hid-generic 0000:3000000:0000.011C: unknown main item tag 0x0 [ 521.663126][ T3368] hid-generic 0000:3000000:0000.011C: unknown main item tag 0x0 [ 521.681239][T23266] netlink: 100 bytes leftover after parsing attributes in process `syz.5.6332'. [ 521.725190][ T3368] hid-generic 0000:3000000:0000.011C: hidraw0: HID v0.00 Device [sy] on syz0 [ 521.740824][T23256] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.755191][T23256] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 521.839728][ T3507] hid-generic 0000:3000000:0000.011D: unknown main item tag 0x0 [ 521.847643][ T3507] hid-generic 0000:3000000:0000.011D: unknown main item tag 0x0 [ 521.855420][ T3507] hid-generic 0000:3000000:0000.011D: unknown main item tag 0x0 [ 521.863102][ T3507] hid-generic 0000:3000000:0000.011D: unknown main item tag 0x0 [ 521.870851][ T3507] hid-generic 0000:3000000:0000.011D: unknown main item tag 0x0 [ 521.878556][ T3507] hid-generic 0000:3000000:0000.011D: unknown main item tag 0x0 [ 521.886401][ T3507] hid-generic 0000:3000000:0000.011D: unknown main item tag 0x0 [ 521.894136][ T3507] hid-generic 0000:3000000:0000.011D: unknown main item tag 0x0 [ 521.901833][ T3507] hid-generic 0000:3000000:0000.011D: unknown main item tag 0x0 [ 521.909554][ T3507] hid-generic 0000:3000000:0000.011D: unknown main item tag 0x0 [ 521.917254][ T3507] hid-generic 0000:3000000:0000.011D: unknown main item tag 0x0 [ 521.925022][ T3507] hid-generic 0000:3000000:0000.011D: unknown main item tag 0x0 [ 521.932764][ T3507] hid-generic 0000:3000000:0000.011D: unknown main item tag 0x0 [ 521.939834][T23281] xt_hashlimit: max too large, truncated to 1048576 [ 521.940484][ T3507] hid-generic 0000:3000000:0000.011D: unknown main item tag 0x0 [ 521.948791][T22772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.954731][ T3507] hid-generic 0000:3000000:0000.011D: unknown main item tag 0x0 [ 521.954761][ T3507] hid-generic 0000:3000000:0000.011D: unknown main item tag 0x0 [ 521.979222][ T3507] hid-generic 0000:3000000:0000.011D: unknown main item tag 0x0 [ 521.986946][ T3507] hid-generic 0000:3000000:0000.011D: unknown main item tag 0x0 [ 521.987590][T23280] netlink: 7 bytes leftover after parsing attributes in process `syz.4.6338'. [ 521.994684][ T3507] hid-generic 0000:3000000:0000.011D: unknown main item tag 0x0 [ 522.011388][ T3507] hid-generic 0000:3000000:0000.011D: unknown main item tag 0x0 [ 522.019202][ T3507] hid-generic 0000:3000000:0000.011D: unknown main item tag 0x0 [ 522.026999][ T3507] hid-generic 0000:3000000:0000.011D: unknown main item tag 0x0 [ 522.034715][ T3507] hid-generic 0000:3000000:0000.011D: unknown main item tag 0x0 [ 522.042477][ T3507] hid-generic 0000:3000000:0000.011D: unknown main item tag 0x0 [ 522.050186][ T3507] hid-generic 0000:3000000:0000.011D: unknown main item tag 0x0 [ 522.057970][ T3507] hid-generic 0000:3000000:0000.011D: unknown main item tag 0x0 [ 522.065821][ T3507] hid-generic 0000:3000000:0000.011D: unknown main item tag 0x0 [ 522.073643][ T3507] hid-generic 0000:3000000:0000.011D: unknown main item tag 0x0 [ 522.081633][ T3507] hid-generic 0000:3000000:0000.011D: unknown main item tag 0x0 [ 522.089505][ T3507] hid-generic 0000:3000000:0000.011D: unknown main item tag 0x0 [ 522.097271][ T3507] hid-generic 0000:3000000:0000.011D: unknown main item tag 0x0 [ 522.105028][ T3507] hid-generic 0000:3000000:0000.011D: unknown main item tag 0x0 [ 522.113892][ T3507] hid-generic 0000:3000000:0000.011D: hidraw0: HID v0.00 Device [sy] on syz0 [ 522.138994][T23286] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6339'. [ 522.235131][T23299] loop4: detected capacity change from 0 to 2048 [ 522.242487][T23299] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 522.274334][ T3507] hid-generic 0000:3000000:0000.011E: unknown main item tag 0x4 [ 522.282316][ T3507] hid-generic 0000:3000000:0000.011E: unknown main item tag 0x2 [ 522.290604][ T3507] hid-generic 0000:3000000:0000.011E: unknown main item tag 0x0 [ 522.291357][T23297] xt_hashlimit: max too large, truncated to 1048576 [ 522.298353][ T3507] hid-generic 0000:3000000:0000.011E: unknown main item tag 0x0 [ 522.298384][ T3507] hid-generic 0000:3000000:0000.011E: unknown main item tag 0x0 [ 522.320605][ T3507] hid-generic 0000:3000000:0000.011E: unknown main item tag 0x0 [ 522.328606][ T3507] hid-generic 0000:3000000:0000.011E: unknown main item tag 0x0 [ 522.336394][ T3507] hid-generic 0000:3000000:0000.011E: unknown main item tag 0x0 [ 522.344129][ T3507] hid-generic 0000:3000000:0000.011E: unknown main item tag 0x0 [ 522.351924][ T3507] hid-generic 0000:3000000:0000.011E: unknown main item tag 0x0 [ 522.359664][ T3507] hid-generic 0000:3000000:0000.011E: unknown main item tag 0x0 [ 522.367487][ T3507] hid-generic 0000:3000000:0000.011E: unknown main item tag 0x0 [ 522.375209][ T3507] hid-generic 0000:3000000:0000.011E: unknown main item tag 0x0 [ 522.382977][ T3507] hid-generic 0000:3000000:0000.011E: unknown main item tag 0x0 [ 522.390733][ T3507] hid-generic 0000:3000000:0000.011E: unknown main item tag 0x0 [ 522.398454][ T3507] hid-generic 0000:3000000:0000.011E: unknown main item tag 0x0 [ 522.407162][ T3507] hid-generic 0000:3000000:0000.011E: hidraw0: HID v0.00 Device [sy] on syz0 [ 522.424175][ T3507] hid-generic 0000:3000000:0000.011F: unknown main item tag 0x4 [ 522.432006][ T3507] hid-generic 0000:3000000:0000.011F: unknown main item tag 0x2 [ 522.440727][ T3507] hid-generic 0000:3000000:0000.011F: unknown main item tag 0x0 [ 522.440994][T23308] xt_hashlimit: max too large, truncated to 1048576 [ 522.448539][ T3507] hid-generic 0000:3000000:0000.011F: unknown main item tag 0x0 [ 522.448645][ T3507] hid-generic 0000:3000000:0000.011F: unknown main item tag 0x0 [ 522.456625][ T3368] hid-generic 0000:3000000:0000.0120: unknown main item tag 0x4 [ 522.463040][ T3507] hid-generic 0000:3000000:0000.011F: unknown main item tag 0x0 [ 522.470652][ T3368] hid-generic 0000:3000000:0000.0120: unknown main item tag 0x2 [ 522.478313][ T3507] hid-generic 0000:3000000:0000.011F: unknown main item tag 0x0 [ 522.485957][ T3368] hid-generic 0000:3000000:0000.0120: unknown main item tag 0x0 [ 522.485985][ T3368] hid-generic 0000:3000000:0000.0120: unknown main item tag 0x0 [ 522.493790][ T3507] hid-generic 0000:3000000:0000.011F: unknown main item tag 0x0 [ 522.501419][ T3368] hid-generic 0000:3000000:0000.0120: unknown main item tag 0x0 [ 522.501447][ T3368] hid-generic 0000:3000000:0000.0120: unknown main item tag 0x0 [ 522.501469][ T3368] hid-generic 0000:3000000:0000.0120: unknown main item tag 0x0 [ 522.509144][ T3507] hid-generic 0000:3000000:0000.011F: unknown main item tag 0x0 [ 522.509175][ T3507] hid-generic 0000:3000000:0000.011F: unknown main item tag 0x0 [ 522.516851][ T3368] hid-generic 0000:3000000:0000.0120: unknown main item tag 0x0 [ 522.524492][ T3507] hid-generic 0000:3000000:0000.011F: unknown main item tag 0x0 [ 522.532163][ T3368] hid-generic 0000:3000000:0000.0120: unknown main item tag 0x0 [ 522.532195][ T3368] hid-generic 0000:3000000:0000.0120: unknown main item tag 0x0 [ 522.539846][ T3507] hid-generic 0000:3000000:0000.011F: unknown main item tag 0x0 [ 522.547512][ T3368] hid-generic 0000:3000000:0000.0120: unknown main item tag 0x0 [ 522.555219][ T3507] hid-generic 0000:3000000:0000.011F: unknown main item tag 0x0 [ 522.562819][ T3368] hid-generic 0000:3000000:0000.0120: unknown main item tag 0x0 [ 522.570474][ T3507] hid-generic 0000:3000000:0000.011F: unknown main item tag 0x0 [ 522.578236][ T3368] hid-generic 0000:3000000:0000.0120: unknown main item tag 0x0 [ 522.585772][ T3507] hid-generic 0000:3000000:0000.011F: unknown main item tag 0x0 [ 522.585799][ T3507] hid-generic 0000:3000000:0000.011F: unknown main item tag 0x0 [ 522.593465][ T3368] hid-generic 0000:3000000:0000.0120: unknown main item tag 0x0 [ 522.647004][ T3507] hid-generic 0000:3000000:0000.011F: hidraw0: HID v0.00 Device [sy] on syz0 [ 522.648004][ T3368] hid-generic 0000:3000000:0000.0120: unknown main item tag 0x0 [ 522.681542][ T3368] hid-generic 0000:3000000:0000.0120: unknown main item tag 0x0 [ 522.689311][ T3368] hid-generic 0000:3000000:0000.0120: unknown main item tag 0x0 [ 522.696999][ T3368] hid-generic 0000:3000000:0000.0120: unknown main item tag 0x0 [ 522.704807][ T3368] hid-generic 0000:3000000:0000.0120: unknown main item tag 0x0 [ 522.712484][ T3368] hid-generic 0000:3000000:0000.0120: unknown main item tag 0x0 [ 522.720191][ T3368] hid-generic 0000:3000000:0000.0120: unknown main item tag 0x0 [ 522.729038][ T3368] hid-generic 0000:3000000:0000.0120: hidraw1: HID v0.00 Device [sy] on syz0 [ 522.734588][T23314] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6347'. [ 522.754440][T23314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6347'. [ 522.878077][ T3507] hid-generic 0000:3000000:0000.0121: unknown main item tag 0x0 [ 522.878541][T23328] xt_hashlimit: max too large, truncated to 1048576 [ 522.885954][ T3507] hid-generic 0000:3000000:0000.0121: unknown main item tag 0x0 [ 522.900522][ T3507] hid-generic 0000:3000000:0000.0121: unknown main item tag 0x0 [ 522.908273][ T3507] hid-generic 0000:3000000:0000.0121: unknown main item tag 0x0 [ 522.916016][ T3507] hid-generic 0000:3000000:0000.0121: unknown main item tag 0x0 [ 522.923759][ T3507] hid-generic 0000:3000000:0000.0121: unknown main item tag 0x0 [ 522.931593][ T3507] hid-generic 0000:3000000:0000.0121: unknown main item tag 0x0 [ 522.939326][ T3507] hid-generic 0000:3000000:0000.0121: unknown main item tag 0x0 [ 522.947065][ T3507] hid-generic 0000:3000000:0000.0121: unknown main item tag 0x0 [ 522.954759][ T3507] hid-generic 0000:3000000:0000.0121: unknown main item tag 0x0 [ 522.962535][ T3507] hid-generic 0000:3000000:0000.0121: unknown main item tag 0x0 [ 522.970251][ T3507] hid-generic 0000:3000000:0000.0121: unknown main item tag 0x0 [ 522.977936][ T3507] hid-generic 0000:3000000:0000.0121: unknown main item tag 0x0 [ 522.985622][ T3507] hid-generic 0000:3000000:0000.0121: unknown main item tag 0x0 [ 522.993415][ T3507] hid-generic 0000:3000000:0000.0121: unknown main item tag 0x0 [ 523.001104][ T3507] hid-generic 0000:3000000:0000.0121: unknown main item tag 0x0 [ 523.008853][ T3507] hid-generic 0000:3000000:0000.0121: unknown main item tag 0x0 [ 523.016548][ T3507] hid-generic 0000:3000000:0000.0121: unknown main item tag 0x0 [ 523.024270][ T3507] hid-generic 0000:3000000:0000.0121: unknown main item tag 0x0 [ 523.032041][ T3507] hid-generic 0000:3000000:0000.0121: unknown main item tag 0x0 [ 523.039721][ T3507] hid-generic 0000:3000000:0000.0121: unknown main item tag 0x0 [ 523.047449][ T3507] hid-generic 0000:3000000:0000.0121: unknown main item tag 0x0 [ 523.055153][ T3507] hid-generic 0000:3000000:0000.0121: unknown main item tag 0x0 [ 523.062856][ T3507] hid-generic 0000:3000000:0000.0121: unknown main item tag 0x0 [ 523.070631][ T3507] hid-generic 0000:3000000:0000.0121: unknown main item tag 0x0 [ 523.078329][ T3507] hid-generic 0000:3000000:0000.0121: unknown main item tag 0x0 [ 523.086050][ T3507] hid-generic 0000:3000000:0000.0121: unknown main item tag 0x0 [ 523.093719][ T3507] hid-generic 0000:3000000:0000.0121: unknown main item tag 0x0 [ 523.101487][ T3507] hid-generic 0000:3000000:0000.0121: unknown main item tag 0x0 [ 523.109285][ T3507] hid-generic 0000:3000000:0000.0121: unknown main item tag 0x0 [ 523.117017][ T3507] hid-generic 0000:3000000:0000.0121: unknown main item tag 0x0 [ 523.124717][ T3507] hid-generic 0000:3000000:0000.0121: unknown main item tag 0x0 [ 523.133205][ T3507] hid-generic 0000:3000000:0000.0121: hidraw0: HID v0.00 Device [sy] on syz0 [ 523.425444][ T3368] hid-generic 0000:3000000:0000.0122: unknown main item tag 0x4 [ 523.433261][ T3368] hid-generic 0000:3000000:0000.0122: unknown main item tag 0x2 [ 523.441040][ T3368] hid-generic 0000:3000000:0000.0122: unknown main item tag 0x0 [ 523.448774][ T3368] hid-generic 0000:3000000:0000.0122: unknown main item tag 0x0 [ 523.456495][ T3368] hid-generic 0000:3000000:0000.0122: unknown main item tag 0x0 [ 523.464247][ T3368] hid-generic 0000:3000000:0000.0122: unknown main item tag 0x0 [ 523.472035][ T3368] hid-generic 0000:3000000:0000.0122: unknown main item tag 0x0 [ 523.479768][ T3368] hid-generic 0000:3000000:0000.0122: unknown main item tag 0x0 [ 523.487541][ T3368] hid-generic 0000:3000000:0000.0122: unknown main item tag 0x0 [ 523.495281][ T3368] hid-generic 0000:3000000:0000.0122: unknown main item tag 0x0 [ 523.503062][ T3368] hid-generic 0000:3000000:0000.0122: unknown main item tag 0x0 [ 523.510893][ T3368] hid-generic 0000:3000000:0000.0122: unknown main item tag 0x0 [ 523.518608][ T3368] hid-generic 0000:3000000:0000.0122: unknown main item tag 0x0 [ 523.526325][ T3368] hid-generic 0000:3000000:0000.0122: unknown main item tag 0x0 [ 523.534128][ T3368] hid-generic 0000:3000000:0000.0122: unknown main item tag 0x0 [ 523.541997][ T3368] hid-generic 0000:3000000:0000.0122: unknown main item tag 0x0 [ 523.549893][ T3368] hid-generic 0000:3000000:0000.0122: unknown main item tag 0x0 [ 523.551168][T23360] xt_hashlimit: max too large, truncated to 1048576 [ 523.557675][ T3368] hid-generic 0000:3000000:0000.0122: unknown main item tag 0x0 [ 523.571998][ T3368] hid-generic 0000:3000000:0000.0122: unknown main item tag 0x0 [ 523.579791][ T3368] hid-generic 0000:3000000:0000.0122: unknown main item tag 0x0 [ 523.587691][ T3368] hid-generic 0000:3000000:0000.0122: unknown main item tag 0x0 [ 523.610607][T23362] loop4: detected capacity change from 0 to 512 [ 523.614880][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 523.614902][ T29] audit: type=1326 audit(1752384266.449:14975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23357 comm="syz.0.6365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6945e929 code=0x7ffc0000 [ 523.648342][ T29] audit: type=1326 audit(1752384266.449:14976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23357 comm="syz.0.6365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6945e929 code=0x7ffc0000 [ 523.649931][T23362] EXT4-fs: Ignoring removed oldalloc option [ 523.671958][ T29] audit: type=1326 audit(1752384266.449:14977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23357 comm="syz.0.6365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fda6945e929 code=0x7ffc0000 [ 523.672005][ T29] audit: type=1326 audit(1752384266.449:14978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23357 comm="syz.0.6365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6945e929 code=0x7ffc0000 [ 523.672102][ T29] audit: type=1326 audit(1752384266.449:14979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23357 comm="syz.0.6365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6945e929 code=0x7ffc0000 [ 523.672207][ T29] audit: type=1326 audit(1752384266.449:14980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23357 comm="syz.0.6365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda6945e929 code=0x7ffc0000 [ 523.672247][ T29] audit: type=1326 audit(1752384266.449:14981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23357 comm="syz.0.6365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6945e929 code=0x7ffc0000 [ 523.672286][ T29] audit: type=1326 audit(1752384266.449:14982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23357 comm="syz.0.6365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda6945e929 code=0x7ffc0000 [ 523.672328][ T29] audit: type=1326 audit(1752384266.449:14983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23357 comm="syz.0.6365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6945e929 code=0x7ffc0000 [ 523.672367][ T29] audit: type=1326 audit(1752384266.449:14984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23357 comm="syz.0.6365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda6945e929 code=0x7ffc0000 [ 523.708724][ T3368] hid-generic 0000:3000000:0000.0122: hidraw0: HID v0.00 Device [sy] on syz0 [ 523.894280][T23362] EXT4-fs: Ignoring removed orlov option [ 523.906750][T23362] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 523.959464][T23362] EXT4-fs (loop4): orphan cleanup on readonly fs [ 524.025068][T23362] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6366: bg 0: block 248: padding at end of block bitmap is not set [ 524.048998][T23362] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.6366: Failed to acquire dquot type 1 [ 524.068490][T23362] EXT4-fs (loop4): 1 truncate cleaned up [ 524.091402][T23362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 524.108568][T23362] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.155093][T23386] netlink: 'syz.1.6374': attribute type 1 has an invalid length. [ 524.353988][ T3507] hid-generic 0000:3000000:0000.0123: unknown main item tag 0x4 [ 524.361942][ T3507] hid-generic 0000:3000000:0000.0123: unknown main item tag 0x2 [ 524.378502][ T3507] hid-generic 0000:3000000:0000.0123: unknown main item tag 0x0 [ 524.386647][ T3507] hid-generic 0000:3000000:0000.0123: unknown main item tag 0x0 [ 524.394371][ T3507] hid-generic 0000:3000000:0000.0123: unknown main item tag 0x0 [ 524.402153][ T3507] hid-generic 0000:3000000:0000.0123: unknown main item tag 0x0 [ 524.410303][ T3507] hid-generic 0000:3000000:0000.0123: unknown main item tag 0x0 [ 524.418016][ T3507] hid-generic 0000:3000000:0000.0123: unknown main item tag 0x0 [ 524.425931][ T3507] hid-generic 0000:3000000:0000.0123: unknown main item tag 0x0 [ 524.433610][ T3507] hid-generic 0000:3000000:0000.0123: unknown main item tag 0x0 [ 524.441370][ T3507] hid-generic 0000:3000000:0000.0123: unknown main item tag 0x0 [ 524.449060][ T3507] hid-generic 0000:3000000:0000.0123: unknown main item tag 0x0 [ 524.456834][ T3507] hid-generic 0000:3000000:0000.0123: unknown main item tag 0x0 [ 524.464634][ T3507] hid-generic 0000:3000000:0000.0123: unknown main item tag 0x0 [ 524.472484][ T3507] hid-generic 0000:3000000:0000.0123: unknown main item tag 0x0 [ 524.480202][ T3507] hid-generic 0000:3000000:0000.0123: unknown main item tag 0x0 [ 524.489006][ T3507] hid-generic 0000:3000000:0000.0123: hidraw0: HID v0.00 Device [sy] on syz0 [ 524.623461][T23423] loop2: detected capacity change from 0 to 512 [ 524.633450][T23423] EXT4-fs: Ignoring removed oldalloc option [ 524.669799][T23423] EXT4-fs: Ignoring removed orlov option [ 524.702717][T23423] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 524.726238][T23423] EXT4-fs (loop2): orphan cleanup on readonly fs [ 524.747309][T23423] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6388: bg 0: block 248: padding at end of block bitmap is not set [ 524.769900][T23423] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.6388: Failed to acquire dquot type 1 [ 524.772773][ T3368] hid-generic 0000:3000000:0000.0124: unknown main item tag 0x4 [ 524.789483][ T3368] hid-generic 0000:3000000:0000.0124: unknown main item tag 0x2 [ 524.802638][ T3368] hid-generic 0000:3000000:0000.0124: unknown main item tag 0x0 [ 524.810627][ T3368] hid-generic 0000:3000000:0000.0124: unknown main item tag 0x0 [ 524.818424][ T3368] hid-generic 0000:3000000:0000.0124: unknown main item tag 0x0 [ 524.826216][ T3368] hid-generic 0000:3000000:0000.0124: unknown main item tag 0x0 [ 524.833884][ T3368] hid-generic 0000:3000000:0000.0124: unknown main item tag 0x0 [ 524.841784][ T3368] hid-generic 0000:3000000:0000.0124: unknown main item tag 0x0 [ 524.849497][ T3368] hid-generic 0000:3000000:0000.0124: unknown main item tag 0x0 [ 524.850444][T23423] EXT4-fs (loop2): 1 truncate cleaned up [ 524.857228][ T3368] hid-generic 0000:3000000:0000.0124: unknown main item tag 0x0 [ 524.857329][ T3368] hid-generic 0000:3000000:0000.0124: unknown main item tag 0x0 [ 524.857357][ T3368] hid-generic 0000:3000000:0000.0124: unknown main item tag 0x0 [ 524.857385][ T3368] hid-generic 0000:3000000:0000.0124: unknown main item tag 0x0 [ 524.857453][ T3368] hid-generic 0000:3000000:0000.0124: unknown main item tag 0x0 [ 524.857483][ T3368] hid-generic 0000:3000000:0000.0124: unknown main item tag 0x0 [ 524.857512][ T3368] hid-generic 0000:3000000:0000.0124: unknown main item tag 0x0 [ 524.928155][ T3368] hid-generic 0000:3000000:0000.0124: hidraw0: HID v0.00 Device [sy] on syz0 [ 524.929681][T23423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 524.970110][T23423] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.156566][ T3414] hid-generic 0000:3000000:0000.0125: unknown main item tag 0x4 [ 525.164386][ T3414] hid-generic 0000:3000000:0000.0125: unknown main item tag 0x2 [ 525.180245][ T3414] hid-generic 0000:3000000:0000.0125: unknown main item tag 0x0 [ 525.188032][ T3414] hid-generic 0000:3000000:0000.0125: unknown main item tag 0x0 [ 525.195757][ T3414] hid-generic 0000:3000000:0000.0125: unknown main item tag 0x0 [ 525.203507][ T3414] hid-generic 0000:3000000:0000.0125: unknown main item tag 0x0 [ 525.211329][ T3414] hid-generic 0000:3000000:0000.0125: unknown main item tag 0x0 [ 525.219079][ T3414] hid-generic 0000:3000000:0000.0125: unknown main item tag 0x0 [ 525.226882][ T3414] hid-generic 0000:3000000:0000.0125: unknown main item tag 0x0 [ 525.234708][ T3414] hid-generic 0000:3000000:0000.0125: unknown main item tag 0x0 [ 525.242436][ T3414] hid-generic 0000:3000000:0000.0125: unknown main item tag 0x0 [ 525.250231][ T3414] hid-generic 0000:3000000:0000.0125: unknown main item tag 0x0 [ 525.258016][ T3414] hid-generic 0000:3000000:0000.0125: unknown main item tag 0x0 [ 525.262068][T23460] Cannot find add_set index 0 as target [ 525.265707][ T3414] hid-generic 0000:3000000:0000.0125: unknown main item tag 0x0 [ 525.279052][ T3414] hid-generic 0000:3000000:0000.0125: unknown main item tag 0x0 [ 525.280556][T23460] loop2: detected capacity change from 0 to 512 [ 525.286962][ T3414] hid-generic 0000:3000000:0000.0125: unknown main item tag 0x0 [ 525.398160][ T3414] hid-generic 0000:3000000:0000.0125: hidraw0: HID v0.00 Device [sy] on syz0 [ 525.420378][T23460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.451788][T23460] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 525.626900][ T3414] hid-generic 0000:3000000:0000.0126: unknown main item tag 0x4 [ 525.634653][ T3414] hid-generic 0000:3000000:0000.0126: unknown main item tag 0x2 [ 525.701668][ T3414] hid-generic 0000:3000000:0000.0126: unknown main item tag 0x0 [ 525.709513][ T3414] hid-generic 0000:3000000:0000.0126: unknown main item tag 0x0 [ 525.717283][ T3414] hid-generic 0000:3000000:0000.0126: unknown main item tag 0x0 [ 525.725080][ T3414] hid-generic 0000:3000000:0000.0126: unknown main item tag 0x0 [ 525.732746][ T3414] hid-generic 0000:3000000:0000.0126: unknown main item tag 0x0 [ 525.740453][ T3414] hid-generic 0000:3000000:0000.0126: unknown main item tag 0x0 [ 525.748141][ T3414] hid-generic 0000:3000000:0000.0126: unknown main item tag 0x0 [ 525.755889][ T3414] hid-generic 0000:3000000:0000.0126: unknown main item tag 0x0 [ 525.763592][ T3414] hid-generic 0000:3000000:0000.0126: unknown main item tag 0x0 [ 525.771337][ T3414] hid-generic 0000:3000000:0000.0126: unknown main item tag 0x0 [ 525.779199][ T3414] hid-generic 0000:3000000:0000.0126: unknown main item tag 0x0 [ 525.786964][ T3414] hid-generic 0000:3000000:0000.0126: unknown main item tag 0x0 [ 525.794849][ T3414] hid-generic 0000:3000000:0000.0126: unknown main item tag 0x0 [ 525.802517][ T3414] hid-generic 0000:3000000:0000.0126: unknown main item tag 0x0 [ 525.994759][T22772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.040437][ T3414] hid-generic 0000:3000000:0000.0126: hidraw0: HID v0.00 Device [sy] on syz0 [ 526.053398][T23479] bridge0: entered allmulticast mode [ 526.315289][T23495] __nla_validate_parse: 16 callbacks suppressed [ 526.315312][T23495] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6411'. [ 526.372593][T23496] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6413'. [ 526.459516][T23490] loop2: detected capacity change from 0 to 512 [ 526.474200][T23490] EXT4-fs: Ignoring removed oldalloc option [ 526.488529][T23490] EXT4-fs: Ignoring removed orlov option [ 526.509471][T23490] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 526.532765][T23507] Cannot find add_set index 0 as target [ 526.541082][T23490] EXT4-fs (loop2): orphan cleanup on readonly fs [ 526.621464][T23510] lo speed is unknown, defaulting to 1000 [ 526.743946][T23490] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6407: bg 0: block 248: padding at end of block bitmap is not set [ 526.944119][T23490] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.6407: Failed to acquire dquot type 1 [ 527.172578][T23490] EXT4-fs (loop2): 1 truncate cleaned up [ 527.282644][T23490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 527.377927][T23490] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.138337][T23533] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6427'. [ 528.208254][T23540] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6429'. [ 528.228299][ T2959] hid-generic 0000:3000000:0000.0127: unknown main item tag 0x4 [ 528.236296][ T2959] hid-generic 0000:3000000:0000.0127: unknown main item tag 0x2 [ 528.247030][ T2959] hid-generic 0000:3000000:0000.0127: unknown main item tag 0x0 [ 528.254844][ T2959] hid-generic 0000:3000000:0000.0127: unknown main item tag 0x0 [ 528.262547][ T2959] hid-generic 0000:3000000:0000.0127: unknown main item tag 0x0 [ 528.270357][ T2959] hid-generic 0000:3000000:0000.0127: unknown main item tag 0x0 [ 528.278046][ T2959] hid-generic 0000:3000000:0000.0127: unknown main item tag 0x0 [ 528.285816][ T2959] hid-generic 0000:3000000:0000.0127: unknown main item tag 0x0 [ 528.293541][ T2959] hid-generic 0000:3000000:0000.0127: unknown main item tag 0x0 [ 528.301319][ T2959] hid-generic 0000:3000000:0000.0127: unknown main item tag 0x0 [ 528.309038][ T2959] hid-generic 0000:3000000:0000.0127: unknown main item tag 0x0 [ 528.316831][ T2959] hid-generic 0000:3000000:0000.0127: unknown main item tag 0x0 [ 528.324514][ T2959] hid-generic 0000:3000000:0000.0127: unknown main item tag 0x0 [ 528.332240][ T2959] hid-generic 0000:3000000:0000.0127: unknown main item tag 0x0 [ 528.340049][ T2959] hid-generic 0000:3000000:0000.0127: unknown main item tag 0x0 [ 528.348012][ T2959] hid-generic 0000:3000000:0000.0127: unknown main item tag 0x0 [ 528.373279][ T2959] hid-generic 0000:3000000:0000.0127: hidraw0: HID v0.00 Device [sy] on syz0 [ 528.452397][T23554] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6430'. [ 528.569861][T23567] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6440'. [ 528.598160][T23570] netlink: 148 bytes leftover after parsing attributes in process `syz.5.6438'. [ 528.670777][T23580] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6443'. [ 528.744713][T23586] loop2: detected capacity change from 0 to 512 [ 528.751588][T23586] EXT4-fs: Ignoring removed oldalloc option [ 528.757729][T23586] EXT4-fs: Ignoring removed orlov option [ 528.764095][T23586] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 528.858956][T23593] lo speed is unknown, defaulting to 1000 [ 529.685199][T23600] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6448'. [ 529.701884][T23586] EXT4-fs (loop2): orphan cleanup on readonly fs [ 529.715665][ T10] hid-generic 0000:3000000:0000.0128: unknown main item tag 0x4 [ 529.723399][ T10] hid-generic 0000:3000000:0000.0128: unknown main item tag 0x2 [ 529.747276][T23586] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6447: bg 0: block 248: padding at end of block bitmap is not set [ 529.765210][ T10] hid-generic 0000:3000000:0000.0128: unknown main item tag 0x0 [ 529.772607][T23586] __quota_error: 179 callbacks suppressed [ 529.772630][T23586] Quota error (device loop2): write_blk: dquota write failed [ 529.772918][ T10] hid-generic 0000:3000000:0000.0128: unknown main item tag 0x0 [ 529.772943][ T10] hid-generic 0000:3000000:0000.0128: unknown main item tag 0x0 [ 529.778826][T23586] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 529.778857][T23586] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.6447: Failed to acquire dquot type 1 [ 529.784573][T23586] EXT4-fs (loop2): 1 truncate cleaned up [ 529.788242][ T10] hid-generic 0000:3000000:0000.0128: unknown main item tag 0x0 [ 529.838656][ T10] hid-generic 0000:3000000:0000.0128: unknown main item tag 0x0 [ 529.846346][ T10] hid-generic 0000:3000000:0000.0128: unknown main item tag 0x0 [ 529.854029][ T10] hid-generic 0000:3000000:0000.0128: unknown main item tag 0x0 [ 529.861877][ T10] hid-generic 0000:3000000:0000.0128: unknown main item tag 0x0 [ 529.869711][ T10] hid-generic 0000:3000000:0000.0128: unknown main item tag 0x0 [ 529.877405][ T10] hid-generic 0000:3000000:0000.0128: unknown main item tag 0x0 [ 529.885101][ T10] hid-generic 0000:3000000:0000.0128: unknown main item tag 0x0 [ 529.892997][ T10] hid-generic 0000:3000000:0000.0128: unknown main item tag 0x0 [ 529.900710][ T10] hid-generic 0000:3000000:0000.0128: unknown main item tag 0x0 [ 529.908453][ T10] hid-generic 0000:3000000:0000.0128: unknown main item tag 0x0 [ 529.981741][ T10] hid-generic 0000:3000000:0000.0128: hidraw0: HID v0.00 Device [sy] on syz0 [ 530.157003][T23619] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6454'. [ 530.268567][T23630] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 530.282404][T23630] loop4: detected capacity change from 0 to 512 [ 530.298217][T23630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.324945][T23630] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 530.450708][ T10] hid-generic 0000:3000000:0000.0129: unknown main item tag 0x4 [ 530.458555][ T10] hid-generic 0000:3000000:0000.0129: unknown main item tag 0x2 [ 530.470561][ T10] hid-generic 0000:3000000:0000.0129: unknown main item tag 0x0 [ 530.478363][ T10] hid-generic 0000:3000000:0000.0129: unknown main item tag 0x0 [ 530.486135][ T10] hid-generic 0000:3000000:0000.0129: unknown main item tag 0x0 [ 530.494077][ T10] hid-generic 0000:3000000:0000.0129: unknown main item tag 0x0 [ 530.501784][ T10] hid-generic 0000:3000000:0000.0129: unknown main item tag 0x0 [ 530.509571][ T10] hid-generic 0000:3000000:0000.0129: unknown main item tag 0x0 [ 530.517462][ T10] hid-generic 0000:3000000:0000.0129: unknown main item tag 0x0 [ 530.525337][ T10] hid-generic 0000:3000000:0000.0129: unknown main item tag 0x0 [ 530.533037][ T10] hid-generic 0000:3000000:0000.0129: unknown main item tag 0x0 [ 530.540787][ T10] hid-generic 0000:3000000:0000.0129: unknown main item tag 0x0 [ 530.548477][ T10] hid-generic 0000:3000000:0000.0129: unknown main item tag 0x0 [ 530.556230][ T10] hid-generic 0000:3000000:0000.0129: unknown main item tag 0x0 [ 530.564428][ T10] hid-generic 0000:3000000:0000.0129: unknown main item tag 0x0 [ 530.572201][ T10] hid-generic 0000:3000000:0000.0129: unknown main item tag 0x0 [ 530.586903][ T10] hid-generic 0000:3000000:0000.0129: hidraw0: HID v0.00 Device [sy] on syz0 [ 530.701180][T22081] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.712672][T23586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 530.760221][T23586] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.060252][T23649] loop5: detected capacity change from 0 to 512 [ 531.069212][T23649] EXT4-fs: Ignoring removed oldalloc option [ 531.451954][T23649] EXT4-fs: Ignoring removed orlov option [ 531.479544][T23649] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 531.507521][T23649] EXT4-fs (loop5): orphan cleanup on readonly fs [ 531.542721][T23649] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6464: bg 0: block 248: padding at end of block bitmap is not set [ 531.562710][T23649] Quota error (device loop5): write_blk: dquota write failed [ 531.563942][T23670] Cannot find add_set index 0 as target [ 531.570729][T23649] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 531.588439][T23649] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6464: Failed to acquire dquot type 1 [ 531.623522][T23649] EXT4-fs (loop5): 1 truncate cleaned up [ 531.676195][T23649] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 531.696823][T23649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.164732][T23706] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 532.257821][T23706] loop4: detected capacity change from 0 to 512 [ 532.407118][T23706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.427624][T23706] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 532.499617][T22081] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.742710][T23738] xt_hashlimit: max too large, truncated to 1048576 [ 532.777636][T23745] xt_hashlimit: max too large, truncated to 1048576 [ 532.785381][ T3368] hid-generic 0000:3000000:0000.012A: unknown main item tag 0x4 [ 532.793098][ T3368] hid-generic 0000:3000000:0000.012A: unknown main item tag 0x2 [ 532.800891][ T3368] hid-generic 0000:3000000:0000.012A: unknown main item tag 0x0 [ 532.808593][ T3368] hid-generic 0000:3000000:0000.012A: unknown main item tag 0x0 [ 532.816343][ T3368] hid-generic 0000:3000000:0000.012A: unknown main item tag 0x0 [ 532.824037][ T3368] hid-generic 0000:3000000:0000.012A: unknown main item tag 0x0 [ 532.832022][ T3368] hid-generic 0000:3000000:0000.012A: unknown main item tag 0x0 [ 532.839774][ T3368] hid-generic 0000:3000000:0000.012A: unknown main item tag 0x0 [ 532.847544][ T3368] hid-generic 0000:3000000:0000.012A: unknown main item tag 0x0 [ 532.855359][ T3368] hid-generic 0000:3000000:0000.012A: unknown main item tag 0x0 [ 532.863054][ T3368] hid-generic 0000:3000000:0000.012A: unknown main item tag 0x0 [ 532.870812][ T3368] hid-generic 0000:3000000:0000.012A: unknown main item tag 0x0 [ 532.878518][ T3368] hid-generic 0000:3000000:0000.012A: unknown main item tag 0x0 [ 532.886283][ T3368] hid-generic 0000:3000000:0000.012A: unknown main item tag 0x0 [ 532.893998][ T3368] hid-generic 0000:3000000:0000.012A: unknown main item tag 0x0 [ 532.901796][ T3368] hid-generic 0000:3000000:0000.012A: unknown main item tag 0x0 [ 532.909493][ T3368] hid-generic 0000:3000000:0000.012A: unknown main item tag 0x0 [ 532.917223][ T3368] hid-generic 0000:3000000:0000.012A: unknown main item tag 0x0 [ 532.924987][ T3368] hid-generic 0000:3000000:0000.012A: unknown main item tag 0x0 [ 532.932764][ T3368] hid-generic 0000:3000000:0000.012A: unknown main item tag 0x0 [ 532.940498][ T3368] hid-generic 0000:3000000:0000.012A: unknown main item tag 0x0 [ 532.952261][T23749] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 532.966347][T23749] loop5: detected capacity change from 0 to 512 [ 532.991828][T23749] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.005601][T23749] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 533.014254][ T3368] hid-generic 0000:3000000:0000.012A: hidraw0: HID v0.00 Device [sy] on syz0 [ 533.081473][T22238] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.204036][T23756] loop2: detected capacity change from 0 to 512 [ 533.279823][T23756] EXT4-fs: Ignoring removed oldalloc option [ 533.291449][T23756] EXT4-fs: Ignoring removed orlov option [ 533.315668][T23756] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 533.337679][T23756] EXT4-fs (loop2): orphan cleanup on readonly fs [ 533.353991][T23756] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6503: bg 0: block 248: padding at end of block bitmap is not set [ 533.473929][T23756] Quota error (device loop2): write_blk: dquota write failed [ 533.482568][T23756] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 533.494029][T23756] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.6503: Failed to acquire dquot type 1 [ 533.677665][ T2959] hid-generic 0000:3000000:0000.012B: unknown main item tag 0x4 [ 533.685459][ T2959] hid-generic 0000:3000000:0000.012B: unknown main item tag 0x2 [ 533.693168][ T2959] hid-generic 0000:3000000:0000.012B: unknown main item tag 0x0 [ 533.700950][ T2959] hid-generic 0000:3000000:0000.012B: unknown main item tag 0x0 [ 533.708651][ T2959] hid-generic 0000:3000000:0000.012B: unknown main item tag 0x0 [ 533.716338][ T2959] hid-generic 0000:3000000:0000.012B: unknown main item tag 0x0 [ 533.724031][ T2959] hid-generic 0000:3000000:0000.012B: unknown main item tag 0x0 [ 533.731855][ T2959] hid-generic 0000:3000000:0000.012B: unknown main item tag 0x0 [ 533.739605][ T2959] hid-generic 0000:3000000:0000.012B: unknown main item tag 0x0 [ 533.747314][ T2959] hid-generic 0000:3000000:0000.012B: unknown main item tag 0x0 [ 533.755162][ T2959] hid-generic 0000:3000000:0000.012B: unknown main item tag 0x0 [ 533.762823][ T2959] hid-generic 0000:3000000:0000.012B: unknown main item tag 0x0 [ 533.770577][ T2959] hid-generic 0000:3000000:0000.012B: unknown main item tag 0x0 [ 533.778286][ T2959] hid-generic 0000:3000000:0000.012B: unknown main item tag 0x0 [ 533.786050][ T2959] hid-generic 0000:3000000:0000.012B: unknown main item tag 0x0 [ 533.793730][ T2959] hid-generic 0000:3000000:0000.012B: unknown main item tag 0x0 [ 533.801506][ T2959] hid-generic 0000:3000000:0000.012B: unknown main item tag 0x0 [ 533.809253][ T2959] hid-generic 0000:3000000:0000.012B: unknown main item tag 0x0 [ 533.816948][ T2959] hid-generic 0000:3000000:0000.012B: unknown main item tag 0x0 [ 533.824623][ T2959] hid-generic 0000:3000000:0000.012B: unknown main item tag 0x0 [ 533.832328][ T2959] hid-generic 0000:3000000:0000.012B: unknown main item tag 0x0 [ 533.847925][T23782] xt_hashlimit: max too large, truncated to 1048576 [ 533.848186][T23756] EXT4-fs (loop2): 1 truncate cleaned up [ 533.862844][ T2959] hid-generic 0000:3000000:0000.012B: hidraw0: HID v0.00 Device [sy] on syz0 [ 533.891727][T23756] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 533.914452][T23756] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.962830][T23790] Cannot find add_set index 0 as target [ 534.074730][T23787] loop4: detected capacity change from 0 to 512 [ 534.131238][T23787] EXT4-fs: Ignoring removed oldalloc option [ 534.154129][T23787] EXT4-fs: Ignoring removed orlov option [ 534.173681][T23787] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 534.205849][T23787] EXT4-fs (loop4): orphan cleanup on readonly fs [ 534.215516][T23806] 9pnet_fd: Insufficient options for proto=fd [ 534.242608][T23787] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6514: bg 0: block 248: padding at end of block bitmap is not set [ 534.303423][T23787] Quota error (device loop4): write_blk: dquota write failed [ 534.312132][T23787] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 534.323361][T23787] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.6514: Failed to acquire dquot type 1 [ 534.348682][T23787] EXT4-fs (loop4): 1 truncate cleaned up [ 534.370891][T23787] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 534.391109][T23787] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.407030][T23816] xt_hashlimit: max too large, truncated to 1048576 [ 534.414653][ T3414] hid-generic 0000:3000000:0000.012C: unknown main item tag 0x4 [ 534.422401][ T3414] hid-generic 0000:3000000:0000.012C: unknown main item tag 0x2 [ 534.430157][ T3414] hid-generic 0000:3000000:0000.012C: unknown main item tag 0x0 [ 534.437971][ T3414] hid-generic 0000:3000000:0000.012C: unknown main item tag 0x0 [ 534.445679][ T3414] hid-generic 0000:3000000:0000.012C: unknown main item tag 0x0 [ 534.453356][ T3414] hid-generic 0000:3000000:0000.012C: unknown main item tag 0x0 [ 534.461108][ T3414] hid-generic 0000:3000000:0000.012C: unknown main item tag 0x0 [ 534.468946][ T3414] hid-generic 0000:3000000:0000.012C: unknown main item tag 0x0 [ 534.476653][ T3414] hid-generic 0000:3000000:0000.012C: unknown main item tag 0x0 [ 534.484406][ T3414] hid-generic 0000:3000000:0000.012C: unknown main item tag 0x0 [ 534.492114][ T3414] hid-generic 0000:3000000:0000.012C: unknown main item tag 0x0 [ 534.499884][ T3414] hid-generic 0000:3000000:0000.012C: unknown main item tag 0x0 [ 534.507804][ T3414] hid-generic 0000:3000000:0000.012C: unknown main item tag 0x0 [ 534.515553][ T3414] hid-generic 0000:3000000:0000.012C: unknown main item tag 0x0 [ 534.523251][ T3414] hid-generic 0000:3000000:0000.012C: unknown main item tag 0x0 [ 534.531174][ T3414] hid-generic 0000:3000000:0000.012C: unknown main item tag 0x0 [ 534.538902][ T3414] hid-generic 0000:3000000:0000.012C: unknown main item tag 0x0 [ 534.546695][ T3414] hid-generic 0000:3000000:0000.012C: unknown main item tag 0x0 [ 534.554411][ T3414] hid-generic 0000:3000000:0000.012C: unknown main item tag 0x0 [ 534.562127][ T3414] hid-generic 0000:3000000:0000.012C: unknown main item tag 0x0 [ 534.569825][ T3414] hid-generic 0000:3000000:0000.012C: unknown main item tag 0x0 [ 534.592121][ T3414] hid-generic 0000:3000000:0000.012C: hidraw0: HID v0.00 Device [sy] on syz0 [ 534.670115][T23827] Cannot find add_set index 0 as target [ 534.693088][T23827] loop2: detected capacity change from 0 to 512 [ 534.762313][T23827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.775332][T23827] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 534.810237][T22772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.858990][T23841] 9pnet_fd: Insufficient options for proto=fd [ 535.040499][ T10] hid-generic 0000:3000000:0000.012D: unknown main item tag 0x4 [ 535.048347][ T10] hid-generic 0000:3000000:0000.012D: unknown main item tag 0x2 [ 535.056174][ T10] hid-generic 0000:3000000:0000.012D: unknown main item tag 0x0 [ 535.063952][ T10] hid-generic 0000:3000000:0000.012D: unknown main item tag 0x0 [ 535.071717][ T10] hid-generic 0000:3000000:0000.012D: unknown main item tag 0x0 [ 535.079421][ T10] hid-generic 0000:3000000:0000.012D: unknown main item tag 0x0 [ 535.087149][ T10] hid-generic 0000:3000000:0000.012D: unknown main item tag 0x0 [ 535.094888][ T10] hid-generic 0000:3000000:0000.012D: unknown main item tag 0x0 [ 535.102656][ T10] hid-generic 0000:3000000:0000.012D: unknown main item tag 0x0 [ 535.110528][ T10] hid-generic 0000:3000000:0000.012D: unknown main item tag 0x0 [ 535.118390][ T10] hid-generic 0000:3000000:0000.012D: unknown main item tag 0x0 [ 535.126131][ T10] hid-generic 0000:3000000:0000.012D: unknown main item tag 0x0 [ 535.133832][ T10] hid-generic 0000:3000000:0000.012D: unknown main item tag 0x0 [ 535.141609][ T10] hid-generic 0000:3000000:0000.012D: unknown main item tag 0x0 [ 535.149406][ T10] hid-generic 0000:3000000:0000.012D: unknown main item tag 0x0 [ 535.157126][ T10] hid-generic 0000:3000000:0000.012D: unknown main item tag 0x0 [ 535.164946][ T10] hid-generic 0000:3000000:0000.012D: unknown main item tag 0x0 [ 535.172697][ T10] hid-generic 0000:3000000:0000.012D: unknown main item tag 0x0 [ 535.180434][ T10] hid-generic 0000:3000000:0000.012D: unknown main item tag 0x0 [ 535.188168][ T10] hid-generic 0000:3000000:0000.012D: unknown main item tag 0x0 [ 535.195939][ T10] hid-generic 0000:3000000:0000.012D: unknown main item tag 0x0 [ 535.226281][T23864] lo speed is unknown, defaulting to 1000 [ 535.308047][T23862] xt_hashlimit: max too large, truncated to 1048576 [ 535.331456][ T3419] hid-generic 0000:3000000:0000.012E: unknown main item tag 0x4 [ 535.339253][ T3419] hid-generic 0000:3000000:0000.012E: unknown main item tag 0x2 [ 535.352421][T23863] xt_hashlimit: max too large, truncated to 1048576 [ 535.365659][ T3419] hid-generic 0000:3000000:0000.012E: unknown main item tag 0x0 [ 535.373431][ T3419] hid-generic 0000:3000000:0000.012E: unknown main item tag 0x0 [ 535.381143][ T3419] hid-generic 0000:3000000:0000.012E: unknown main item tag 0x0 [ 535.388967][ T3419] hid-generic 0000:3000000:0000.012E: unknown main item tag 0x0 [ 535.396680][ T3419] hid-generic 0000:3000000:0000.012E: unknown main item tag 0x0 [ 535.404358][ T3419] hid-generic 0000:3000000:0000.012E: unknown main item tag 0x0 [ 535.412049][ T3419] hid-generic 0000:3000000:0000.012E: unknown main item tag 0x0 [ 535.419752][ T3419] hid-generic 0000:3000000:0000.012E: unknown main item tag 0x0 [ 535.427637][ T3419] hid-generic 0000:3000000:0000.012E: unknown main item tag 0x0 [ 535.435334][ T3419] hid-generic 0000:3000000:0000.012E: unknown main item tag 0x0 [ 535.442998][ T3419] hid-generic 0000:3000000:0000.012E: unknown main item tag 0x0 [ 535.450711][ T3419] hid-generic 0000:3000000:0000.012E: unknown main item tag 0x0 [ 535.458491][ T3419] hid-generic 0000:3000000:0000.012E: unknown main item tag 0x0 [ 535.466202][ T3419] hid-generic 0000:3000000:0000.012E: unknown main item tag 0x0 [ 535.525900][T23868] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 535.576854][T23868] loop4: detected capacity change from 0 to 512 [ 535.632435][ T3419] hid-generic 0000:3000000:0000.012E: hidraw0: HID v0.00 Device [sy] on syz0 [ 535.691062][T23868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.772367][T23868] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 535.796147][ T10] hid-generic 0000:3000000:0000.012D: hidraw0: HID v0.00 Device [sy] on syz0 [ 535.870138][T22081] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.919165][T23883] 9pnet_fd: Insufficient options for proto=fd [ 536.008329][T23889] __nla_validate_parse: 3 callbacks suppressed [ 536.008346][T23889] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6551'. [ 536.123479][T23880] loop2: detected capacity change from 0 to 512 [ 536.139786][T23880] EXT4-fs: Ignoring removed oldalloc option [ 536.148854][T23880] EXT4-fs: Ignoring removed orlov option [ 536.159227][T23880] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 536.289267][T23880] EXT4-fs (loop2): orphan cleanup on readonly fs [ 536.318893][T23880] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6548: bg 0: block 248: padding at end of block bitmap is not set [ 536.345505][T23880] Quota error (device loop2): write_blk: dquota write failed [ 536.353451][T23880] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 536.364482][T23880] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.6548: Failed to acquire dquot type 1 [ 536.391241][T23880] EXT4-fs (loop2): 1 truncate cleaned up [ 536.409022][T23880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 536.450156][T23880] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.748647][T23923] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6565'. [ 536.868823][T23930] xt_hashlimit: max too large, truncated to 1048576 [ 536.878145][ T3394] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x4 [ 536.885880][ T3394] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x2 [ 536.893630][ T3394] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 536.901378][ T3394] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 536.909535][ T3394] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 536.917272][ T3394] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 536.925063][ T3394] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 536.932750][ T3394] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 536.940588][ T3394] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 536.948355][ T3394] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 536.956071][ T3394] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 536.963746][ T3394] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 536.971530][ T3394] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 536.979260][ T3394] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 536.987033][ T3394] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 536.994820][ T3394] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 537.002495][ T3394] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 537.010208][ T3394] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 537.017916][ T3394] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 537.025612][ T3394] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 537.033345][ T3394] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 537.119065][T23932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6566'. [ 537.178013][ T3394] hid-generic 0000:3000000:0000.012F: hidraw0: HID v0.00 Device [sy] on syz0 [ 537.561359][T23935] lo speed is unknown, defaulting to 1000 [ 538.119351][T23940] loop2: detected capacity change from 0 to 512 [ 538.152596][T23940] EXT4-fs: Ignoring removed oldalloc option [ 538.188508][T23940] EXT4-fs: Ignoring removed orlov option [ 538.225438][T23940] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 538.302612][T23940] EXT4-fs (loop2): orphan cleanup on readonly fs [ 538.369877][T23940] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6571: bg 0: block 248: padding at end of block bitmap is not set [ 538.408716][T23940] Quota error (device loop2): write_blk: dquota write failed [ 538.417616][T23940] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 538.428542][T23940] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.6571: Failed to acquire dquot type 1 [ 538.445654][T23962] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6579'. [ 538.523675][T23940] EXT4-fs (loop2): 1 truncate cleaned up [ 538.539861][T23940] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 538.562466][T23940] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.778210][T23973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6581'. [ 539.421732][ T29] audit: type=1326 audit(1752384282.259:15158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23989 comm="syz.4.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c122e929 code=0x7ffc0000 [ 539.565276][ T29] audit: type=1326 audit(1752384282.259:15159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23989 comm="syz.4.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f46c122e929 code=0x7ffc0000 [ 539.565372][ T29] audit: type=1326 audit(1752384282.259:15160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23989 comm="syz.4.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c122e929 code=0x7ffc0000 [ 539.565403][ T29] audit: type=1326 audit(1752384282.259:15161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23989 comm="syz.4.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46c122e929 code=0x7ffc0000 [ 539.565432][ T29] audit: type=1326 audit(1752384282.259:15162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23989 comm="syz.4.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c122e929 code=0x7ffc0000 [ 539.565536][ T29] audit: type=1326 audit(1752384282.259:15163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23989 comm="syz.4.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46c122e929 code=0x7ffc0000 [ 539.717768][T24007] lo speed is unknown, defaulting to 1000 [ 540.729868][T24016] loop2: detected capacity change from 0 to 512 [ 540.757973][T24016] EXT4-fs: Ignoring removed oldalloc option [ 540.765993][T24016] EXT4-fs: Ignoring removed orlov option [ 541.517776][T24025] lo speed is unknown, defaulting to 1000 [ 541.555629][T24016] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 541.616741][T24016] EXT4-fs (loop2): orphan cleanup on readonly fs [ 541.734125][ T10] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x4 [ 541.741960][ T10] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x2 [ 541.781379][T24016] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6600: bg 0: block 248: padding at end of block bitmap is not set [ 541.822125][ T10] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0 [ 541.830040][ T10] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0 [ 541.837813][ T10] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0 [ 541.845607][ T10] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0 [ 541.853278][ T10] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0 [ 541.861093][ T10] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0 [ 541.868796][ T10] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0 [ 541.876531][ T10] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0 [ 541.884203][ T10] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0 [ 541.892487][ T10] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0 [ 541.900202][ T10] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0 [ 541.907895][ T10] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0 [ 541.915607][ T10] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0 [ 541.923421][ T10] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0 [ 541.995650][T24016] __quota_error: 18 callbacks suppressed [ 541.995694][T24016] Quota error (device loop2): write_blk: dquota write failed [ 542.009198][T24034] loop4: detected capacity change from 0 to 512 [ 542.010381][T24016] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 542.010409][T24016] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.6600: Failed to acquire dquot type 1 [ 542.026525][T24016] EXT4-fs (loop2): 1 truncate cleaned up [ 542.050310][ T10] hid-generic 0000:3000000:0000.0130: hidraw0: HID v0.00 Device [sy] on syz0 [ 542.072403][T24034] EXT4-fs: Ignoring removed oldalloc option [ 542.083747][T24034] EXT4-fs: Ignoring removed orlov option [ 542.130870][T24034] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 542.178892][T24016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 542.207349][T24034] EXT4-fs (loop4): orphan cleanup on readonly fs [ 542.232908][T24016] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.254344][T24034] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6605: bg 0: block 248: padding at end of block bitmap is not set [ 542.312253][T24034] Quota error (device loop4): write_blk: dquota write failed [ 542.321143][T24034] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 542.332374][T24034] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.6605: Failed to acquire dquot type 1 [ 542.458753][T24034] EXT4-fs (loop4): 1 truncate cleaned up [ 542.513827][T24034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 542.594521][T24034] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.690577][ T29] audit: type=1326 audit(1752384285.509:15182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24058 comm="syz.0.6615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6945e929 code=0x7ffc0000 [ 542.714430][ T29] audit: type=1326 audit(1752384285.509:15183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24058 comm="syz.0.6615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fda6945e929 code=0x7ffc0000 [ 542.738092][ T29] audit: type=1326 audit(1752384285.509:15184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24058 comm="syz.0.6615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6945e929 code=0x7ffc0000 [ 542.743219][T24063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6614'. [ 542.761786][ T29] audit: type=1326 audit(1752384285.509:15185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24058 comm="syz.0.6615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda6945e929 code=0x7ffc0000 [ 542.794401][ T29] audit: type=1326 audit(1752384285.509:15186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24058 comm="syz.0.6615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6945e929 code=0x7ffc0000 [ 542.818117][ T29] audit: type=1326 audit(1752384285.509:15187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24058 comm="syz.0.6615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda6945e929 code=0x7ffc0000 [ 543.030615][T24067] Cannot find add_set index 0 as target [ 543.169807][T16759] ================================================================== [ 543.177957][T16759] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios [ 543.186493][T16759] [ 543.188840][T16759] write to 0xffff88811a1ac108 of 44 bytes by task 24084 on cpu 0: [ 543.196663][T16759] tty_set_termios+0xc0/0x8c0 [ 543.201372][T16759] set_termios+0x496/0x4e0 [ 543.205821][T16759] tty_mode_ioctl+0x379/0x5c0 [ 543.210522][T16759] n_tty_ioctl_helper+0x91/0x210 [ 543.215485][T16759] n_tty_ioctl+0x101/0x200 [ 543.219920][T16759] tty_ioctl+0x842/0xb80 [ 543.224188][T16759] __se_sys_ioctl+0xcb/0x140 [ 543.228811][T16759] __x64_sys_ioctl+0x43/0x50 [ 543.233428][T16759] x64_sys_call+0x19a8/0x2fb0 [ 543.238125][T16759] do_syscall_64+0xd2/0x200 [ 543.242646][T16759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.248558][T16759] [ 543.250916][T16759] read to 0xffff88811a1ac122 of 1 bytes by task 16759 on cpu 1: [ 543.258559][T16759] n_tty_receive_char_flow_ctrl+0x59/0x1a0 [ 543.264388][T16759] n_tty_lookahead_flow_ctrl+0xed/0x130 [ 543.269959][T16759] tty_port_default_lookahead_buf+0x8e/0xc0 [ 543.275882][T16759] flush_to_ldisc+0x281/0x360 [ 543.280588][T16759] process_scheduled_works+0x4cb/0x9d0 [ 543.286075][T16759] worker_thread+0x582/0x770 [ 543.290693][T16759] kthread+0x489/0x510 [ 543.294779][T16759] ret_from_fork+0xda/0x150 [ 543.299301][T16759] ret_from_fork_asm+0x1a/0x30 [ 543.304082][T16759] [ 543.306422][T16759] value changed: 0x13 -> 0x6b [ 543.311189][T16759] [ 543.313525][T16759] Reported by Kernel Concurrency Sanitizer on: [ 543.319689][T16759] CPU: 1 UID: 0 PID: 16759 Comm: kworker/u8:55 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 543.332482][T16759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 543.342571][T16759] Workqueue: events_unbound flush_to_ldisc [ 543.348454][T16759] ================================================================== [ 543.372963][T24087] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6624'. [ 543.395178][T24087] hsr_slave_0: left promiscuous mode [ 543.407958][T24087] hsr_slave_1: left promiscuous mode [ 543.535529][T24091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6626'.