last executing test programs: 23m29.869816901s ago: executing program 32 (id=1768): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@noinit_itable}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$eJzs3c9rFGcfAPDvTH6avO+bKC+8rz3UQCkKrYmJWqQUau5F7I9/IDVRxGgkSaFRwQjtsfTSQ6GnHmr/i1borfTQaw+9F0FK8VCL1C2zOxs3m93Nz/3h7ucDa+aZmczznTXfPM88eWY2gJ41kf2TRhyNiJtJxFjFtv7IN06U9nv8x51L2SuJQuH935O4czdZrzxWkn8dzb/577FIfk4jjvRtrXdl7da1ucXFheW8PLV6/ebUytqtk1evz11ZuLJwY+aNmXNnz5w9N31qX+c3UGPdN189Taa//fVCEufjWR5bdl7V+w3tq+bsPZuIQsmTyvXZ+3pun8fuFH+OlX9OnkuqV9CxLud5m+XJ/2Is+ir+N8fi03fbGhzQVIUkym0U0HOSOvn/42yj3wzDTYsHaJVyP6B8bV/rOnirtMm9EqAVHs2WBqRKuT8QEeX87y+NDcZwcWxg5HGyaZwniYj9jcyVZHX89MOFT7JX1BmHA5pj/V55lLu6/U+KuTkew8XSyON0c/6vFwpp3hPI1r+3x/onqsryH1pn/V5E/D9v/wdjx/mf5rlbzv8P91i//AcAAAAAAICD82A2Il6vNf8v3Zj/M1hj/s9oRJw/gPq3//tf+jBfSKp2HTyA6qGnPZqNeKvm/N+NOb7jfXnp38X5ALeTy1cXF05FxH8i4kQMDGXl6arjVs4QPvnZkS/r1V85/y97ZfWX5wLmR3rYX3Uj7vzc6tx+zxuIeHQv4qXi/N9j+ZrN83+y9j+p0f5n+X1zh3UcefX+xXrbts9/oFkKX0ccr9n+P+9uJ42fzzFV7A9MlXsFW718+/Pv6tVfnf9NOEWgjqz9H2mc/0NJ5fN6VnZ3/Owi/fRaf6He9r32/weTD/qiYhDg47nV1eXpiMHkna3rZ3YXM3SrPB+ORZ4vWf6feKXx+N9G/78iDw9FxPoO6hveZrv+P7RPlv/zjdv/8c3t/+4XZu6Pf1+v/os7av/PFNv0E/ka439QaevzOHaaoG0JFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABecGlE/CuSdHJjOU0nJyNGI+K/MZIuLq2svnZ56aMb89m2iPEYSMuf9DtWKiflz/8fryjPVJVPR8ThiPii71CxPHlpaXG+3ScPAAAAAAAAAAAAAAAAAAAAHWK0eM9/Yaj6/v/Mb33tjg5ouv78q3yH3tO/5+8sDB1oIEDL7T3/gRdYds2/i/wfaGYsQBvUz/8nTwtFLQ0HaCH9f+hde8x/fy6ALqD9h161wzG94WbHAbSD9h8AAAAAALrK4WMPfkkiYv3NQ8VXZjDfZrI/dLe03QEAbWMOL/Su/qV2RwC0i2t8INlY+qvmzf71Z/8nzQkIAAAAAAAAAAAAANji+FH3/0Ovanz/v7n90M0a3P9fK/k9LgC6SP2P/tD2Q7dzjQ9s19q7/x8AAAAAAAAAAAAAOsDwrWtzi4sLyytrL97C250Rxu4W1uc6IoxdLBTuRjTe51lzah+IiE55E5ZXsmhaVVf5ERxtPOU2/14CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2/BMAAP//cdEbCg==") 17m38.780096942s ago: executing program 33 (id=3671): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="16000000000000", @ANYRES8], 0x48) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x84c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000540)=ANY=[@ANYBLOB="6d616e676c650000000000000000000000000000000000000000000000000000d6000000a5ce5354297d050ded8969163b86c68c436949aa8259ab19fa3ffd5c935ec423f9b6cf81f9b543b70e9da94940a75cf5f51d4ba845af5bf71afc15a9fa89258329ead15f77ba1b1a6e7e70ba672b644d2a878ab3bddbf6d63fc639abb8b6b139b4761128a5b4f0e024d74010685da4c11abdae5a76c38f1ee1013cdbcbd1182219e7f688b0ebc786a2faa3173e9f4763589b5aea875c922d74ab78008a0f23aa717e876ef59446693e54b5ab6369d569b3faf7b40f964bb0428d6bed167bb23245bab111abb840a038385791b7f34fc4f754896cc96f"], &(0x7f0000000100)=0xfa) 4m11.957969119s ago: executing program 34 (id=11648): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xb, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 4m6.080923819s ago: executing program 35 (id=12150): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x2c0d, &(0x7f0000000400)={0x0, 0xc890, 0x4000, 0x4}, 0x0, 0x0) 3m15.530848568s ago: executing program 36 (id=13574): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001d00000000001400", @ANYRES64=r1], 0x38}}, 0x0) 3m15.489031122s ago: executing program 37 (id=13572): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 3m15.451926306s ago: executing program 38 (id=13577): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002e40)={0x20, r2, 0xc4fc9e906872338b, 0x70bd2e, 0x4, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3d}}}}}, 0x20}}, 0x40000) 3m15.320264959s ago: executing program 39 (id=13578): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x3000000, 0x0) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000b00)='Y', 0x1}], 0x1) r3 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='rxrpc_rx_ack\x00', r4}, 0x18) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200090f000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000004d20000020300000020050005002f8000000a00000000000000ff0100000000000000000000000000010000000000000000010018"], 0x78}}, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x30, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, 0x0, r1, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) r7 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r8 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r8, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x2) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES8=r6, @ANYRESHEX=r4, @ANYRES64=r7, @ANYRESDEC=r0, @ANYRESOCT=r2, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000001000000000000000f00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m2.408553324s ago: executing program 40 (id=13804): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x3000000, 0x0) r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000b00)='Y', 0x1}], 0x1) r2 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='rxrpc_rx_ack\x00', r3}, 0x18) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200090f000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000004d20000020300000020050005002f8000000a00000000000000ff0100000000000000000000000000010000000000000000010018"], 0x78}}, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x30, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, r0, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = accept4(0xffffffffffffffff, &(0x7f0000000200), &(0x7f00000002c0)=0x80, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r7 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r7, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x2) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES8=r5, @ANYRESHEX=r3, @ANYRES64=r6, @ANYRESOCT=r1, @ANYBLOB, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000001000000000000000f00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m2.402631804s ago: executing program 41 (id=13806): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) accept(0xffffffffffffffff, &(0x7f0000000080)=@hci, &(0x7f0000000000)=0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0) 3m1.865154217s ago: executing program 42 (id=13808): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 3m1.812870802s ago: executing program 43 (id=13809): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x2c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) 2m42.493063959s ago: executing program 4 (id=14372): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000580)={0x1}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) socket$packet(0x11, 0xa, 0x300) sendto$inet6(r0, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) 2m42.490892439s ago: executing program 4 (id=14374): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0x43403d05, 0x0) 2m42.404936598s ago: executing program 4 (id=14377): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000002000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000001500"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3001046, &(0x7f0000000580)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@errors_continue}, {@noquota}, {@data_err_ignore}, {@noblock_validity}, {@norecovery}, {@noauto_da_alloc}, {@errors_remount}, {@user_xattr}, {@sb={'sb', 0x3d, 0x5}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES8=0x0, @ANYRES8=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) unshare(0x26000400) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000040), &(0x7f0000019b40)}, 0x2) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r7 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@oldalloc, 0x22}, {@data_ordered}, {@noload}, {@grpid}, {@oldalloc, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@oldalloc}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) stat(0x0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="040094807a026c57d2654d115e528c1459241cdf02597f14d35c3655073c5f407b4160b64e80e167c709d80d9da587820eeb0f3c363a773f519c2717597d2217f73d756a1e5262327a0d6705cffb6119d2df818584899aaf8d7b874dbb99330a6d2593829a3125c105c65840af5555000d003f0026e4b56b1866ada1d6000000ae69a5084963450371edc84dc99933e5f3798214db2bbd9046f0ccf707e29850c523bbf617b1d7ef1a551fb4d16bc02c3b80b31afd787c9d7b26e5ddbb196f76b5ae845fa547821e75e7ce9e57909e40c4879551d2f2238d4b261e66380a5ae73b551539b77a6588ca710abc8bcf5659e97a7c436980198477bba636c008a123467d4ebde947f09e3e18471413aacf4976b500"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) r11 = getgid() lchown(&(0x7f0000000040)='./file0\x00', r10, r11) r12 = getegid() statx(r7, &(0x7f00000004c0)='./file0\x00', 0x6000, 0xcdc, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) lsetxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000680)={{}, {0x1, 0x1}, [{0x2, 0x5, r8}], {0x4, 0x3}, [{0x8, 0x0, r11}, {0x8, 0x2, r12}, {0x8, 0x3, r13}, {}], {0x10, 0x3}, {0x20, 0x2}}, 0x4c, 0x1) r14 = fcntl$getown(0xffffffffffffffff, 0x9) r15 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000740)={{0x2, 0x0, 0x0, 0x0, r12, 0x34, 0x9}, 0x9, 0x0, 0x1, 0x5, r14, r15, 0x7}) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) 2m42.370618211s ago: executing program 4 (id=14381): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000"], 0x48) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r5, r6, 0x5, 0x0, @void}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r5, r6, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x3, &(0x7f0000000680)=@raw=[@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x61}], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0xff, &(0x7f0000000380)=""/255, 0x41000, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xd81, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000500)=[{0x7ff, 0x5, 0x10, 0x6}, {0x2, 0x4, 0xa, 0xc}, {0x3, 0x3, 0x0, 0xa}, {0x5, 0x3, 0xa, 0xa}, {0x2, 0x5, 0x5, 0x1e}, {0x8, 0x5}], 0x10, 0x3ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'veth0_to_bond\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x2}}) write(r3, &(0x7f00000004c0)="2700000014000704000000000000000011000100f5fe0012020000000000000000000039000500", 0x27) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000700)=@sack_info={0x0, 0xfffffffd, 0x7}, &(0x7f0000000740)=0xc) fcntl$dupfd(r0, 0x0, r0) 2m41.939008424s ago: executing program 6 (id=14395): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000040)="03", 0x1}], 0x1}], 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 2m41.88062224s ago: executing program 6 (id=14398): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m41.726517414s ago: executing program 6 (id=14406): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000002000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000001500"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3001046, &(0x7f0000000580)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@errors_continue}, {@noquota}, {@data_err_ignore}, {@noblock_validity}, {@norecovery}, {@noauto_da_alloc}, {@errors_remount}, {@user_xattr}, {@sb={'sb', 0x3d, 0x5}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES8=0x0, @ANYRES8=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) unshare(0x26000400) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000040), &(0x7f0000019b40)}, 0x2) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r7 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@oldalloc, 0x22}, {@data_ordered}, {@noload}, {@grpid}, {@oldalloc, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@oldalloc}]}, 0xfe, 0x44e, &(0x7f0000000900)="$eJzs3M1vG0UbAPDHdpw0bfMmbykfDS0ECiLiI2nSD3rgUgQSB5CQ4FDEKSRpFeo2qAkSrSIIHMIRVeKOOCLxF3ChXBBwQuIKd4QUoVwonIzW3k3dxE7ixIlL/ftJm8x4xpp5dnfs8azXAXSsoeRPLuJgRPwaEf3V7J0Vhqr/bq0sTP69sjCZi3L5jT9zlXp/rSxMZlWz5x2oZsrlDdpdejtiolSavprmR+cvvzc6d+36czOXJy5OX5y+Mn727KmTx7rPjJ9uSZx9SV8HP5w9euSVt268Nnn+xjs/fp3092BaXhtHqwxV925dT7a6sTbrq0nnutrYEZpSiIjkcBUr478/CtG7WtYfL3/S1s4Bu6pczpd7GhcvloF7WDJRBzpR9kaffP7Ntj2aetwVls/F6jrGrXSrlnRFPq1TTD8j7YahiDi/+M8XyRa7tA4BAFDr5rmIeLbe/C8fD9TU+196bWggIv4fEYci4r6IOBwR90dU6j4YEQ812f7aKyTr5z/l/m0FtkXJ/O+F9NrWnfO/bPYXA4U011eJv5i7MFOaPpHuk+Eo9iT5sQ3a+O6lXz5rVFY7/0u2pP1sLpj244+uNQt0UxPzEzuJudbyxxGDXfXiz63OeZP58ZGIGNxmGzNPf3W0Udnm8W+gBZPy8pcRT1WP/2KsiT+Ta3h9cuz5M+OnR/dFafrEaHZWrPfTz0uvN2p/R/G3wPLNcuyve/6vxj+Q2xcxd+36pcr12rnm21j67dOGn2m2e/53596spLvTxz6YmJ+/OhbRnXt1/ePjt5+b5bP6yfk/fLz++D8Ut/fEwxGRnMTHIuKRiHg07ftjEfF4RBzfIP4fXnzi3ebj32BVvoWS+Kc2O/5Re/ybTxQuff9N8/FnkuN/qpIaTh/ZyuvfVju4k30HAAAA/xX5ynfgc/mR1XQ+PzJS/Q7/4difL83OzT9zYfb9K1PV78oPRDGfrXT116yHjqVrw1l+fE3+ZLpu/Hmht5IfmZwtTbU7eOhwBxqM/8TvhXb3Dth17teCzmX8Q+cy/qFzGf/QuYx/6Fz1xv9HbegHsPc2ef/v3at+AHvP/B86l/EPncv4h47U8N74/I5u+ZdoU+Lb7p39VsPWE5G/S0K+ZxLFqFvUteUfs9hmoqduUbtfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//j57jFA==") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) stat(0x0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYBLOB="cc0200003100000425bd7000fddbdf25d2004b8090e985c10e41bc16c3afdfa48f5504b1be674defb8e523ca931fc47fca0761f089f12dee7390f97c1afc9919b1fe48e849ff8dfba904c78d93262ae3d33f0064ebf13671c70daa79cc0fe13e298fd364e11960d535c26097d135265e7942c4c5db720b1846c07b77ed5d954b166fd8b48c9e0f6ca471ddfcbb5f163f777786f7a3fbfa7733802ee8c4a951358fe78e1ef7f4dbe179e9502c3354b1cebef86cef6a5c32967a223845ba9396fced3f604240981e8f247067e1349e286bc6c8269ebede928867184559936b04001380000072f367e932248bbb5f84927c213d001b02bcf2d2bd5b90abb49e35b671d5cc9e8646e4ecaf6db0c14b26d2c061e2895d84e85ee2272e330857cf5816d5761dcdb9cbd0815823a9e2e08d59f3a8cac38f824e82d6a380359c14f0b327fd5004cfcb9ba79164d762baff997f2fd16507defa04591b820f92c60d5c85e8eab1cc5c87f6a6027e19ea6adec8a708b47f58365690e1", @ANYRES32=r10, @ANYBLOB="040094807a026c57d2654d115e528c1459241cdf02597f14d35c3655073c5f407b4160b64e80e167c709d80d9da587820eeb0f3c363a773f519c2717597d2217f73d756a1e5262327a0d6705cffb6119d2df818584899aaf8d7b874dbb99330a6d2593829a3125c105c65840af5555000d003f0026e4b56b1866ada1d6000000ae69a5084963450371edc84dc99933e5f3798214db2bbd9046f0ccf707e29850c523bbf617b1d7ef1a551fb4d16bc02c3b80b31afd787c9d7b26e5ddbb196f76b5ae845fa547821e75e7ce9e57909e40c4879551d2f2238d4b261e66380a5ae73b551539b77a6588ca710abc8bcf5659e97a7c436980198477bba636c008a123467d4ebde947f09e3e18471413aacf4976b500"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) r11 = getgid() lchown(&(0x7f0000000040)='./file0\x00', r10, r11) r12 = getegid() statx(r7, &(0x7f00000004c0)='./file0\x00', 0x6000, 0xcdc, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) lsetxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000680)={{}, {0x1, 0x1}, [{0x2, 0x5, r8}], {0x4, 0x3}, [{0x8, 0x0, r11}, {0x8, 0x2, r12}, {0x8, 0x3, r13}, {}], {0x10, 0x3}, {0x20, 0x2}}, 0x4c, 0x1) r14 = fcntl$getown(0xffffffffffffffff, 0x9) r15 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000740)={{0x2, 0x0, 0x0, 0x0, r12, 0x34, 0x9}, 0x9, 0x0, 0x1, 0x5, r14, r15, 0x7}) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) 2m41.632454884s ago: executing program 6 (id=14412): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) 2m41.57629886s ago: executing program 6 (id=14415): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x110000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r2 = syz_open_procfs(0x0, &(0x7f0000006300)='net/dev_mcast\x00') utimensat(r2, 0x0, 0x0, 0x0) 2m41.496247137s ago: executing program 4 (id=14417): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x4002}, 0x50) 2m41.37412801s ago: executing program 6 (id=14419): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f00000019c0)=""/4097, 0x1001) shutdown(0xffffffffffffffff, 0x0) 2m41.361444151s ago: executing program 44 (id=14418): r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000080)=ANY=[], 0x48) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x1, 0x36f, &(0x7f0000000a40)="$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") socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES32=r4], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c0001", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x40801}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) rt_sigaction(0x16, &(0x7f0000000100)={&(0x7f0000000280)="2e36f76538d3d7c4c24bf56f00266583cea8c441697cb54b0000006566470f3a0c7d150066470f382a88c97e0000e100672e6666400f73f10d6466420f6d920d000000", 0xb9bed387b65b4a9f, &(0x7f0000000040)="6467460ffbdac4429dbc72006ef341f7cc5f4c00000ff8fec4c2abf7646d008fe9a0978f00000000c421fdeddcc4612ddc4dc2362666f244a5", {[0xc]}}, &(0x7f0000000200)={&(0x7f0000000180)="c461a45819f2f00fb00fc401f0573584000000d37d0a66430fe507460f0f271dc44145769ccabb00000067460f38064a0fd9fac4617c5459a4", 0x0, &(0x7f0000000300)="c441fbf0580ac4c2b1b80b8f49f801ddf047815cf0f0c2000000c4a1c9fa4cc700c4a1f911a086250000c4c11c5d7d4ac462d9b6a84147d5e9660f561d03000100c461e17d3df5ffffff"}, 0x8, &(0x7f0000000380)) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r7, 0x2284, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 2m41.321150445s ago: executing program 45 (id=14419): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f00000019c0)=""/4097, 0x1001) shutdown(0xffffffffffffffff, 0x0) 2m41.321027075s ago: executing program 4 (id=14422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e65766530"], 0x110}}, 0x0) 2m40.492424797s ago: executing program 46 (id=14422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e65766530"], 0x110}}, 0x0) 1m42.208407066s ago: executing program 3 (id=15900): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1m42.208203146s ago: executing program 7 (id=15901): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 1m42.139434883s ago: executing program 7 (id=15904): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{r0}, &(0x7f0000000300), &(0x7f0000000340)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) 1m42.124659664s ago: executing program 3 (id=15906): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c01000015000a001800feffffff09000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) 1m42.086727798s ago: executing program 3 (id=15907): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000004000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) socket$inet6_icmp_raw(0xa, 0x3, 0x87) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)=ANY=[]) 1m42.082105339s ago: executing program 7 (id=15908): setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000001180)={0x88, 0x0, 0x1, 0x5}, 0x8) 1m42.047084132s ago: executing program 3 (id=15910): r0 = socket(0x1, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000280)=0xb, 0x4) r1 = io_uring_setup(0x5ffd, &(0x7f0000000080)={0x0, 0x3551, 0x800, 0x1, 0x20000115}) close_range(r1, r1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) 1m42.046659112s ago: executing program 7 (id=15911): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 1m41.992825347s ago: executing program 7 (id=15912): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m41.885006778s ago: executing program 7 (id=15914): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) mq_timedsend(r1, &(0x7f0000000600)='m', 0x1, 0x6, 0x0) 1m41.197752426s ago: executing program 3 (id=15945): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m41.146064231s ago: executing program 2 (id=15957): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) pread64(r0, &(0x7f00000001c0)=""/188, 0xbc, 0x0) 1m41.05288629s ago: executing program 3 (id=15949): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) 1m40.658248259s ago: executing program 2 (id=15963): prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1010040, &(0x7f00000003c0)={[{@noquota}, {@debug}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@resgid}]}, 0x3, 0x4eb, &(0x7f0000001fc0)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000400)='./file1\x00', 0x20008a, &(0x7f00000004c0)={[{@journal_async_commit}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@stripe={'stripe', 0x3d, 0xe}}, {@minixdf}, {@dioread_nolock}, {@noinit_itable}]}, 0x1, 0x452, &(0x7f0000000bc0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee5", 0x2e}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) r0 = msgget$private(0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r2, 0x1) splice(r2, 0x0, r1, 0x0, 0x2, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffde}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYRES8=r3], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) msgsnd(r0, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) msgrcv(r0, &(0x7f0000001080), 0x8, 0x2, 0x3000) io_uring_setup(0x4539, &(0x7f0000000040)={0x0, 0x81fc, 0x8000, 0x3, 0x48}) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000540)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1b8, 0x7}, 0x0, 0x0, 0x6, 0x2, 0xffffffff, 0xd5, 0x6, 0x2, 0xfffe, 0x9}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000005, "ffe300", "e4a18560d99f00", 0x800000}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a80000008500000005008db8d23e7d6c6da19cb60aef9c84b980000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', r4, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) 1m40.469440438s ago: executing program 2 (id=15956): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000780)={r0, r3, 0x2e, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x800}}, 0x30) 1m40.271506007s ago: executing program 2 (id=15959): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1m40.157166019s ago: executing program 2 (id=15961): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m39.811524993s ago: executing program 2 (id=15975): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x14, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x67a}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x9}, 0x2000, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu<20\t||') 1m26.823005787s ago: executing program 47 (id=15914): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) mq_timedsend(r1, &(0x7f0000000600)='m', 0x1, 0x6, 0x0) 1m25.840211884s ago: executing program 48 (id=15949): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) 1m24.335716043s ago: executing program 49 (id=15975): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x14, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x67a}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x9}, 0x2000, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu<20\t||') 1.212711s ago: executing program 0 (id=18863): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x4040) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2) 1.198534541s ago: executing program 8 (id=18865): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000940)={0x0, 0x2421, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r1, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r2, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 1.073870523s ago: executing program 1 (id=18872): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x60, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) accept(r0, 0x0, 0x0) 1.023243989s ago: executing program 8 (id=18877): socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xd, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000400)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r3, &(0x7f0000000000), &(0x7f0000000500)=""/216}, 0x20) 1.022466049s ago: executing program 0 (id=18878): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x56, r2}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={@private1, 0x1c, r2}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 941.043787ms ago: executing program 8 (id=18880): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() 812.982939ms ago: executing program 0 (id=18883): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) write$cgroup_subtree(r2, 0x0, 0x32600) 812.705859ms ago: executing program 5 (id=18884): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r5, {0x1}, {0xffff, 0xffff}, {0xfff1, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 763.084884ms ago: executing program 0 (id=18885): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20008050) 735.324697ms ago: executing program 5 (id=18886): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000940)={0x0, 0x2421, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r1, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r2, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 663.209374ms ago: executing program 0 (id=18887): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x9d}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=@newtfilter={0xcc, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r2, {0x4, 0x2}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x3, 0x9, 0x8, 0x2, 0x1, 0x2, 0x9, 0x5, [{0x10000, 0x1ff, 0x500, 0x9ef}, {0x3, 0x5, 0xd1e, 0x2}, {0xd, 0x9, 0xffff, 0x1}, {0xfffffff8, 0x8, 0x2b0, 0x7}, {0x7ff, 0x7, 0x80, 0x1e87}, {0x7, 0x7, 0x9, 0x8a}, {0x4, 0x1, 0x513, 0x1}, {0x97, 0x7, 0x8001, 0x5}]}}, @TCA_U32_LINK={0x8, 0x3, 0x6}]}}]}, 0xcc}}, 0x20040074) 662.677494ms ago: executing program 5 (id=18888): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@empty, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r1) socket(0x10, 0x3, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='I', 0x1, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x2a) 646.452206ms ago: executing program 5 (id=18889): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x4040) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2) 623.033778ms ago: executing program 0 (id=18891): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 622.541248ms ago: executing program 5 (id=18892): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e22, 0xc, @empty, 0x1}}, 0x6, 0x3}, &(0x7f0000000180)=0x90) 553.056905ms ago: executing program 5 (id=18893): getrandom(&(0x7f0000000bc0)=""/288, 0x33, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) read(r0, &(0x7f0000032440)=""/102364, 0x18fdc) 437.650096ms ago: executing program 9 (id=18895): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000340)=0x7, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x54, 0x6}, 0x9c) close(0x3) 365.018094ms ago: executing program 9 (id=18896): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_io_uring_setup(0x14fe, &(0x7f0000000640)={0x0, 0xcf74, 0x0, 0x3, 0xbffffffa}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x6, &(0x7f0000000400)=0xd, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x1a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x5fff}) io_uring_enter(r0, 0x1c3a, 0x106a, 0x22, 0x0, 0x0) r3 = creat(0x0, 0x14) close(r3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 196.51719ms ago: executing program 9 (id=18897): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x2000414, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000540)="$eJzs3MFqE18Ux/Hzb/pv0pQ2EURQUA+60c3QxgfQIC2IAaU2RV0IUzvRkDEpM0MlIjYbcetzFJfuBPUFuhE37t0VQXDThTjiTKZN2rSmbdLE9PuBck9y7o+5bdNyUuis3339pFRwjYLpyVBCZUikJhsi6T9V3X/1dSioR6RRTS6P/fhy9s69+zezudz0rOpMdu5KRlUnzr9/+vzNhY/e2PzbiXdxWUs/WP+e+bp2au30+q+5x0VXi66WK56aulCpeOaCbeli0S0Zqrdty3QtLZZdy2nqF+zK0lJVzfLieHLJsVxXzXJVS1ZVvYp6TlXNR2axrIZh6HhSjrfhNvbkV2dnzeyubT/W0ROh60ZbPek42VrrZn71CM4EAAD6zN7zfzjr7z7/5+bDtcPzvwjzf5fUmh79Zf7HQHCcrJms//w2Y/4HAAAAAAAAAAAAAAAAAAAAAOBfsOH7Kd/3U9EafcRFJCEi0eNenxPdccDv/9UeHRcd1vCPewkR+9VyfjkfrmE/W5Ci2GLJpKTkZ/B6qAvrmRu56UkNpOWDvVLPryznYxKP8pF0q/y5E1NhXpvz/0uy8foZScnJ1tfPtMyPyKWLDXlDUvLpoVTElsXgdb2VfzGlev1Wblt+NNgHAAAAAMAgMHTTjvfvQT/YkJCd/TC/j78PbHt/PSxn2rlFJQAAAAAAODS3+qxk2rblHKCIi8gh4oNaxKQvjrGtuCYifXCMoyoSIhI+oweJf9uMt5Xy29gzLCI9/7Lso+j1byYAAAAAnbY19O8j9PllF08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDx0+79wKL9O1pRY494w+ViR/4JAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH3kdwAAAP//R8IgDA==") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r1, 0x2004, 0x0) 195.627371ms ago: executing program 1 (id=18898): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b55081f0000000000009bc400", "ddeacfc4", "46b0dc72b7b1d30e"}, 0x38) 172.602963ms ago: executing program 9 (id=18899): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10420, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000bc0)="$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") 145.961265ms ago: executing program 1 (id=18900): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000940)={0x0, 0x2421, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r1, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r2, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 101.06604ms ago: executing program 9 (id=18901): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0xc0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f646f74732c646973636172640002000065742c6e6f646f58732c636865636b3d7374726963742c000000000000a4ed6f646f74732c6e6f646f74732c646f74732c6e6f646f74732c00"], 0x1, 0x23d, &(0x7f0000000a40)="$eJzs3cFq1EAcBvB/220be7Fn8RDw4qmobxBkBTEgrOSgJwPVSytCeome9jF8Bh/Jx+ipt4hN6NZUPUjadJvfD5Z87MfAzGVnDzO77x9+Ojr8fPKx+fEtkiSNWcQyziL2YzO2orXRPTfP805ctgwAYN0sFmU29hwY0MbVt6oqK7cjYvdKU3y/mUkBAAAAAAAAAAAwNOf/AWB6nP+/+6oqK/e672+/c/4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGM9Z09xv/vEae34AwPDs/wAwPfZ/AJge+z8ATM+bt+9eZXk+X6RpEnG6rIu6aJ9t/+JlPn+SnttfjTqt62K7y/n8adun/X6vG//sj/1OPH7U9r+656/zXr8bh9e9eAAAAAAAAAAAAAAAAAAAALglDtILvfv9W21/8Le+TZd+H6B3f38WD2Y3tgwAAAAAAAAAAAAAAAAAAABYaydfvh6Vx8cfKkG4CPfiP0YlcTsmLwwSxv5kAgAAAAAAAAAAAAAAAACA6Vld+h17JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwntX//19fGHuNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDT8DAAA//8GmZGk") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x21) 100.69969ms ago: executing program 8 (id=18902): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160) 100.44458ms ago: executing program 9 (id=18903): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c000000000000000000e8ff060000004404730001000000"], 0x40}, 0x0) read$char_usb(r3, &(0x7f0000000180)=""/147, 0xfdef) 89.805101ms ago: executing program 8 (id=18904): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r1) 59.671074ms ago: executing program 8 (id=18905): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setxattr$security_ima(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=ANY=[], 0x700, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xea, 0x7, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x9c7, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) mlockall(0x3) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x400000ffc000) brk(0x400000ffc020) 58.839834ms ago: executing program 1 (id=18915): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x96) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "000000000200", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e0003f100000100"}, 0x28) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x1, 0x1}, 0x26) 1.08099ms ago: executing program 1 (id=18906): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 0s ago: executing program 1 (id=18917): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x81, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) kernel console output (not intermixed with test programs): m_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1617.318000][ T1089] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1617.327253][ T1089] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1617.363110][T19004] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1617.377066][ T29] audit: type=1400 audit(1617.284:125849): avc: denied { ioctl } for pid=20180 comm="syz.1.16475" path="/109/file1/file1" dev="loop1" ino=18 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1617.416827][T20189] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1617.438687][T20191] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16477'. [ 1617.515445][ T29] audit: type=1400 audit(1617.504:125850): avc: denied { mount } for pid=20196 comm="syz.1.16481" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1617.609733][T20205] loop8: detected capacity change from 0 to 256 [ 1617.618030][ T29] audit: type=1326 audit(1617.614:125851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20170 comm="syz.5.16468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b3a3eec9 code=0x7ffc0000 [ 1617.641644][ T29] audit: type=1326 audit(1617.614:125852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20170 comm="syz.5.16468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b3a3eec9 code=0x7ffc0000 [ 1617.686415][ T29] audit: type=1326 audit(1617.614:125853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20170 comm="syz.5.16468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fe0b3a3eec9 code=0x7ffc0000 [ 1617.709892][ T29] audit: type=1326 audit(1617.614:125854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20170 comm="syz.5.16468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b3a3eec9 code=0x7ffc0000 [ 1617.733290][ T29] audit: type=1326 audit(1617.614:125855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20170 comm="syz.5.16468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b3a3eec9 code=0x7ffc0000 [ 1617.756610][ T29] audit: type=1326 audit(1617.614:125856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20170 comm="syz.5.16468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0b3a3eec9 code=0x7ffc0000 [ 1617.780354][ T29] audit: type=1326 audit(1617.614:125857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20170 comm="syz.5.16468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b3a3eec9 code=0x7ffc0000 [ 1617.903866][T20225] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1617.912274][T20225] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1618.103574][T20249] loop8: detected capacity change from 0 to 128 [ 1618.182119][T20255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16506'. [ 1618.265954][T20265] wireguard: wg1: Could not create IPv4 socket [ 1618.298650][T20237] loop1: detected capacity change from 0 to 32768 [ 1618.362335][T20237] loop1: p1 p2 p3 < p5 p6 > [ 1618.373159][T20237] loop1: p2 size 16775168 extends beyond EOD, truncated [ 1618.394292][T20237] loop1: p5 start 4294970168 is beyond EOD, truncated [ 1618.664522][T20316] loop9: detected capacity change from 0 to 512 [ 1618.671832][T20316] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1618.671871][T20318] program syz.1.16535 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1618.701435][T20316] EXT4-fs error (device loop9): __ext4_fill_super:5512: inode #2: comm syz.9.16534: inode has both inline data and extents flags [ 1618.726785][T20316] EXT4-fs (loop9): get root inode failed [ 1618.732465][T20316] EXT4-fs (loop9): mount failed [ 1618.750084][T20316] loop9: detected capacity change from 0 to 512 [ 1618.757586][T20316] EXT4-fs: Mount option(s) incompatible with ext3 [ 1618.797976][T20329] loop1: detected capacity change from 0 to 512 [ 1618.804990][T20329] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1618.818973][T20329] EXT4-fs error (device loop1): __ext4_fill_super:5512: inode #2: comm syz.1.16539: inode has both inline data and extents flags [ 1618.832922][T20329] EXT4-fs (loop1): get root inode failed [ 1618.838752][T20329] EXT4-fs (loop1): mount failed [ 1618.848593][T20329] loop1: detected capacity change from 0 to 512 [ 1618.855464][T20329] EXT4-fs: Mount option(s) incompatible with ext3 [ 1618.944958][T20337] loop9: detected capacity change from 0 to 512 [ 1618.984779][T20337] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1619.010992][T14580] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1619.065571][T20351] loop1: detected capacity change from 0 to 8192 [ 1619.444969][T20360] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1619.544589][T20369] loop8: detected capacity change from 0 to 512 [ 1619.551973][T20369] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1619.587587][T20369] EXT4-fs error (device loop8): __ext4_fill_super:5512: inode #2: comm syz.8.16551: inode has both inline data and extents flags [ 1619.587818][T20369] EXT4-fs (loop8): get root inode failed [ 1619.587836][T20369] EXT4-fs (loop8): mount failed [ 1619.630332][T20369] loop8: detected capacity change from 0 to 512 [ 1619.636723][T20369] EXT4-fs: Mount option(s) incompatible with ext3 [ 1619.689745][T20375] loop5: detected capacity change from 0 to 8192 [ 1619.898451][T20378] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 1619.898471][T20378] FAT-fs (loop5): Filesystem has been set read-only [ 1619.906815][T20375] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2075) [ 1619.906995][T20375] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2075) [ 1620.022017][T14550] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2075) [ 1620.073496][T20393] netlink: 76 bytes leftover after parsing attributes in process `syz.1.16561'. [ 1620.089148][T20397] loop9: detected capacity change from 0 to 512 [ 1620.122850][T20403] netlink: 'wÞ£ÿ': attribute type 1 has an invalid length. [ 1620.130319][T20403] netlink: 5452 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 1620.157622][T20397] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1620.174533][T20410] netlink: 24 bytes leftover after parsing attributes in process `syz.5.16566'. [ 1620.197720][T20410] IPVS: Error connecting to the multicast addr [ 1620.260208][T14580] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1620.283370][T20422] loop5: detected capacity change from 0 to 512 [ 1620.299372][T20422] EXT4-fs: Ignoring removed i_version option [ 1620.306144][T20422] EXT4-fs: Ignoring removed bh option [ 1620.325385][T20422] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1620.379643][T20434] loop8: detected capacity change from 0 to 512 [ 1620.386135][T20432] loop1: detected capacity change from 0 to 8192 [ 1620.396191][T14550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1620.405470][T20434] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1620.427984][T20434] EXT4-fs error (device loop8): __ext4_fill_super:5512: inode #2: comm syz.8.16578: inode has both inline data and extents flags [ 1620.477065][T20434] EXT4-fs (loop8): get root inode failed [ 1620.482772][T20434] EXT4-fs (loop8): mount failed [ 1620.538032][T20434] loop8: detected capacity change from 0 to 512 [ 1620.546545][T20454] loop5: detected capacity change from 0 to 1024 [ 1620.554172][T20454] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1620.566637][T20434] EXT4-fs: Mount option(s) incompatible with ext3 [ 1620.574676][T20454] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1620.584967][T20454] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1620.592579][T20454] EXT4-fs error (device loop5): ext4_free_blocks:6706: comm syz.5.16585: Freeing blocks not in datazone - block = 0, count = 4096 [ 1620.606905][T20454] EXT4-fs (loop5): 1 orphan inode deleted [ 1620.613314][T20459] netlink: 'syz.9.16587': attribute type 12 has an invalid length. [ 1620.622302][T20454] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1620.673049][T14550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1620.828658][T20487] loop5: detected capacity change from 0 to 1024 [ 1620.840578][T20487] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1620.866321][T20490] netlink: 'syz.8.16601': attribute type 1 has an invalid length. [ 1620.874225][T20490] netlink: 5452 bytes leftover after parsing attributes in process `syz.8.16601'. [ 1620.922648][T14550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1621.001631][T20510] loop5: detected capacity change from 0 to 512 [ 1621.016733][T20510] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1621.041422][T20510] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz.5.16610: inode has both inline data and extents flags [ 1621.071003][T20510] EXT4-fs (loop5): get root inode failed [ 1621.076835][T20510] EXT4-fs (loop5): mount failed [ 1621.112475][T20510] loop5: detected capacity change from 0 to 512 [ 1621.123136][T20510] EXT4-fs: Mount option(s) incompatible with ext3 [ 1621.225040][T20542] loop0: detected capacity change from 0 to 128 [ 1621.231897][T20540] loop8: detected capacity change from 0 to 512 [ 1621.257316][T20540] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1621.296869][T20551] loop0: detected capacity change from 0 to 2048 [ 1621.327083][T18983] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1621.346115][T20557] atomic_op ffff88818671f128 conn xmit_atomic 0000000000000000 [ 1621.355888][T20551] Alternate GPT is invalid, using primary GPT. [ 1621.362229][T20551] loop0: p1 p2 p3 [ 1621.365967][T20551] loop0: partition table partially beyond EOD, truncated [ 1621.367132][T20561] loop8: detected capacity change from 0 to 512 [ 1621.399778][T20561] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1621.442494][T20565] loop9: detected capacity change from 0 to 512 [ 1621.452114][T20565] EXT4-fs: dax option not supported [ 1621.474553][T18983] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1621.526821][T20579] loop1: detected capacity change from 0 to 512 [ 1621.539190][T20579] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1621.551741][T20584] loop9: detected capacity change from 0 to 512 [ 1621.561935][T20586] loop5: detected capacity change from 0 to 1024 [ 1621.568686][T20584] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 1621.569998][T20586] EXT4-fs: Ignoring removed orlov option [ 1621.583241][T20586] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1621.590607][T20579] EXT4-fs error (device loop1): __ext4_fill_super:5512: inode #2: comm syz.1.16640: inode has both inline data and extents flags [ 1621.608121][T20579] EXT4-fs (loop1): get root inode failed [ 1621.613918][T20579] EXT4-fs (loop1): mount failed [ 1621.620543][T20586] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1621.649201][T20579] loop1: detected capacity change from 0 to 512 [ 1621.664807][T20579] EXT4-fs: Mount option(s) incompatible with ext3 [ 1621.672431][T14550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1621.684687][T20595] loop8: detected capacity change from 0 to 2048 [ 1621.703632][T20600] netlink: 44 bytes leftover after parsing attributes in process `syz.5.16647'. [ 1621.718858][T20595] Alternate GPT is invalid, using primary GPT. [ 1621.725179][T20595] loop8: p1 p2 p3 [ 1621.729132][T20595] loop8: partition table partially beyond EOD, truncated [ 1622.009045][T20638] loop1: detected capacity change from 0 to 1024 [ 1622.037159][T20638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1622.074872][T20645] loop0: detected capacity change from 0 to 512 [ 1622.082397][T19004] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1622.092348][T20645] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1622.139787][T20645] EXT4-fs error (device loop0): __ext4_fill_super:5512: inode #2: comm syz.0.16666: inode has both inline data and extents flags [ 1622.166058][T20645] EXT4-fs (loop0): get root inode failed [ 1622.171914][T20645] EXT4-fs (loop0): mount failed [ 1622.184831][T20645] loop0: detected capacity change from 0 to 512 [ 1622.195343][T20645] EXT4-fs: Mount option(s) incompatible with ext3 [ 1622.392611][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 1622.392630][ T29] audit: type=1326 audit(1622.384:125996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20668 comm="syz.1.16674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702c65eec9 code=0x7ffc0000 [ 1622.430248][ T29] audit: type=1326 audit(1622.384:125997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20668 comm="syz.1.16674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702c65eec9 code=0x7ffc0000 [ 1622.453826][ T29] audit: type=1326 audit(1622.394:125998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20668 comm="syz.1.16674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f702c65eec9 code=0x7ffc0000 [ 1622.477108][ T29] audit: type=1326 audit(1622.394:125999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20668 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702c65eec9 code=0x7ffc0000 [ 1622.500358][ T29] audit: type=1326 audit(1622.394:126000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20668 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702c65eec9 code=0x7ffc0000 [ 1622.523557][ T29] audit: type=1326 audit(1622.394:126001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20668 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f702c65eec9 code=0x7ffc0000 [ 1622.546765][ T29] audit: type=1326 audit(1622.394:126002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20668 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702c65eec9 code=0x7ffc0000 [ 1622.569965][ T29] audit: type=1326 audit(1622.394:126003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20668 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702c65eec9 code=0x7ffc0000 [ 1622.593243][ T29] audit: type=1326 audit(1622.394:126004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20668 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f702c65eec9 code=0x7ffc0000 [ 1622.616437][ T29] audit: type=1326 audit(1622.414:126005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20668 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702c65eec9 code=0x7ffc0000 [ 1622.624178][T20679] loop9: detected capacity change from 0 to 1024 [ 1622.676405][T20681] loop1: detected capacity change from 0 to 2048 [ 1622.688615][T20679] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1622.702574][T20687] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1622.702792][T20681] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1622.744430][T14580] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1622.766346][T19004] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 1622.788275][T19004] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1622.824128][T20697] loop9: detected capacity change from 0 to 256 [ 1622.833205][T20697] FAT-fs (loop9): Directory bread(block 1285) failed [ 1622.853479][T20697] FAT-fs (loop9): Directory bread(block 1285) failed [ 1622.912454][T20712] netlink: 20 bytes leftover after parsing attributes in process `syz.9.16693'. [ 1622.931488][T20716] loop0: detected capacity change from 0 to 512 [ 1622.941250][T20714] usb usb8: usbfs: process 20714 (syz.5.16691) did not claim interface 0 before use [ 1622.951038][T20718] loop1: detected capacity change from 0 to 512 [ 1622.961066][T20716] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.16694: couldn't read orphan inode 26 (err -116) [ 1622.974259][T20720] netlink: 'syz.9.16696': attribute type 1 has an invalid length. [ 1622.975182][T20716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1622.996416][T20718] EXT4-fs (loop1): too many log groups per flexible block group [ 1623.004577][T20718] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 1623.022483][T20718] EXT4-fs (loop1): mount failed [ 1623.027940][T19051] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1623.037188][T20728] loop9: detected capacity change from 0 to 2048 [ 1623.071223][T20728] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1623.128823][T20738] random: crng reseeded on system resumption [ 1623.244529][T14580] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1623.244773][T20748] loop0: detected capacity change from 0 to 1024 [ 1623.293816][T20748] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1623.304805][T20748] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1623.337671][T20748] JBD2: no valid journal superblock found [ 1623.343443][T20748] EXT4-fs (loop0): Could not load journal inode [ 1623.390591][T20761] loop1: detected capacity change from 0 to 1024 [ 1623.411776][T20761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1623.452032][T20768] loop8: detected capacity change from 0 to 512 [ 1623.460025][T20768] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1623.481090][T20768] EXT4-fs error (device loop8): __ext4_fill_super:5512: inode #2: comm syz.8.16714: inode has both inline data and extents flags [ 1623.494892][T20768] EXT4-fs (loop8): get root inode failed [ 1623.500667][T20768] EXT4-fs (loop8): mount failed [ 1623.511089][T20768] loop8: detected capacity change from 0 to 512 [ 1623.518203][T20768] EXT4-fs: Mount option(s) incompatible with ext3 [ 1623.581939][T19004] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1623.804086][T20811] loop5: detected capacity change from 0 to 128 [ 1623.814778][T20811] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 1623.822736][T20811] FAT-fs (loop5): Filesystem has been set read-only [ 1623.829954][T20811] syz.5.16720: attempt to access beyond end of device [ 1623.829954][T20811] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1623.844032][T20811] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 1623.851976][T20811] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 1623.862268][T20811] syz.5.16720: attempt to access beyond end of device [ 1623.862268][T20811] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1623.876137][T20811] syz.5.16720: attempt to access beyond end of device [ 1623.876137][T20811] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1623.891016][T20811] syz.5.16720: attempt to access beyond end of device [ 1623.891016][T20811] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1623.905095][T20819] syz.5.16720: attempt to access beyond end of device [ 1623.905095][T20819] loop5: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 1623.918588][T20819] Buffer I/O error on dev loop5, logical block 2065, async page read [ 1623.926844][T20819] syz.5.16720: attempt to access beyond end of device [ 1623.926844][T20819] loop5: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 1623.940305][T20819] Buffer I/O error on dev loop5, logical block 2066, async page read [ 1623.949148][T20819] syz.5.16720: attempt to access beyond end of device [ 1623.949148][T20819] loop5: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 1623.959508][T20824] IPVS: Scheduler module ip_vs_ not found [ 1623.962847][T20819] Buffer I/O error on dev loop5, logical block 2067, async page read [ 1623.977751][T20819] syz.5.16720: attempt to access beyond end of device [ 1623.977751][T20819] loop5: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 1623.991176][T20819] Buffer I/O error on dev loop5, logical block 2068, async page read [ 1623.999760][T20819] syz.5.16720: attempt to access beyond end of device [ 1623.999760][T20819] loop5: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 1624.013415][T20819] Buffer I/O error on dev loop5, logical block 2069, async page read [ 1624.022773][T20819] syz.5.16720: attempt to access beyond end of device [ 1624.022773][T20819] loop5: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 1624.023067][T20829] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 1624.036323][T20819] Buffer I/O error on dev loop5, logical block 2070, async page read [ 1624.056223][T20819] Buffer I/O error on dev loop5, logical block 2071, async page read [ 1624.064589][T20819] Buffer I/O error on dev loop5, logical block 2072, async page read [ 1624.073055][T20811] Buffer I/O error on dev loop5, logical block 2065, async page read [ 1624.081703][T20811] Buffer I/O error on dev loop5, logical block 2066, async page read [ 1624.094492][T20836] netlink: 28 bytes leftover after parsing attributes in process `syz.8.16724'. [ 1624.103683][T20836] netlink: 28 bytes leftover after parsing attributes in process `syz.8.16724'. [ 1624.112880][T20836] netlink: 28 bytes leftover after parsing attributes in process `syz.8.16724'. [ 1624.169341][T20836] netlink: 28 bytes leftover after parsing attributes in process `syz.8.16724'. [ 1624.178655][T20836] netlink: 28 bytes leftover after parsing attributes in process `syz.8.16724'. [ 1624.188036][T20836] netlink: 28 bytes leftover after parsing attributes in process `syz.8.16724'. [ 1624.261510][T20836] netlink: 28 bytes leftover after parsing attributes in process `syz.8.16724'. [ 1624.270675][T20836] netlink: 28 bytes leftover after parsing attributes in process `syz.8.16724'. [ 1624.319052][T20858] loop9: detected capacity change from 0 to 4096 [ 1624.345673][T20858] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1624.357691][T20858] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1624.405401][T20872] netdevsim netdevsim8: Direct firmware load for ./file0/file1 failed with error -2 [ 1624.439637][T14580] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1624.469730][T20876] loop0: detected capacity change from 0 to 512 [ 1624.495078][T20876] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1624.517588][T20876] EXT4-fs error (device loop0): __ext4_fill_super:5512: inode #2: comm syz.0.16732: inode has both inline data and extents flags [ 1624.541575][T20876] EXT4-fs (loop0): get root inode failed [ 1624.547337][T20876] EXT4-fs (loop0): mount failed [ 1624.559903][T20880] loop9: detected capacity change from 0 to 8192 [ 1624.572180][T20876] loop0: detected capacity change from 0 to 512 [ 1624.617304][T20876] EXT4-fs: Mount option(s) incompatible with ext3 [ 1624.814990][T20919] loop8: detected capacity change from 0 to 128 [ 1624.884027][T20928] loop0: detected capacity change from 0 to 764 [ 1624.907338][T20928] rock: directory entry would overflow storage [ 1624.913578][T20928] rock: sig=0x4f50, size=4, remaining=3 [ 1624.919246][T20928] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 1624.954416][T20927] loop5: detected capacity change from 0 to 8192 [ 1625.124848][T20951] loop5: detected capacity change from 0 to 512 [ 1625.143545][T20951] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1625.159152][T20956] loop8: detected capacity change from 0 to 1024 [ 1625.166643][T20956] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1625.177753][T20956] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1625.192129][T20951] EXT4-fs warning (device loop5): dx_probe:837: inode #2: comm syz.5.16754: Unimplemented hash flags: 0x0001 [ 1625.203826][T20951] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.16754: Corrupt directory, running e2fsck is recommended [ 1625.207200][T20956] JBD2: no valid journal superblock found [ 1625.219008][T20951] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 3: comm syz.5.16754: path /472/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 1625.222650][T20956] EXT4-fs (loop8): Could not load journal inode [ 1625.345378][T14550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1625.390673][T20976] loop8: detected capacity change from 0 to 512 [ 1625.428823][T20976] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1625.504345][T20994] loop0: detected capacity change from 0 to 256 [ 1625.531518][T18983] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1625.541521][T20990] loop5: detected capacity change from 0 to 8192 [ 1625.796681][T21031] loop9: detected capacity change from 0 to 764 [ 1625.836438][T21031] rock: directory entry would overflow storage [ 1625.842761][T21031] rock: sig=0x4f50, size=4, remaining=3 [ 1625.848416][T21031] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 1625.862602][T21028] geneve0 speed is unknown, defaulting to 1000 [ 1625.878844][T21028] lo speed is unknown, defaulting to 1000 [ 1625.893918][T21028] lo speed is unknown, defaulting to 1000 [ 1625.949797][T21028] hsr0 speed is unknown, defaulting to 1000 [ 1625.960132][T21041] loop0: detected capacity change from 0 to 512 [ 1625.979377][T21041] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.16773: error while reading EA inode 32 err=-116 [ 1626.002177][T21041] EXT4-fs (loop0): Remounting filesystem read-only [ 1626.015091][T21041] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 1626.033691][T21041] EXT4-fs (loop0): 1 orphan inode deleted [ 1626.040176][T21041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1626.069720][T19051] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1626.193098][T21061] loop8: detected capacity change from 0 to 512 [ 1626.204759][T21061] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1626.257671][T18983] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1626.282913][T21064] sd 0:0:1:0: device reset [ 1626.553475][T21095] loop0: detected capacity change from 0 to 512 [ 1626.561485][T21095] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1626.580879][T21095] EXT4-fs error (device loop0): __ext4_fill_super:5512: inode #2: comm syz.0.16797: inode has both inline data and extents flags [ 1626.596144][T21095] EXT4-fs (loop0): get root inode failed [ 1626.602054][T21095] EXT4-fs (loop0): mount failed [ 1626.626459][T21095] loop0: detected capacity change from 0 to 512 [ 1626.639396][T21095] EXT4-fs: Mount option(s) incompatible with ext3 [ 1626.723565][T21112] __nla_validate_parse: 3 callbacks suppressed [ 1626.723638][T21112] netlink: 96 bytes leftover after parsing attributes in process `syz.8.16803'. [ 1626.792817][T21122] loop0: detected capacity change from 0 to 1024 [ 1626.800247][T21122] EXT4-fs: Ignoring removed mblk_io_submit option [ 1626.807411][T21122] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1626.822755][T21125] loop1: detected capacity change from 0 to 512 [ 1626.831899][T21122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1626.845186][T21125] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1626.855571][T21125] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.16808: EA inode hash validation failed [ 1626.861366][T21122] EXT4-fs error (device loop0): __ext4_iget:5443: inode #12: block 13: comm syz.0.16807: invalid block [ 1626.887280][T21125] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1626.907948][T21125] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.16808: corrupted inode contents [ 1626.922553][T21122] EXT4-fs (loop0): Remounting filesystem read-only [ 1626.934503][T21125] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #15: comm syz.1.16808: mark_inode_dirty error [ 1626.948704][T19051] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1626.948749][T21125] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.16808: corrupted inode contents [ 1626.972868][T21125] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm syz.1.16808: mark_inode_dirty error [ 1626.992482][T21125] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.16808: mark inode dirty (error -117) [ 1627.005782][T21125] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 1627.014995][T21125] EXT4-fs (loop1): 1 orphan inode deleted [ 1627.021756][T21125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1627.060394][T19004] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1627.092117][T21143] loop0: detected capacity change from 0 to 8192 [ 1627.190337][T21159] loop1: detected capacity change from 0 to 2048 [ 1627.219573][T21159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1627.233741][T21159] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.16822: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1627.271324][T19004] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1627.299321][T21168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16826'. [ 1627.364621][T21172] loop1: detected capacity change from 0 to 512 [ 1627.390883][T21172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1627.454368][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 1627.454386][ T29] audit: type=1400 audit(1627.444:126129): avc: denied { mounton } for pid=21171 comm="syz.1.16825" path="/165/file1/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1627.495782][ T29] audit: type=1326 audit(1627.484:126130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21179 comm="syz.5.16830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b3a3eec9 code=0x7ffc0000 [ 1627.519634][ T29] audit: type=1326 audit(1627.484:126131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21179 comm="syz.5.16830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b3a3eec9 code=0x7ffc0000 [ 1627.543964][ T29] audit: type=1326 audit(1627.484:126132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21179 comm="syz.5.16830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe0b3a3eec9 code=0x7ffc0000 [ 1627.567241][ T29] audit: type=1326 audit(1627.484:126133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21179 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b3a3eec9 code=0x7ffc0000 [ 1627.590111][ T29] audit: type=1326 audit(1627.484:126134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21179 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b3a3eec9 code=0x7ffc0000 [ 1627.612895][ T29] audit: type=1326 audit(1627.484:126135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21179 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0b3a3eec9 code=0x7ffc0000 [ 1627.635701][ T29] audit: type=1326 audit(1627.484:126136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21179 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b3a3eec9 code=0x7ffc0000 [ 1627.637241][T19004] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1627.658407][ T29] audit: type=1326 audit(1627.484:126137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21179 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b3a3eec9 code=0x7ffc0000 [ 1627.689960][ T29] audit: type=1326 audit(1627.484:126138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21179 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0b3a3eec9 code=0x7ffc0000 [ 1627.780896][T21184] loop1: detected capacity change from 0 to 512 [ 1627.800439][T21184] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.16831: inode has both inline data and extents flags [ 1627.846482][T21184] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.16831: couldn't read orphan inode 15 (err -117) [ 1627.875340][T21184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1627.933868][T21195] $Hÿ: renamed from bond0 [ 1627.948564][T21195] $Hÿ: entered promiscuous mode [ 1627.953732][T21195] bond_slave_0: entered promiscuous mode [ 1627.959575][T21195] bond_slave_1: entered promiscuous mode [ 1628.068546][T21206] loop0: detected capacity change from 0 to 512 [ 1628.076217][T21206] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1628.133355][T19004] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1628.166277][T21215] serio: Serial port ptm0 [ 1628.300087][T21239] loop1: detected capacity change from 0 to 512 [ 1628.309814][T21239] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1628.329370][T21239] EXT4-fs error (device loop1): __ext4_fill_super:5512: inode #2: comm syz.1.16857: inode has both inline data and extents flags [ 1628.365779][T21239] EXT4-fs (loop1): get root inode failed [ 1628.371688][T21239] EXT4-fs (loop1): mount failed [ 1628.391159][T21239] loop1: detected capacity change from 0 to 512 [ 1628.398299][T21239] EXT4-fs: Mount option(s) incompatible with ext3 [ 1628.425572][T21253] netlink: 'syz.9.16863': attribute type 4 has an invalid length. [ 1628.609168][ T1040] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1629.218061][T21304] loop0: detected capacity change from 0 to 512 [ 1629.224979][T21304] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1629.236529][T21304] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 1629.251307][T21304] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1629.265214][T21304] EXT4-fs (loop0): 1 truncate cleaned up [ 1629.271663][T21304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1629.325004][T19051] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1629.382495][T21322] 9pnet: Unknown protocol version 9 [ 1629.686152][T21361] 9pnet_fd: p9_fd_create_unix (21361): problem connecting socket: ./file0: -2 [ 1629.711816][T21366] loop0: detected capacity change from 0 to 512 [ 1630.858277][T21522] 9pnet_fd: Insufficient options for proto=fd [ 1631.150179][T21572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16955'. [ 1631.166503][T21572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16955'. [ 1631.492723][T21609] loop1: detected capacity change from 0 to 512 [ 1631.512462][T21609] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1631.528965][T21609] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1631.549143][T21609] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.16964: bg 0: block 248: padding at end of block bitmap is not set [ 1631.566710][T21609] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.16964: Failed to acquire dquot type 1 [ 1631.602807][T21609] EXT4-fs (loop1): 1 truncate cleaned up [ 1631.630291][T21622] loop0: detected capacity change from 0 to 512 [ 1631.647535][T21622] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1631.687743][T21622] EXT4-fs error (device loop0): __ext4_fill_super:5512: inode #2: comm syz.0.16968: inode has both inline data and extents flags [ 1631.724893][T21622] EXT4-fs (loop0): get root inode failed [ 1631.730614][T21622] EXT4-fs (loop0): mount failed [ 1631.759448][T21622] loop0: detected capacity change from 0 to 512 [ 1631.776462][T21622] EXT4-fs: Mount option(s) incompatible with ext3 [ 1631.793726][T21637] netlink: 16 bytes leftover after parsing attributes in process `syz.8.16975'. [ 1632.062300][T21674] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21674 comm=syz.5.16991 [ 1632.099897][T21678] netlink: 'syz.5.16993': attribute type 7 has an invalid length. [ 1632.154355][T21683] loop0: detected capacity change from 0 to 512 [ 1632.171963][T21683] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1632.188821][T21683] EXT4-fs error (device loop0): __ext4_fill_super:5512: inode #2: comm syz.0.16995: inode has both inline data and extents flags [ 1632.202724][T21683] EXT4-fs (loop0): get root inode failed [ 1632.208505][T21683] EXT4-fs (loop0): mount failed [ 1632.218929][T21683] loop0: detected capacity change from 0 to 512 [ 1632.225951][T21683] EXT4-fs: Mount option(s) incompatible with ext3 [ 1632.458143][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 1632.458158][ T29] audit: type=1400 audit(1632.454:126366): avc: denied { mount } for pid=21706 comm="syz.8.17004" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1632.624865][T21719] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1632.624865][T21719] program syz.1.17008 not setting count and/or reply_len properly [ 1632.660443][T21721] rdma_op ffff88817617b980 conn xmit_rdma 0000000000000000 [ 1632.938263][ T29] audit: type=1326 audit(1632.934:126367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21727 comm="syz.1.17012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702c65eec9 code=0x7ffc0000 [ 1632.963816][ T29] audit: type=1326 audit(1632.934:126368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21727 comm="syz.1.17012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702c65eec9 code=0x7ffc0000 [ 1632.987854][ T29] audit: type=1326 audit(1632.934:126369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21727 comm="syz.1.17012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f702c65eec9 code=0x7ffc0000 [ 1633.011729][ T29] audit: type=1326 audit(1632.934:126370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21727 comm="syz.1.17012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702c65eec9 code=0x7ffc0000 [ 1633.035053][ T29] audit: type=1326 audit(1632.934:126371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21727 comm="syz.1.17012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f702c65eec9 code=0x7ffc0000 [ 1633.058727][ T29] audit: type=1326 audit(1632.934:126372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21727 comm="syz.1.17012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702c65eec9 code=0x7ffc0000 [ 1633.082235][ T29] audit: type=1326 audit(1632.934:126373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21727 comm="syz.1.17012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f702c65eec9 code=0x7ffc0000 [ 1633.105579][ T29] audit: type=1326 audit(1632.934:126374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21727 comm="syz.1.17012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702c65eec9 code=0x7ffc0000 [ 1633.129106][ T29] audit: type=1326 audit(1632.934:126375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21727 comm="syz.1.17012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f702c65eec9 code=0x7ffc0000 [ 1633.277844][T21746] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17019'. [ 1633.287495][T21746] IPVS: Error connecting to the multicast addr [ 1633.327484][T21751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17022'. [ 1633.359288][T21751] netlink: 32 bytes leftover after parsing attributes in process `syz.5.17022'. [ 1633.567578][T21788] netlink: 19 bytes leftover after parsing attributes in process `syz.9.17038'. [ 1633.592704][T21790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17039'. [ 1633.612685][T21790] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17039'. [ 1633.807932][T21817] netlink: 277 bytes leftover after parsing attributes in process `syz.9.17052'. [ 1633.988995][T21833] geneve0 speed is unknown, defaulting to 1000 [ 1634.011105][T21833] lo speed is unknown, defaulting to 1000 [ 1634.042053][T21833] lo speed is unknown, defaulting to 1000 [ 1634.067142][T21848] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 1634.099613][T21833] hsr0 speed is unknown, defaulting to 1000 [ 1634.164923][T21859] loop0: detected capacity change from 0 to 512 [ 1634.181320][T21859] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1634.221537][T21859] EXT4-fs error (device loop0): __ext4_fill_super:5512: inode #2: comm syz.0.17071: inode has both inline data and extents flags [ 1634.287183][T21859] EXT4-fs (loop0): get root inode failed [ 1634.292965][T21859] EXT4-fs (loop0): mount failed [ 1634.327424][T21870] netlink: 5452 bytes leftover after parsing attributes in process `syz.1.17074'. [ 1634.344544][T21859] loop0: detected capacity change from 0 to 512 [ 1634.360978][T21859] EXT4-fs: Mount option(s) incompatible with ext3 [ 1634.419152][T21876] loop1: detected capacity change from 0 to 128 [ 1634.464696][T21876] bio_check_eod: 21346 callbacks suppressed [ 1634.464712][T21876] syz.1.17077: attempt to access beyond end of device [ 1634.464712][T21876] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 1634.557181][T21882] loop0: detected capacity change from 0 to 512 [ 1634.575049][T21882] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1634.610506][T21882] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.17079: Failed to acquire dquot type 1 [ 1634.633007][T21882] EXT4-fs (loop0): 1 truncate cleaned up [ 1634.869665][T21901] netlink: 'syz.1.17086': attribute type 3 has an invalid length. [ 1634.982331][T21910] macvtap0: refused to change device tx_queue_len [ 1635.099734][T21922] netlink: 4 bytes leftover after parsing attributes in process `syz.9.17097'. [ 1636.037760][T21994] loop1: detected capacity change from 0 to 512 [ 1636.065330][T21994] EXT4-fs (loop1): too many log groups per flexible block group [ 1636.076885][T21994] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 1636.083747][T21994] EXT4-fs (loop1): mount failed [ 1636.264729][T22025] 9pnet_fd: Insufficient options for proto=fd [ 1636.278416][T22027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22027 comm=syz.8.17140 [ 1636.443654][T22042] IPv6: NLM_F_CREATE should be specified when creating new route [ 1636.540738][T22049] loop1: detected capacity change from 0 to 512 [ 1636.548685][T22049] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1636.586615][T22049] EXT4-fs error (device loop1): __ext4_fill_super:5512: inode #2: comm syz.1.17150: inode has both inline data and extents flags [ 1636.605563][T22049] EXT4-fs (loop1): get root inode failed [ 1636.611487][T22049] EXT4-fs (loop1): mount failed [ 1636.635907][T22049] loop1: detected capacity change from 0 to 512 [ 1636.645477][T22049] EXT4-fs: Mount option(s) incompatible with ext3 [ 1636.744949][T22072] loop0: detected capacity change from 0 to 8192 [ 1636.831647][T22082] loop0: detected capacity change from 0 to 512 [ 1636.859444][T22082] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1636.875969][T22090] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1636.887985][T22082] EXT4-fs error (device loop0): __ext4_fill_super:5512: inode #2: comm syz.0.17163: inode has both inline data and extents flags [ 1636.915031][T22094] loop1: detected capacity change from 0 to 512 [ 1636.917522][T22082] EXT4-fs (loop0): get root inode failed [ 1636.927110][T22082] EXT4-fs (loop0): mount failed [ 1636.965598][T22082] loop0: detected capacity change from 0 to 512 [ 1636.973341][T22082] EXT4-fs: Mount option(s) incompatible with ext3 [ 1637.064387][T22118] FAT-fs (loop17): unable to read boot sector [ 1637.074685][T22122] __nla_validate_parse: 1 callbacks suppressed [ 1637.074706][T22122] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17181'. [ 1637.092390][T22122] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17181'. [ 1637.237328][T22131] geneve0 speed is unknown, defaulting to 1000 [ 1637.252449][T22131] lo speed is unknown, defaulting to 1000 [ 1637.265345][T22131] lo speed is unknown, defaulting to 1000 [ 1637.324213][T22152] loop1: detected capacity change from 0 to 512 [ 1637.334178][T22131] hsr0 speed is unknown, defaulting to 1000 [ 1637.342749][T22152] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1637.369435][T22152] EXT4-fs error (device loop1): __ext4_fill_super:5512: inode #2: comm syz.1.17195: inode has both inline data and extents flags [ 1637.395470][T22152] EXT4-fs (loop1): get root inode failed [ 1637.401194][T22152] EXT4-fs (loop1): mount failed [ 1637.413238][T22152] loop1: detected capacity change from 0 to 512 [ 1637.420608][T22152] EXT4-fs: Mount option(s) incompatible with ext3 [ 1637.559300][T22179] loop0: detected capacity change from 0 to 1024 [ 1637.584810][T22179] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.17205: bg 0: block 88: padding at end of block bitmap is not set [ 1637.869562][T22213] netlink: 28 bytes leftover after parsing attributes in process `syz.8.17215'. [ 1637.878774][T22213] netlink: 28 bytes leftover after parsing attributes in process `syz.8.17215'. [ 1638.015656][T22224] loop0: detected capacity change from 0 to 512 [ 1638.029933][T22224] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1638.059585][T22224] EXT4-fs error (device loop0): __ext4_fill_super:5512: inode #2: comm syz.0.17219: inode has both inline data and extents flags [ 1638.085431][T22224] EXT4-fs (loop0): get root inode failed [ 1638.091163][T22224] EXT4-fs (loop0): mount failed [ 1638.114791][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 1638.114819][ T29] audit: type=1400 audit(1638.104:126610): avc: denied { create } for pid=22232 comm="syz.9.17222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1638.141855][T22233] rdma_rxe: rxe_newlink: failed to add lo [ 1638.152522][ T29] audit: type=1400 audit(1638.134:126611): avc: denied { write } for pid=22232 comm="syz.9.17222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1638.194727][T22224] loop0: detected capacity change from 0 to 512 [ 1638.218345][T22224] EXT4-fs: Mount option(s) incompatible with ext3 [ 1638.258979][T22242] netlink: 'syz.9.17226': attribute type 10 has an invalid length. [ 1638.272054][T22242] team0 (unregistering): Port device team_slave_0 removed [ 1638.288923][T22242] team0 (unregistering): Port device team_slave_1 removed [ 1638.431274][T22257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1638.449833][T22257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1638.470840][ T29] audit: type=1400 audit(1638.464:126612): avc: denied { mounton } for pid=22258 comm="syz.0.17233" path="/231/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1638.497501][ T29] audit: type=1400 audit(1638.464:126613): avc: denied { unmount } for pid=22258 comm="syz.0.17233" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1638.526694][ T29] audit: type=1400 audit(1638.464:126614): avc: denied { mac_admin } for pid=22258 comm="syz.0.17233" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1638.547775][ T29] audit: type=1400 audit(1638.464:126615): avc: denied { relabelto } for pid=22258 comm="syz.0.17233" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1638.573704][ T29] audit: type=1400 audit(1638.464:126616): avc: denied { associate } for pid=22258 comm="syz.0.17233" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 1638.633494][T22266] loop0: detected capacity change from 0 to 1024 [ 1638.641950][T22266] EXT4-fs: Ignoring removed orlov option [ 1638.648545][T22266] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1638.662939][T22268] netlink: 264 bytes leftover after parsing attributes in process `syz.5.17237'. [ 1638.689235][T22266] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 1638.701673][T22266] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1638.701673][T22266] [ 1638.711424][T22266] EXT4-fs (loop0): Total free blocks count 0 [ 1638.717528][T22266] EXT4-fs (loop0): Free/Dirty block details [ 1638.723428][T22266] EXT4-fs (loop0): free_blocks=0 [ 1638.728471][T22266] EXT4-fs (loop0): dirty_blocks=0 [ 1638.733602][T22266] EXT4-fs (loop0): Block reservation details [ 1638.739981][T22266] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 1638.868171][ T29] audit: type=1326 audit(1638.864:126617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22284 comm="syz.5.17244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b3a3eec9 code=0x7ffc0000 [ 1638.922266][ T29] audit: type=1400 audit(1638.884:126618): avc: denied { write } for pid=22288 comm="syz.8.17245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1638.941840][ T29] audit: type=1326 audit(1638.894:126619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22284 comm="syz.5.17244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe0b3a3eec9 code=0x7ffc0000 [ 1639.035911][T22298] loop1: detected capacity change from 0 to 512 [ 1639.064019][T22298] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1639.107523][T22298] EXT4-fs error (device loop1): __ext4_fill_super:5512: inode #2: comm syz.1.17249: inode has both inline data and extents flags [ 1639.137934][T22298] EXT4-fs (loop1): get root inode failed [ 1639.143701][T22298] EXT4-fs (loop1): mount failed [ 1639.150385][T22306] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17252'. [ 1639.181139][T22298] loop1: detected capacity change from 0 to 512 [ 1639.196069][T22298] EXT4-fs: Mount option(s) incompatible with ext3 [ 1639.323189][T22325] geneve0 speed is unknown, defaulting to 1000 [ 1639.330161][T22325] lo speed is unknown, defaulting to 1000 [ 1639.336335][T22325] lo speed is unknown, defaulting to 1000 [ 1639.371501][T22325] hsr0 speed is unknown, defaulting to 1000 [ 1639.562995][T22358] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17266'. [ 1639.658105][T22358] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17266'. [ 1640.039433][T22421] netlink: 'syz.9.17275': attribute type 21 has an invalid length. [ 1640.056727][T22421] netlink: 152 bytes leftover after parsing attributes in process `syz.9.17275'. [ 1640.374788][T22457] netlink: 1 bytes leftover after parsing attributes in process `syz.9.17281'. [ 1640.392361][T22457] xt_policy: neither incoming nor outgoing policy selected [ 1640.721790][T22507] loop0: detected capacity change from 0 to 128 [ 1640.814075][T22507] syz.0.17289: attempt to access beyond end of device [ 1640.814075][T22507] loop0: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 1640.837917][T22507] syz.0.17289: attempt to access beyond end of device [ 1640.837917][T22507] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 1640.866866][T22507] syz.0.17289: attempt to access beyond end of device [ 1640.866866][T22507] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1641.000834][T22543] netlink: 'syz.5.17300': attribute type 21 has an invalid length. [ 1641.033812][T22548] loop1: detected capacity change from 0 to 1024 [ 1641.058542][T22548] EXT4-fs mount: 12 callbacks suppressed [ 1641.058559][T22548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1641.082637][T22548] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.17303: inode has both inline data and extents flags [ 1641.128560][T19004] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1641.459768][ T4991] hid_parser_main: 8 callbacks suppressed [ 1641.459790][ T4991] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 1641.473159][ T4991] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 1641.480824][ T4991] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 1641.488291][ T4991] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 1641.495880][ T4991] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 1641.503426][ T4991] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 1641.511048][ T4991] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 1641.518594][ T4991] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 1641.526005][ T4991] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 1641.533555][ T4991] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 1641.560705][ T4991] hid-generic 0003:0003:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1641.774498][T22635] netlink: 'syz.8.17340': attribute type 1 has an invalid length. [ 1641.974306][T22677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1641.983294][T22677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1642.088287][T22700] __nla_validate_parse: 3 callbacks suppressed [ 1642.088309][T22700] netlink: 104 bytes leftover after parsing attributes in process `syz.5.17359'. [ 1642.486690][T22751] netlink: 132 bytes leftover after parsing attributes in process `syz.5.17369'. [ 1642.751610][T22787] ip6tnl1: entered promiscuous mode [ 1643.400210][T22869] loop1: detected capacity change from 0 to 1024 [ 1643.407523][T22869] ext4: Unknown parameter 'euid<00000000000000000000' [ 1643.486083][T22881] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17398'. [ 1643.495294][T22881] netlink: 108 bytes leftover after parsing attributes in process `syz.1.17398'. [ 1643.514467][T22881] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17398'. [ 1643.531633][T22881] netlink: 108 bytes leftover after parsing attributes in process `syz.1.17398'. [ 1643.540889][T22881] netlink: 84 bytes leftover after parsing attributes in process `syz.1.17398'. [ 1643.584228][T22888] netlink: 96 bytes leftover after parsing attributes in process `syz.1.17401'. [ 1643.620182][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 1643.620309][ T29] audit: type=1326 audit(1643.614:126799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22889 comm="syz.8.17402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f8c1eec9 code=0x7ffc0000 [ 1643.649883][ T29] audit: type=1326 audit(1643.614:126800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22889 comm="syz.8.17402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f8c1eec9 code=0x7ffc0000 [ 1643.673823][ T29] audit: type=1326 audit(1643.614:126801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22889 comm="syz.8.17402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f73f8c1eec9 code=0x7ffc0000 [ 1643.697211][ T29] audit: type=1326 audit(1643.614:126802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22889 comm="syz.8.17402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f8c1eec9 code=0x7ffc0000 [ 1643.720507][ T29] audit: type=1326 audit(1643.614:126803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22889 comm="syz.8.17402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f8c1eec9 code=0x7ffc0000 [ 1643.743765][ T29] audit: type=1326 audit(1643.634:126804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22889 comm="syz.8.17402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73f8c1eec9 code=0x7ffc0000 [ 1643.767026][ T29] audit: type=1326 audit(1643.634:126805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22889 comm="syz.8.17402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f8c1eec9 code=0x7ffc0000 [ 1643.790362][ T29] audit: type=1326 audit(1643.634:126806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22889 comm="syz.8.17402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f8c1eec9 code=0x7ffc0000 [ 1643.813629][ T29] audit: type=1326 audit(1643.634:126807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22889 comm="syz.8.17402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73f8c1eec9 code=0x7ffc0000 [ 1643.825817][T22902] loop1: detected capacity change from 0 to 512 [ 1643.837018][ T29] audit: type=1326 audit(1643.634:126808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22889 comm="syz.8.17402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f8c1eec9 code=0x7ffc0000 [ 1643.869021][T22902] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1643.898959][T22902] EXT4-fs error (device loop1): __ext4_fill_super:5512: inode #2: comm syz.1.17409: inode has both inline data and extents flags [ 1643.916643][T22902] EXT4-fs (loop1): get root inode failed [ 1643.922327][T22902] EXT4-fs (loop1): mount failed [ 1643.927167][T22910] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17412'. [ 1643.945793][T22902] loop1: detected capacity change from 0 to 512 [ 1643.955853][T22902] EXT4-fs: Mount option(s) incompatible with ext3 [ 1644.128039][T22944] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17426'. [ 1644.205773][T22956] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22956 comm=syz.1.17429 [ 1644.218610][T22956] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=22956 comm=syz.1.17429 [ 1644.267591][T22961] loop1: detected capacity change from 0 to 1024 [ 1644.286469][T22961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1644.299906][T22961] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.17430: inode has both inline data and extents flags [ 1644.317193][T22939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1644.333315][T19004] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1644.343960][T22939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1644.600160][T23005] netlink: 'syz.1.17436': attribute type 21 has an invalid length. [ 1645.493301][T23110] ªªªªªª: renamed from vlan0 (while UP) [ 1645.874725][T23168] loop1: detected capacity change from 0 to 512 [ 1645.903559][T23168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1645.947173][T23168] EXT4-fs (loop1): shut down requested (0) [ 1645.964039][T23168] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 1645.981780][T23168] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 1645.990836][T23184] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 1646.014184][T23168] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 1646.060343][T19004] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1646.118224][T23197] loop1: detected capacity change from 0 to 1024 [ 1646.336470][T23225] loop0: detected capacity change from 0 to 1024 [ 1646.412013][T23230] geneve0 speed is unknown, defaulting to 1000 [ 1646.419118][T23230] lo speed is unknown, defaulting to 1000 [ 1646.425402][T23230] lo speed is unknown, defaulting to 1000 [ 1646.460347][T23230] hsr0 speed is unknown, defaulting to 1000 [ 1647.302602][T23329] loop1: detected capacity change from 0 to 1024 [ 1647.331989][T23329] EXT4-fs: inline encryption not supported [ 1647.337957][T23329] EXT4-fs: Ignoring removed i_version option [ 1647.394294][T23329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1647.400930][T23337] bridge0: port 4(batadv2) entered blocking state [ 1647.413463][T23337] bridge0: port 4(batadv2) entered disabled state [ 1647.440786][T23337] batadv2: entered allmulticast mode [ 1647.453536][T23337] batadv2: entered promiscuous mode [ 1647.470940][T23329] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 1647.522895][T19004] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1647.894251][T23396] loop0: detected capacity change from 0 to 128 [ 1647.896800][ T1077] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 1647.909848][ T1077] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 1647.932031][T23396] syz.0.17568: attempt to access beyond end of device [ 1647.932031][T23396] loop0: rw=0, sector=121, nr_sectors = 128 limit=128 [ 1648.226721][T23435] veth1_macvtap: left promiscuous mode [ 1648.242404][T23435] macsec0: entered promiscuous mode [ 1648.325853][T23451] loop9: detected capacity change from 0 to 7 [ 1648.343585][T23451] buffer_io_error: 21342 callbacks suppressed [ 1648.343600][T23451] Buffer I/O error on dev loop9, logical block 0, async page read [ 1648.370950][T23451] Buffer I/O error on dev loop9, logical block 0, async page read [ 1648.378931][T23451] loop9: unable to read partition table [ 1648.385859][T23451] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯  [ 1648.385859][T23451] ) failed (rc=-5) [ 1648.651874][T23489] __nla_validate_parse: 4 callbacks suppressed [ 1648.651911][T23489] netlink: 60 bytes leftover after parsing attributes in process `syz.9.17610'. [ 1648.667646][T23489] unsupported nlmsg_type 40 [ 1648.893315][T23516] loop0: detected capacity change from 0 to 512 [ 1648.914364][T23516] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1648.944133][T23516] EXT4-fs error (device loop0): __ext4_fill_super:5512: inode #2: comm syz.0.17623: inode has both inline data and extents flags [ 1648.958097][T23516] EXT4-fs (loop0): get root inode failed [ 1648.963770][T23516] EXT4-fs (loop0): mount failed [ 1648.982629][T23516] loop0: detected capacity change from 0 to 512 [ 1649.006715][T23516] EXT4-fs: Mount option(s) incompatible with ext3 [ 1649.095929][T23540] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17633'. [ 1649.105157][T23540] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17633'. [ 1649.216515][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 1649.222988][ T29] audit: type=1326 audit(1649.204:126953): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23499 comm="syz.8.17615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f8c1eec9 code=0x7ffc0000 [ 1649.247082][ T29] audit: type=1326 audit(1649.214:126954): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23499 comm="syz.8.17615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f8c1eec9 code=0x7ffc0000 [ 1649.270703][ T29] audit: type=1326 audit(1649.214:126955): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23499 comm="syz.8.17615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f73f8c1eec9 code=0x7ffc0000 [ 1649.294410][ T29] audit: type=1326 audit(1649.214:126956): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23499 comm="syz.8.17615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f8c1eec9 code=0x7ffc0000 [ 1649.318135][ T29] audit: type=1326 audit(1649.214:126957): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23499 comm="syz.8.17615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73f8c1eec9 code=0x7ffc0000 [ 1649.341723][ T29] audit: type=1326 audit(1649.214:126958): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23499 comm="syz.8.17615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f8c1eec9 code=0x7ffc0000 [ 1649.365383][ T29] audit: type=1326 audit(1649.214:126959): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23499 comm="syz.8.17615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73f8c1eec9 code=0x7ffc0000 [ 1649.389089][ T29] audit: type=1326 audit(1649.214:126960): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23499 comm="syz.8.17615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f8c1eec9 code=0x7ffc0000 [ 1649.412790][ T29] audit: type=1326 audit(1649.214:126961): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23499 comm="syz.8.17615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f73f8c1eec9 code=0x7ffc0000 [ 1649.436755][ T29] audit: type=1326 audit(1649.214:126962): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23499 comm="syz.8.17615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f8c1eec9 code=0x7ffc0000 [ 1650.191769][T23585] geneve0 speed is unknown, defaulting to 1000 [ 1650.207536][T23585] lo speed is unknown, defaulting to 1000 [ 1650.217818][T23585] lo speed is unknown, defaulting to 1000 [ 1650.275680][T23585] hsr0 speed is unknown, defaulting to 1000 [ 1650.945750][T23624] atomic_op ffff888173a3a128 conn xmit_atomic 0000000000000000 [ 1651.563542][T23668] loop1: detected capacity change from 0 to 2048 [ 1651.587456][T23668] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1651.606464][T23675] loop0: detected capacity change from 0 to 1024 [ 1651.628814][T23675] EXT4-fs: Ignoring removed oldalloc option [ 1651.634830][T23675] EXT4-fs: Ignoring removed bh option [ 1651.663793][T23677] netlink: 76 bytes leftover after parsing attributes in process `syz.5.17690'. [ 1651.675926][T23675] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1651.677085][T23680] EXT4-fs (loop1): shut down requested (1) [ 1651.709909][T23675] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.17688: Allocating blocks 497-513 which overlap fs metadata [ 1651.736985][T23674] EXT4-fs (loop0): pa ffff888106e7e8c0: logic 160, phys. 401, len 7 [ 1651.745085][T23674] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 1651.792137][T19004] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1651.814666][T19051] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1651.831923][T23689] loop1: detected capacity change from 0 to 128 [ 1651.835124][T23686] netlink: 'syz.9.17689': attribute type 10 has an invalid length. [ 1651.854303][T23689] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1651.875048][T23686] netlink: 'syz.9.17689': attribute type 10 has an invalid length. [ 1651.885749][T23686] dummy0: entered promiscuous mode [ 1651.891355][T23686] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 1651.920058][T19004] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1652.035291][T23717] netlink: 76 bytes leftover after parsing attributes in process `syz.1.17706'. [ 1652.118188][T23719] loop0: detected capacity change from 0 to 8192 [ 1652.185853][T23719] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 1652.194738][T23719] FAT-fs (loop0): Filesystem has been set read-only [ 1652.395443][T23764] netlink: 'syz.0.17727': attribute type 29 has an invalid length. [ 1652.403463][T23764] netlink: 'syz.0.17727': attribute type 6 has an invalid length. [ 1652.445366][T23771] netlink: 'syz.0.17730': attribute type 10 has an invalid length. [ 1652.466770][T23771] team0: Port device dummy0 added [ 1652.491264][T23771] netlink: 'syz.0.17730': attribute type 10 has an invalid length. [ 1652.503454][T23771] team0: Port device dummy0 removed [ 1652.515771][T23771] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1652.526591][T23778] netlink: 536 bytes leftover after parsing attributes in process `syz.1.17734'. [ 1652.535924][T23778] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17734'. [ 1652.742574][T23796] netlink: 5420 bytes leftover after parsing attributes in process `syz.0.17742'. [ 1652.876762][ T1058] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 1652.885369][ T1058] ref_tracker: netdev@ffff88811a730550 has 1/1 users at [ 1652.885369][ T1058] netdev_get_by_index+0x13e/0x1b0 [ 1652.885369][ T1058] fib6_nh_init+0xeb/0x15a0 [ 1652.885369][ T1058] rtm_new_nexthop+0x1ddb/0x45f0 [ 1652.885369][ T1058] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 1652.885369][ T1058] netlink_rcv_skb+0x123/0x220 [ 1652.885369][ T1058] rtnetlink_rcv+0x1c/0x30 [ 1652.885369][ T1058] netlink_unicast+0x5c0/0x690 [ 1652.885369][ T1058] netlink_sendmsg+0x58b/0x6b0 [ 1652.885369][ T1058] __sock_sendmsg+0x145/0x180 [ 1652.885369][ T1058] ____sys_sendmsg+0x345/0x4e0 [ 1652.885369][ T1058] ___sys_sendmsg+0x17b/0x1d0 [ 1652.885369][ T1058] __sys_sendmmsg+0x178/0x300 [ 1652.885369][ T1058] __x64_sys_sendmmsg+0x57/0x70 [ 1652.885369][ T1058] x64_sys_call+0x1c4a/0x3000 [ 1652.885369][ T1058] do_syscall_64+0xd2/0x200 [ 1652.885369][ T1058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1652.885369][ T1058] [ 1653.643593][T23843] loop0: detected capacity change from 0 to 512 [ 1653.650749][T23843] EXT4-fs: Ignoring removed i_version option [ 1653.656915][T23843] EXT4-fs: Ignoring removed bh option [ 1653.677373][T23843] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1653.731962][T19051] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1653.928625][T23872] netlink: 'syz.0.17774': attribute type 2 has an invalid length. [ 1654.669338][T23919] loop1: detected capacity change from 0 to 512 [ 1654.689757][T23919] EXT4-fs: Ignoring removed i_version option [ 1654.695907][T23919] EXT4-fs: Ignoring removed bh option [ 1654.778025][T23919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1654.896918][T19004] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1654.979383][ T29] kauditd_printk_skb: 852 callbacks suppressed [ 1654.979399][ T29] audit: type=1326 audit(1655.973:127815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23937 comm="syz.5.17803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b3a3eec9 code=0x7ffc0000 [ 1655.011131][ T29] audit: type=1326 audit(1656.003:127816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23937 comm="syz.5.17803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0b3a3eec9 code=0x7ffc0000 [ 1655.034707][ T29] audit: type=1326 audit(1656.003:127817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23937 comm="syz.5.17803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b3a3eec9 code=0x7ffc0000 [ 1655.057991][ T29] audit: type=1326 audit(1656.003:127818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23937 comm="syz.5.17803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b3a3eec9 code=0x7ffc0000 [ 1655.126953][ T29] audit: type=1326 audit(1656.023:127819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23937 comm="syz.5.17803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0b3a3eec9 code=0x7ffc0000 [ 1655.152418][ T29] audit: type=1326 audit(1656.023:127820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23937 comm="syz.5.17803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b3a3eec9 code=0x7ffc0000 [ 1655.175868][ T29] audit: type=1326 audit(1656.023:127821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23937 comm="syz.5.17803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b3a3eec9 code=0x7ffc0000 [ 1655.199235][ T29] audit: type=1326 audit(1656.033:127822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23937 comm="syz.5.17803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0b3a3eec9 code=0x7ffc0000 [ 1655.222604][ T29] audit: type=1326 audit(1656.073:127823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23937 comm="syz.5.17803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b3a3eec9 code=0x7ffc0000 [ 1655.245928][ T29] audit: type=1326 audit(1656.073:127824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23937 comm="syz.5.17803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b3a3eec9 code=0x7ffc0000 [ 1655.286814][ T1089] Bluetooth: hci0: Frame reassembly failed (-84) [ 1655.451156][T23993] netlink: 'syz.1.17828': attribute type 3 has an invalid length. [ 1655.626848][T24019] netlink: 96 bytes leftover after parsing attributes in process `syz.8.17840'. [ 1655.853350][T24032] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1656.525948][T24079] netlink: 96 bytes leftover after parsing attributes in process `syz.1.17865'. [ 1656.642635][T24098] netlink: 388 bytes leftover after parsing attributes in process `syz.8.17873'. [ 1656.746513][T24114] netlink: 64 bytes leftover after parsing attributes in process `syz.5.17879'. [ 1656.926190][T24131] syz_tun: entered allmulticast mode [ 1656.935894][T24130] syz_tun: left allmulticast mode [ 1656.968411][T24138] netlink: 96 bytes leftover after parsing attributes in process `syz.8.17890'. [ 1657.297298][ T3595] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1657.299288][T13234] Bluetooth: hci0: command 0x1003 tx timeout [ 1657.329222][T24168] loop0: detected capacity change from 0 to 512 [ 1657.348928][T24168] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1657.364193][T24168] EXT4-fs (loop0): mount failed [ 1657.395511][T24176] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 1657.404774][T24177] netlink: 830 bytes leftover after parsing attributes in process `syz.8.17902'. [ 1657.454975][T24185] loop1: detected capacity change from 0 to 128 [ 1657.463170][T24185] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1657.502008][T19004] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1657.532093][T24192] netlink: 96 bytes leftover after parsing attributes in process `syz.8.17909'. [ 1657.585261][T24206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17914'. [ 1657.638535][T24212] loop0: detected capacity change from 0 to 256 [ 1657.652131][T24212] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1657.696470][T24212] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1657.806038][T24235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17926'. [ 1657.819632][T24235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17926'. [ 1657.925692][T24252] bridge0: port 3(batadv1) entered blocking state [ 1657.932298][T24252] bridge0: port 3(batadv1) entered disabled state [ 1657.981690][T24252] batadv1: entered allmulticast mode [ 1657.994450][T24252] batadv1: entered promiscuous mode [ 1658.426778][ T1045] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1658.436109][ T1045] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1659.281088][T24334] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 1659.374074][T24342] loop0: detected capacity change from 0 to 164 [ 1659.384410][T24342] syz.0.17971: attempt to access beyond end of device [ 1659.384410][T24342] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 1659.398610][T24342] syz.0.17971: attempt to access beyond end of device [ 1659.398610][T24342] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 1659.628957][T24369] loop0: detected capacity change from 0 to 512 [ 1659.638993][T24369] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1659.647469][T24369] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1659.655461][T24369] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.17984: corrupted inode contents [ 1659.669356][T24369] EXT4-fs (loop0): Remounting filesystem read-only [ 1659.678111][T24369] EXT4-fs (loop0): 1 truncate cleaned up [ 1659.685105][ T1089] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1659.695748][ T1089] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1659.707497][ T1089] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 1659.718675][T24369] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1659.753336][T19051] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1659.799021][T24383] loop0: detected capacity change from 0 to 4096 [ 1659.807658][T24383] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1659.822282][T24383] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1659.849198][T19051] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1660.065867][T24406] loop0: detected capacity change from 0 to 512 [ 1660.080628][T24406] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1660.110278][T24406] EXT4-fs error (device loop0): __ext4_fill_super:5512: inode #2: comm syz.0.17999: inode has both inline data and extents flags [ 1660.124290][T24406] EXT4-fs (loop0): get root inode failed [ 1660.130040][T24406] EXT4-fs (loop0): mount failed [ 1660.147931][T24406] loop0: detected capacity change from 0 to 512 [ 1660.155042][T24406] EXT4-fs: Mount option(s) incompatible with ext3 [ 1660.255516][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 1660.255580][ T29] audit: type=1400 audit(1661.243:127994): avc: denied { ioctl } for pid=24418 comm="syz.5.18004" path="socket:[190848]" dev="sockfs" ino=190848 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1660.260649][T24419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1660.319730][ T29] audit: type=1400 audit(1661.313:127995): avc: denied { name_bind } for pid=24421 comm="syz.0.18005" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1660.351647][T24419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1660.372866][ T29] audit: type=1400 audit(1661.333:127996): avc: denied { name_connect } for pid=24421 comm="syz.0.18005" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1660.407851][T11526] hid_parser_main: 8 callbacks suppressed [ 1660.407869][T11526] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 1660.422076][T11526] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 1660.431738][T11526] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3 [ 1660.439757][T11526] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 1660.507046][ T29] audit: type=1400 audit(1661.503:127997): avc: denied { nlmsg_write } for pid=24433 comm="syz.0.18011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1660.638558][ T29] audit: type=1326 audit(1661.633:127998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24444 comm="syz.0.18016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41cb74eec9 code=0x7ffc0000 [ 1660.673666][ T29] audit: type=1326 audit(1661.633:127999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24444 comm="syz.0.18016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41cb74eec9 code=0x7ffc0000 [ 1660.697186][ T29] audit: type=1326 audit(1661.633:128000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24444 comm="syz.0.18016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f41cb74eec9 code=0x7ffc0000 [ 1660.720698][ T29] audit: type=1326 audit(1661.633:128001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24444 comm="syz.0.18016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41cb74eec9 code=0x7ffc0000 [ 1660.744152][ T29] audit: type=1326 audit(1661.663:128002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24444 comm="syz.0.18016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41cb74eec9 code=0x7ffc0000 [ 1660.872040][T24449] loop1: detected capacity change from 0 to 32768 [ 1660.914035][T24449] loop1: p1 p3 < > [ 1661.202266][ T29] audit: type=1400 audit(1662.193:128003): avc: denied { create } for pid=24461 comm="syz.9.18022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1661.470356][T24496] __nla_validate_parse: 5 callbacks suppressed [ 1661.470378][T24496] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18038'. [ 1661.643324][T24512] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1661.715356][T24517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24517 comm=syz.5.18047 [ 1661.887549][T24549] netlink: 'syz.5.18061': attribute type 12 has an invalid length. [ 1661.938983][T24555] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24555 comm=syz.5.18064 [ 1662.030265][T24566] tipc: Started in network mode [ 1662.035270][T24566] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1662.044186][T24566] tipc: Enabling of bearer rejected, failed to enable media [ 1662.055041][T24569] netlink: 20 bytes leftover after parsing attributes in process `syz.9.18070'. [ 1662.077552][T24572] loop1: detected capacity change from 0 to 256 [ 1662.156353][T24585] loop1: detected capacity change from 0 to 2048 [ 1662.178672][T24585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1662.205856][T19004] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1662.258848][T24598] loop1: detected capacity change from 0 to 1024 [ 1662.265826][T24598] EXT4-fs: Ignoring removed oldalloc option [ 1662.271941][T24598] EXT4-fs: Ignoring removed bh option [ 1662.288942][T24598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1662.327149][T19004] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1662.798169][T24654] loop0: detected capacity change from 0 to 512 [ 1662.805916][T24654] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1662.837995][T24654] EXT4-fs error (device loop0): __ext4_fill_super:5512: inode #2: comm syz.0.18106: inode has both inline data and extents flags [ 1662.864499][T24654] EXT4-fs (loop0): get root inode failed [ 1662.870258][T24654] EXT4-fs (loop0): mount failed [ 1662.893409][T24662] tls_set_device_offload_rx: netdev not found [ 1662.902750][T24654] loop0: detected capacity change from 0 to 512 [ 1662.917229][T24654] EXT4-fs: Mount option(s) incompatible with ext3 [ 1663.193466][T24691] 9pnet_fd: Insufficient options for proto=fd [ 1663.794002][T24727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18135'. [ 1663.838468][T24733] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.18137'. [ 1664.270505][T24761] loop1: detected capacity change from 0 to 128 [ 1664.552483][T24789] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24789 comm=syz.9.18161 [ 1664.565380][T24789] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24789 comm=syz.9.18161 [ 1664.731347][T24797] loop1: detected capacity change from 0 to 1024 [ 1664.806957][T24797] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1664.846716][T24797] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.18164: inode has both inline data and extents flags [ 1664.936646][T19004] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1664.980493][T24823] loop1: detected capacity change from 0 to 512 [ 1664.994522][T24823] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1665.011597][T24827] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18175'. [ 1665.032121][T24823] EXT4-fs error (device loop1): __ext4_fill_super:5512: inode #2: comm syz.1.18172: inode has both inline data and extents flags [ 1665.059308][T24823] EXT4-fs (loop1): get root inode failed [ 1665.065021][T24823] EXT4-fs (loop1): mount failed [ 1665.082955][T24823] loop1: detected capacity change from 0 to 512 [ 1665.096631][T24823] EXT4-fs: Mount option(s) incompatible with ext3 [ 1665.230956][T24842] syzkaller0: entered promiscuous mode [ 1665.236505][T24842] syzkaller0: entered allmulticast mode [ 1665.303236][T24860] netlink: 12 bytes leftover after parsing attributes in process `,&#^%'. [ 1665.361789][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 1665.361824][ T29] audit: type=1400 audit(1666.353:128095): avc: denied { load_policy } for pid=24861 comm="syz.1.18190" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1665.395995][T24862] SELinux: ebitmap: truncated map [ 1665.418899][T24862] SELinux: failed to load policy [ 1665.434415][ T29] audit: type=1400 audit(1666.383:128096): avc: denied { map } for pid=24865 comm="syz.9.18192" path="socket:[191465]" dev="sockfs" ino=191465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1665.485816][ T1040] bond0: (slave bond_slave_0): interface is now down [ 1665.488611][T24871] netlink: 'syz.8.18195': attribute type 10 has an invalid length. [ 1665.492671][ T1040] bond0: (slave bond_slave_1): interface is now down [ 1665.521498][T24876] loop0: detected capacity change from 0 to 2048 [ 1665.527098][ T1040] bond0: now running without any active interface! [ 1665.536878][T24871] syz_tun: entered promiscuous mode [ 1665.552464][T24876] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 1665.579152][T24871] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1665.597737][ T1089] bond0: (slave syz_tun): interface is now down [ 1665.614586][ T1089] bond0: now running without any active interface! [ 1665.641002][ T29] audit: type=1400 audit(1666.633:128097): avc: denied { map } for pid=24874 comm="syz.0.18196" path="/415/file2/cgroup.controllers" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1665.682945][T24876] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1665.709413][T24886] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1665.716944][T24876] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 474 with error 28 [ 1665.729425][T24876] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1665.729425][T24876] [ 1665.739238][T24876] EXT4-fs (loop0): Total free blocks count 0 [ 1665.745457][T24876] EXT4-fs (loop0): Free/Dirty block details [ 1665.751450][T24876] EXT4-fs (loop0): free_blocks=2415919104 [ 1665.757267][T24876] EXT4-fs (loop0): dirty_blocks=480 [ 1665.762486][T24876] EXT4-fs (loop0): Block reservation details [ 1665.768544][T24876] EXT4-fs (loop0): i_reserved_data_blocks=30 [ 1665.808231][T19051] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 1666.347785][ T29] audit: type=1326 audit(1667.343:128098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24931 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34efdeec9 code=0x7ffc0000 [ 1666.370608][ T29] audit: type=1326 audit(1667.343:128099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24931 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fb34efdeec9 code=0x7ffc0000 [ 1666.393330][ T29] audit: type=1326 audit(1667.343:128100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24931 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34efdeec9 code=0x7ffc0000 [ 1666.416008][ T29] audit: type=1326 audit(1667.343:128101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24931 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fb34efdeec9 code=0x7ffc0000 [ 1666.438667][ T29] audit: type=1326 audit(1667.343:128102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24931 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34efdeec9 code=0x7ffc0000 [ 1666.461429][ T29] audit: type=1326 audit(1667.343:128103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24931 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fb34efdeec9 code=0x7ffc0000 [ 1666.484208][ T29] audit: type=1326 audit(1667.343:128104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24931 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34efdeec9 code=0x7ffc0000 [ 1666.596620][T24942] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1666.972852][T25002] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1667.028486][T25011] netlink: 'syz.9.18249': attribute type 1 has an invalid length. [ 1667.043480][T25011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1667.059217][T25011] netlink: 4 bytes leftover after parsing attributes in process `syz.9.18249'. [ 1667.070380][T25011] bond0 (unregistering): Released all slaves [ 1667.126100][T25020] loop0: detected capacity change from 0 to 512 [ 1667.142854][T25020] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.18253: inode has both inline data and extents flags [ 1667.167311][T25020] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.18253: couldn't read orphan inode 15 (err -117) [ 1667.197512][T25020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1667.262083][T25020] Invalid ELF header magic: != ELF [ 1667.308701][T19051] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1667.360894][T25049] 9pnet_fd: Insufficient options for proto=fd [ 1667.369858][T25048] netlink: 24 bytes leftover after parsing attributes in process `syz.9.18266'. [ 1667.500837][T25064] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 1667.939430][T25108] loop1: detected capacity change from 0 to 512 [ 1667.954692][T25108] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1667.967601][T25108] EXT4-fs error (device loop1): __ext4_fill_super:5512: inode #2: comm syz.1.18286: inode has both inline data and extents flags [ 1667.991588][T25108] EXT4-fs (loop1): get root inode failed [ 1667.997352][T25108] EXT4-fs (loop1): mount failed [ 1668.033898][T25108] loop1: detected capacity change from 0 to 512 [ 1668.043235][T25108] EXT4-fs: Mount option(s) incompatible with ext3 [ 1668.297233][T25139] netlink: 24 bytes leftover after parsing attributes in process `syz.5.18298'. [ 1668.686395][T25176] netlink: 256 bytes leftover after parsing attributes in process `syz.0.18314'. [ 1668.735981][T25180] 9pnet_fd: Insufficient options for proto=fd [ 1668.784483][T25184] netlink: 'syz.8.18317': attribute type 5 has an invalid length. [ 1668.901965][T25194] loop1: detected capacity change from 0 to 512 [ 1668.909524][T25195] netlink: 14528 bytes leftover after parsing attributes in process `syz.0.18322'. [ 1668.939874][T25194] EXT4-fs: Ignoring removed oldalloc option [ 1668.946085][T25194] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1668.978256][T25194] EXT4-fs (loop1): 1 truncate cleaned up [ 1668.994007][T25194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1669.018851][T25203] loop0: detected capacity change from 0 to 512 [ 1669.036094][T19004] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1669.046194][T25203] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1669.069829][T25203] EXT4-fs error (device loop0): __ext4_fill_super:5512: inode #2: comm syz.0.18325: inode has both inline data and extents flags [ 1669.106166][T25203] EXT4-fs (loop0): get root inode failed [ 1669.112011][T25203] EXT4-fs (loop0): mount failed [ 1669.122430][T25203] loop0: detected capacity change from 0 to 512 [ 1669.144634][T25203] EXT4-fs: Mount option(s) incompatible with ext3 [ 1669.174290][T25223] loop1: detected capacity change from 0 to 512 [ 1669.181588][T25223] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1669.190881][T25225] netlink: 8 bytes leftover after parsing attributes in process `syz.8.18334'. [ 1669.212151][T25223] EXT4-fs error (device loop1): __ext4_fill_super:5512: inode #2: comm syz.1.18333: inode has both inline data and extents flags [ 1669.229555][T25223] EXT4-fs (loop1): get root inode failed [ 1669.235343][T25223] EXT4-fs (loop1): mount failed [ 1669.248083][T25223] loop1: detected capacity change from 0 to 512 [ 1669.255086][T25223] EXT4-fs: Mount option(s) incompatible with ext3 [ 1669.304527][T25240] bridge0: port 3(batadv1) entered blocking state [ 1669.311213][T25240] bridge0: port 3(batadv1) entered disabled state [ 1669.319987][T25240] batadv1: entered allmulticast mode [ 1669.326029][T25240] batadv1: entered promiscuous mode [ 1669.375183][T25245] loop0: detected capacity change from 0 to 512 [ 1669.382749][T25245] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1669.398881][T25245] EXT4-fs error (device loop0): __ext4_fill_super:5512: inode #2: comm syz.0.18349: inode has both inline data and extents flags [ 1669.412543][T25245] EXT4-fs (loop0): get root inode failed [ 1669.418313][T25245] EXT4-fs (loop0): mount failed [ 1669.428909][T25245] loop0: detected capacity change from 0 to 512 [ 1669.436853][T25245] EXT4-fs: Mount option(s) incompatible with ext3 [ 1669.638771][T25275] bridge0: port 3(batadv1) entered blocking state [ 1669.645395][T25275] bridge0: port 3(batadv1) entered disabled state [ 1669.655707][T25275] batadv1: entered allmulticast mode [ 1669.661644][T25275] batadv1: entered promiscuous mode [ 1669.693000][T25279] 9pnet_fd: Insufficient options for proto=fd [ 1669.738676][T25288] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 1669.808274][ T1095] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1669.817597][ T1095] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1669.828747][T25297] loop1: detected capacity change from 0 to 512 [ 1669.863737][T25297] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1669.882182][T25297] EXT4-fs (loop1): mount failed [ 1669.891023][T25307] loop0: detected capacity change from 0 to 512 [ 1669.906479][T25307] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1669.949816][T25307] EXT4-fs error (device loop0): __ext4_fill_super:5512: inode #2: comm syz.0.18363: inode has both inline data and extents flags [ 1669.977665][T25307] EXT4-fs (loop0): get root inode failed [ 1669.983470][T25307] EXT4-fs (loop0): mount failed [ 1670.011391][T25307] loop0: detected capacity change from 0 to 512 [ 1670.039854][T25307] EXT4-fs: Mount option(s) incompatible with ext3 [ 1670.147041][ T1095] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1670.156314][ T1095] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1670.230269][T25319] Set syz1 is full, maxelem 65536 reached [ 1670.340365][T25351] loop1: detected capacity change from 0 to 256 [ 1670.350261][T25350] netlink: 'syz.5.18389': attribute type 5 has an invalid length. [ 1670.359394][T25351] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1670.382247][T25351] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1670.590080][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 1670.590098][ T29] audit: type=1326 audit(1671.583:128228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25379 comm="syz.9.18393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34efdeec9 code=0x7ffc0000 [ 1670.638892][T25364] geneve0 speed is unknown, defaulting to 1000 [ 1670.645883][T25364] lo speed is unknown, defaulting to 1000 [ 1670.652130][ T29] audit: type=1326 audit(1671.583:128229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25379 comm="syz.9.18393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb34efdeec9 code=0x7ffc0000 [ 1670.665360][T25386] loop0: detected capacity change from 0 to 512 [ 1670.675618][ T29] audit: type=1326 audit(1671.583:128230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25379 comm="syz.9.18393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34efdeec9 code=0x7ffc0000 [ 1670.686735][T25386] EXT4-fs: Ignoring removed oldalloc option [ 1670.705024][ T29] audit: type=1326 audit(1671.583:128231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25379 comm="syz.9.18393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34efdeec9 code=0x7ffc0000 [ 1670.712186][T25386] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1670.734229][ T29] audit: type=1326 audit(1671.583:128232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25379 comm="syz.9.18393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb34efdeec9 code=0x7ffc0000 [ 1670.734265][ T29] audit: type=1326 audit(1671.583:128233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25379 comm="syz.9.18393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34efdeec9 code=0x7ffc0000 [ 1670.734291][ T29] audit: type=1326 audit(1671.583:128234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25379 comm="syz.9.18393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34efdeec9 code=0x7ffc0000 [ 1670.744808][T25364] lo speed is unknown, defaulting to 1000 [ 1670.767842][ T29] audit: type=1326 audit(1671.583:128235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25379 comm="syz.9.18393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fb34efdeec9 code=0x7ffc0000 [ 1670.843528][ T29] audit: type=1326 audit(1671.583:128236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25379 comm="syz.9.18393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34efdeec9 code=0x7ffc0000 [ 1670.866900][ T29] audit: type=1326 audit(1671.583:128237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25379 comm="syz.9.18393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb34efdeec9 code=0x7ffc0000 [ 1670.898313][T25386] EXT4-fs (loop0): 1 truncate cleaned up [ 1670.914291][T25386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1670.972744][T25364] hsr0 speed is unknown, defaulting to 1000 [ 1671.070341][T19051] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1671.206026][T25408] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 1671.311435][T25411] loop1: detected capacity change from 0 to 8192 [ 1671.338030][T25411] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 1671.346907][T25411] FAT-fs (loop1): Filesystem has been set read-only [ 1671.372421][T25419] loop0: detected capacity change from 0 to 128 [ 1671.413851][T25419] syz.0.18410: attempt to access beyond end of device [ 1671.413851][T25419] loop0: rw=34817, sector=121, nr_sectors = 120 limit=128 [ 1671.445342][ T1033] kworker/u8:1: attempt to access beyond end of device [ 1671.445342][ T1033] loop0: rw=1, sector=241, nr_sectors = 800 limit=128 [ 1671.500610][T25430] loop1: detected capacity change from 0 to 512 [ 1671.516721][T25430] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1671.548752][T25430] EXT4-fs error (device loop1): __ext4_fill_super:5512: inode #2: comm syz.1.18414: inode has both inline data and extents flags [ 1671.568131][T25430] EXT4-fs (loop1): get root inode failed [ 1671.573840][T25430] EXT4-fs (loop1): mount failed [ 1671.593572][T25430] loop1: detected capacity change from 0 to 512 [ 1671.600615][T25430] EXT4-fs: Mount option(s) incompatible with ext3 [ 1671.818072][T25460] loop1: detected capacity change from 0 to 512 [ 1671.825573][T25460] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1671.850229][T25460] EXT4-fs error (device loop1): __ext4_fill_super:5512: inode #2: comm syz.1.18425: inode has both inline data and extents flags [ 1671.867354][T25460] EXT4-fs (loop1): get root inode failed [ 1671.873172][T25460] EXT4-fs (loop1): mount failed [ 1671.885285][T25460] loop1: detected capacity change from 0 to 512 [ 1671.893824][T25460] EXT4-fs: Mount option(s) incompatible with ext3 [ 1672.124103][T25474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1672.132714][T25474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1672.209363][T25474] geneve0 speed is unknown, defaulting to 1000 [ 1672.215959][T25474] lo speed is unknown, defaulting to 1000 [ 1672.222090][T25474] lo speed is unknown, defaulting to 1000 [ 1672.258890][T25474] hsr0 speed is unknown, defaulting to 1000 [ 1672.472292][T25486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18434'. [ 1672.500371][T25489] loop0: detected capacity change from 0 to 128 [ 1672.508357][T25489] EXT4-fs: Ignoring removed nobh option [ 1672.515564][T25489] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1672.545161][T19051] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1673.030974][T25530] loop1: detected capacity change from 0 to 512 [ 1673.049389][T25530] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1673.084796][T25530] EXT4-fs error (device loop1): __ext4_fill_super:5512: inode #2: comm syz.1.18452: inode has both inline data and extents flags [ 1673.116723][T25530] EXT4-fs (loop1): get root inode failed [ 1673.122596][T25530] EXT4-fs (loop1): mount failed [ 1673.150388][T25530] loop1: detected capacity change from 0 to 512 [ 1673.158090][T25530] EXT4-fs: Mount option(s) incompatible with ext3 [ 1673.351025][T25555] netlink: 96 bytes leftover after parsing attributes in process `syz.1.18459'. [ 1673.380521][T25559] loop1: detected capacity change from 0 to 512 [ 1673.400678][T25559] EXT4-fs (loop1): too many log groups per flexible block group [ 1673.416612][T25559] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 1673.423675][T25559] EXT4-fs (loop1): mount failed [ 1674.233867][T15806] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1674.259872][T15806] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1675.098728][T25685] sctp: [Deprecated]: syz.9.18510 (pid 25685) Use of int in max_burst socket option deprecated. [ 1675.098728][T25685] Use struct sctp_assoc_value instead [ 1675.269928][T25706] loop0: detected capacity change from 0 to 512 [ 1675.284527][T25706] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1675.299762][T25706] EXT4-fs error (device loop0): __ext4_fill_super:5512: inode #2: comm syz.0.18522: inode has both inline data and extents flags [ 1675.299915][T25706] EXT4-fs (loop0): get root inode failed [ 1675.299949][T25706] EXT4-fs (loop0): mount failed [ 1675.337919][T25706] loop0: detected capacity change from 0 to 512 [ 1675.348098][T25706] EXT4-fs: Mount option(s) incompatible with ext3 [ 1675.414800][T25719] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.18527'. [ 1675.816459][T25761] loop0: detected capacity change from 0 to 128 [ 1676.047761][ T29] kauditd_printk_skb: 593 callbacks suppressed [ 1676.047778][ T29] audit: type=1400 audit(1677.033:128831): avc: denied { bind } for pid=25776 comm="syz.0.18549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1676.074905][ T29] audit: type=1400 audit(1677.063:128832): avc: denied { listen } for pid=25776 comm="syz.0.18549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1676.094536][ T29] audit: type=1400 audit(1677.063:128833): avc: denied { read } for pid=25776 comm="syz.0.18549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1676.297396][T25802] netlink: 96 bytes leftover after parsing attributes in process `syz.5.18558'. [ 1676.407452][ T29] audit: type=1326 audit(1677.403:128834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25816 comm="syz.1.18565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702c65eec9 code=0x7ffc0000 [ 1676.458777][ T29] audit: type=1326 audit(1677.403:128835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25816 comm="syz.1.18565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702c65eec9 code=0x7ffc0000 [ 1676.482186][ T29] audit: type=1326 audit(1677.403:128836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25816 comm="syz.1.18565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f702c65eec9 code=0x7ffc0000 [ 1676.505871][ T29] audit: type=1326 audit(1677.403:128837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25816 comm="syz.1.18565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702c65eec9 code=0x7ffc0000 [ 1676.529203][ T29] audit: type=1326 audit(1677.403:128838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25816 comm="syz.1.18565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702c65eec9 code=0x7ffc0000 [ 1676.552668][ T29] audit: type=1326 audit(1677.403:128839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25816 comm="syz.1.18565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f702c65eec9 code=0x7ffc0000 [ 1676.576146][ T29] audit: type=1326 audit(1677.403:128840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25816 comm="syz.1.18565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702c65eec9 code=0x7ffc0000 [ 1676.996459][T25840] netlink: 12 bytes leftover after parsing attributes in process `,&#^%'. [ 1678.299694][T25901] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1678.745012][T25908] netlink: 'syz.5.18601': attribute type 1 has an invalid length. [ 1678.759222][T25908] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1678.772102][T25908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18601'. [ 1678.784199][T25908] bond2 (unregistering): Released all slaves [ 1678.888353][T25920] loop1: detected capacity change from 0 to 512 [ 1678.898154][T25920] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1678.910148][T25920] EXT4-fs (loop1): 1 truncate cleaned up [ 1678.916376][T25920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1678.952989][T19004] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1679.146953][T25950] netlink: 'syz.1.18620': attribute type 1 has an invalid length. [ 1679.170912][T25950] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1679.201935][T25950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18620'. [ 1679.218199][T25950] bond1 (unregistering): Released all slaves [ 1679.310014][T25972] batadv0: entered promiscuous mode [ 1679.315322][T25972] macsec1: entered allmulticast mode [ 1679.320703][T25972] batadv0: entered allmulticast mode [ 1679.328011][T25972] batadv0: left allmulticast mode [ 1679.333145][T25972] batadv0: left promiscuous mode [ 1679.403717][T25976] bond0: entered promiscuous mode [ 1679.408882][T25976] bond_slave_0: entered promiscuous mode [ 1679.414719][T25976] bond_slave_1: entered promiscuous mode [ 1679.423180][T25976] batadv0: entered promiscuous mode [ 1679.430040][T25976] hsr1: entered allmulticast mode [ 1679.435092][T25976] bond0: entered allmulticast mode [ 1679.440335][T25976] bond_slave_0: entered allmulticast mode [ 1679.446175][T25976] bond_slave_1: entered allmulticast mode [ 1679.451955][T25976] batadv0: entered allmulticast mode [ 1679.459268][T25976] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1679.469033][T25976] bond0: left promiscuous mode [ 1679.473887][T25976] bond_slave_0: left promiscuous mode [ 1679.479812][T25976] bond_slave_1: left promiscuous mode [ 1679.489211][T25976] batadv0: left promiscuous mode [ 1679.674044][T25996] netlink: 'syz.8.18641': attribute type 1 has an invalid length. [ 1679.689458][T25996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1679.707536][T25996] netlink: 4 bytes leftover after parsing attributes in process `syz.8.18641'. [ 1679.721769][T25996] bond1 (unregistering): Released all slaves [ 1680.576191][T26052] loop1: detected capacity change from 0 to 128 [ 1680.583354][T26052] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1680.596355][T26052] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1680.623179][ T1040] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1681.214048][T26066] netlink: 'syz.8.18670': attribute type 1 has an invalid length. [ 1681.233684][T26066] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1681.250787][T26064] ALSA: seq fatal error: cannot create timer (-19) [ 1681.257859][T26066] bond1: entered allmulticast mode [ 1681.474569][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 1681.474584][ T29] audit: type=1326 audit(1682.463:128972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26096 comm="syz.9.18683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34efdeec9 code=0x7ffc0000 [ 1681.528894][ T29] audit: type=1326 audit(1682.493:128973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26096 comm="syz.9.18683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb34efdeec9 code=0x7ffc0000 [ 1681.552285][ T29] audit: type=1326 audit(1682.493:128974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26096 comm="syz.9.18683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34efdeec9 code=0x7ffc0000 [ 1681.575711][ T29] audit: type=1326 audit(1682.493:128975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26096 comm="syz.9.18683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34efdeec9 code=0x7ffc0000 [ 1681.598986][ T29] audit: type=1326 audit(1682.493:128976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26096 comm="syz.9.18683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb34efdeec9 code=0x7ffc0000 [ 1681.622643][ T29] audit: type=1326 audit(1682.493:128977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26096 comm="syz.9.18683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34efdeec9 code=0x7ffc0000 [ 1681.646027][ T29] audit: type=1326 audit(1682.503:128978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26096 comm="syz.9.18683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34efdeec9 code=0x7ffc0000 [ 1681.669413][ T29] audit: type=1326 audit(1682.503:128979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26096 comm="syz.9.18683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb34efdeec9 code=0x7ffc0000 [ 1681.692718][ T29] audit: type=1326 audit(1682.503:128980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26096 comm="syz.9.18683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34efdeec9 code=0x7ffc0000 [ 1681.716051][ T29] audit: type=1326 audit(1682.503:128981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26096 comm="syz.9.18683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34efdeec9 code=0x7ffc0000 [ 1682.179459][T26140] SELinux: failed to load policy [ 1682.617715][T26159] loop0: detected capacity change from 0 to 512 [ 1682.635829][T26159] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1682.648622][T26159] EXT4-fs error (device loop0): __ext4_fill_super:5512: inode #2: comm syz.0.18710: inode has both inline data and extents flags [ 1682.682946][T26159] EXT4-fs (loop0): get root inode failed [ 1682.688679][T26159] EXT4-fs (loop0): mount failed [ 1682.719010][T26159] loop0: detected capacity change from 0 to 512 [ 1682.736250][T26159] EXT4-fs: Mount option(s) incompatible with ext3 [ 1682.790409][ T4991] IPVS: starting estimator thread 0... [ 1682.877237][T26171] IPVS: using max 2352 ests per chain, 117600 per kthread [ 1683.536936][T26241] loop1: detected capacity change from 0 to 2048 [ 1683.601802][T26241] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1683.677301][T26241] usb usb8: usbfs: process 26241 (syz.1.18738) did not claim interface 0 before use [ 1683.720702][T19004] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1684.034000][T26249] Set syz1 is full, maxelem 65536 reached [ 1684.343844][T26297] netlink: '+}[@': attribute type 1 has an invalid length. [ 1684.354593][T26299] loop0: detected capacity change from 0 to 128 [ 1684.361029][T26301] netlink: 'syz.9.18762': attribute type 4 has an invalid length. [ 1684.373629][T26301] netlink: 'syz.9.18762': attribute type 4 has an invalid length. [ 1684.384305][T26299] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 1684.392248][T26299] FAT-fs (loop0): Filesystem has been set read-only [ 1684.406272][T26299] syz.0.18761: attempt to access beyond end of device [ 1684.406272][T26299] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1684.425587][T26299] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 1684.433564][T26299] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 1684.442182][T26299] syz.0.18761: attempt to access beyond end of device [ 1684.442182][T26299] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1684.456387][T26299] syz.0.18761: attempt to access beyond end of device [ 1684.456387][T26299] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1684.470443][T26299] syz.0.18761: attempt to access beyond end of device [ 1684.470443][T26299] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1684.484779][T26299] syz.0.18761: attempt to access beyond end of device [ 1684.484779][T26299] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1684.498477][T26299] syz.0.18761: attempt to access beyond end of device [ 1684.498477][T26299] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1684.512266][T26299] syz.0.18761: attempt to access beyond end of device [ 1684.512266][T26299] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1684.544858][T26299] syz.0.18761: attempt to access beyond end of device [ 1684.544858][T26299] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1684.558667][T26299] syz.0.18761: attempt to access beyond end of device [ 1684.558667][T26299] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1684.572786][T26299] syz.0.18761: attempt to access beyond end of device [ 1684.572786][T26299] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1684.856791][T26329] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1685.127168][T26349] netlink: 4 bytes leftover after parsing attributes in process `syz.8.18783'. [ 1685.136291][T26349] netlink: 4 bytes leftover after parsing attributes in process `syz.8.18783'. [ 1685.165957][T26349] netlink: 4 bytes leftover after parsing attributes in process `syz.8.18783'. [ 1685.232069][T26357] loop0: detected capacity change from 0 to 4096 [ 1685.238929][T26349] netlink: 4 bytes leftover after parsing attributes in process `syz.8.18783'. [ 1685.247974][T26349] netlink: 4 bytes leftover after parsing attributes in process `syz.8.18783'. [ 1685.258680][T26357] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1685.265625][T26349] netlink: 4 bytes leftover after parsing attributes in process `syz.8.18783'. [ 1685.297653][T26357] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1685.329083][T19051] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1685.339026][T26349] netlink: 4 bytes leftover after parsing attributes in process `syz.8.18783'. [ 1685.348700][T26349] netlink: 4 bytes leftover after parsing attributes in process `syz.8.18783'. [ 1685.372765][T26349] netlink: 4 bytes leftover after parsing attributes in process `syz.8.18783'. [ 1685.483093][ T1095] Bluetooth: hci0: Frame reassembly failed (-84) [ 1685.498219][T26383] Bluetooth: hci0: Frame reassembly failed (-90) [ 1685.582567][T26396] loop1: detected capacity change from 0 to 512 [ 1685.595684][T26398] netlink: 22 bytes leftover after parsing attributes in process `syz.5.18803'. [ 1685.631493][T26396] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1685.648337][T26396] EXT4-fs (loop1): mount failed [ 1685.680264][T26416] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1685.753345][T26426] netlink: 'wÞ££‘': attribute type 9 has an invalid length. [ 1685.965474][T26442] vxcan1: entered allmulticast mode [ 1686.961995][T26477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=26477 comm=syz.5.18829 [ 1686.982277][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 1686.982296][ T29] audit: type=1400 audit(1687.973:129130): avc: denied { relabelfrom } for pid=26476 comm="syz.1.18835" name="NETLINK" dev="sockfs" ino=196620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1687.012888][ T29] audit: type=1400 audit(1687.973:129131): avc: denied { relabelto } for pid=26476 comm="syz.1.18835" name="NETLINK" dev="sockfs" ino=196620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_tcpdiag_socket permissive=1 [ 1687.158261][T26499] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1687.234451][T26507] netlink: 'syz.8.18849': attribute type 3 has an invalid length. [ 1687.373627][T26521] vxcan1: entered allmulticast mode [ 1687.455140][ T29] audit: type=1326 audit(1688.443:129132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26486 comm="syz.1.18839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702c65eec9 code=0x7ffc0000 [ 1687.482626][ T29] audit: type=1326 audit(1688.473:129133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26486 comm="syz.1.18839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f702c65eec9 code=0x7ffc0000 [ 1687.505968][ T29] audit: type=1326 audit(1688.473:129134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26486 comm="syz.1.18839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702c65eec9 code=0x7ffc0000 [ 1687.529425][ T29] audit: type=1326 audit(1688.473:129135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26486 comm="syz.1.18839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702c65eec9 code=0x7ffc0000 [ 1687.552736][ T29] audit: type=1326 audit(1688.473:129136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26486 comm="syz.1.18839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f702c65eec9 code=0x7ffc0000 [ 1687.576115][ T29] audit: type=1326 audit(1688.473:129137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26486 comm="syz.1.18839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702c65eec9 code=0x7ffc0000 [ 1687.599547][ T29] audit: type=1326 audit(1688.473:129138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26486 comm="syz.1.18839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702c65eec9 code=0x7ffc0000 [ 1687.623037][ T29] audit: type=1326 audit(1688.473:129139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26486 comm="syz.1.18839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f702c65eec9 code=0x7ffc0000 [ 1687.628770][T13234] Bluetooth: hci0: command 0x1003 tx timeout [ 1687.652172][ T3595] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1687.816961][T26540] Falling back ldisc for ttyS3. [ 1687.909488][T26572] netlink: 'syz.0.18878': attribute type 1 has an invalid length. [ 1687.950635][T26572] bond1: entered promiscuous mode [ 1687.956108][T26572] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1687.988722][T26572] bond1: (slave bridge1): making interface the new active one [ 1687.996252][T26572] bridge1: entered promiscuous mode [ 1688.007666][T26572] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1688.073734][T26592] loop0: detected capacity change from 0 to 512 [ 1688.094488][T26592] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1688.146900][T19051] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1688.296985][ T1089] Bluetooth: hci0: Frame reassembly failed (-84) [ 1688.827099][T26646] tipc: Enabling of bearer rejected, failed to enable media [ 1688.951013][T26654] loop1: detected capacity change from 0 to 8192 [ 1689.037089][ T1089] ================================================================== [ 1689.045275][ T1089] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / fat16_ent_put [ 1689.053557][ T1089] [ 1689.055904][ T1089] write to 0xffff88812790d2ae of 2 bytes by task 26655 on cpu 0: [ 1689.063655][ T1089] fat16_ent_put+0x28/0x60 [ 1689.068114][ T1089] fat_ent_write+0x6c/0xe0 [ 1689.072560][ T1089] fat_chain_add+0x15d/0x440 [ 1689.077186][ T1089] fat_get_block+0x46c/0x5e0 [ 1689.081796][ T1089] __block_write_begin_int+0x400/0xf90 [ 1689.087300][ T1089] cont_write_begin+0x5fc/0x970 [ 1689.092184][ T1089] fat_write_begin+0x4f/0xe0 [ 1689.096825][ T1089] generic_perform_write+0x184/0x490 [ 1689.102152][ T1089] __generic_file_write_iter+0x9e/0x120 [ 1689.107729][ T1089] generic_file_write_iter+0x8d/0x2f0 [ 1689.113130][ T1089] do_iter_readv_writev+0x4a1/0x540 [ 1689.118369][ T1089] vfs_writev+0x2df/0x8b0 [ 1689.122755][ T1089] __se_sys_pwritev2+0xfc/0x1c0 [ 1689.127645][ T1089] __x64_sys_pwritev2+0x67/0x80 [ 1689.132539][ T1089] x64_sys_call+0x2c59/0x3000 [ 1689.137249][ T1089] do_syscall_64+0xd2/0x200 [ 1689.141788][ T1089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1689.147712][ T1089] [ 1689.150056][ T1089] read to 0xffff88812790d200 of 512 bytes by task 1089 on cpu 1: [ 1689.157787][ T1089] copy_folio_from_iter_atomic+0x7fc/0x11b0 [ 1689.163736][ T1089] generic_perform_write+0x2c2/0x490 [ 1689.169056][ T1089] shmem_file_write_iter+0xc5/0xf0 [ 1689.174184][ T1089] lo_rw_aio+0x6a0/0x760 [ 1689.178450][ T1089] loop_process_work+0x52d/0xa60 [ 1689.183408][ T1089] loop_workfn+0x31/0x40 [ 1689.187673][ T1089] process_scheduled_works+0x4ce/0x9d0 [ 1689.193178][ T1089] worker_thread+0x582/0x770 [ 1689.197781][ T1089] kthread+0x489/0x510 [ 1689.201863][ T1089] ret_from_fork+0x122/0x1b0 [ 1689.206468][ T1089] ret_from_fork_asm+0x1a/0x30 [ 1689.211269][ T1089] [ 1689.213597][ T1089] Reported by Kernel Concurrency Sanitizer on: [ 1689.219754][ T1089] CPU: 1 UID: 0 PID: 1089 Comm: kworker/u8:56 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1689.231309][ T1089] Tainted: [W]=WARN [ 1689.235115][ T1089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1689.245179][ T1089] Workqueue: loop1 loop_workfn [ 1689.249963][ T1089] ================================================================== [ 1690.336692][T13234] Bluetooth: hci0: command 0x1003 tx timeout [ 1690.342755][ T3595] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1695.896718][ T1077] batman_adv: batadv1: MLD Querier appeared [ 1696.116666][ T1045] batman_adv: batadv2: MLD Querier appeared