last executing test programs: 2m35.34809435s ago: executing program 1 (id=255): r0 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xc00, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x14, 0x1}, {0x8, 0x9, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 2m35.28462556s ago: executing program 1 (id=259): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd88500000004000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) (fail_nth: 9) 2m34.975476505s ago: executing program 1 (id=260): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) (fail_nth: 5) 2m34.551685392s ago: executing program 1 (id=264): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc5, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000d80)="$eJzs289rHFUcAPDv7GZT01+Jpf5oWjVaxeCPpElr7cGLouBBQdBDPcYkLbHbRpoItgSNIvUoBe/iUfAv8KQXUU8Fr3oXoUgurZ5WZncm2d1sfnaTrd3PByb5vpm3vPfNzNt9My8bQNcaSn8kEfsj4veI6K8VGysM1X7dXlqY/GdpYTKJSuXtv5NqvVtLC5N51fx1+/JCT0Th8ySOtmh37srVCxPl8vTlrDw6f/GD0bkrV5+fuThxfvr89KXxM2dOnRx78fT4C23JM83r1uDHs8eOvP7u9Tcnz15/75fvkjz/pjzaZGi9g09VKm1urrMO1MVJTwc7wpYUa8M0StXx3x/FWDl5/fHaZx3tHLCjKpVK5cG1Dy9WgHtYEp3uAdAZ+Qd9ev+bb7s09bgr3Hy5dgOU5n0722pHeqKQ1Sk13d+201BEnF389+t0i515DgEA0OCHdP7zXKv5XyHqnwsdzNZQBiLi/og4FBGnI+JwRDwQUa37UEQ8vMX2mxdJVs9/Dm4rr81K538vZWtbjfO/fPYXA8WsdKCafyk5N1OePpH1bDhKe9Ly2Dpt/Pjqb1+2PJA1kc//0i1tP58LZpX+6tnT+LKpifmJO8m53s1PIwZ7WuWfLK8EJBFxJCIGt9nGzDPfHlvr2NCG+a+jDetMlW8inq6d/8Voyj+XrL8+OXpflKdPjOZXxWq/3rj21lrt31H+bZCe/70tr//l/AeS+vXaua23ce2PL9a8p9k4/9bXf2/yTsO+jybm5y+PRfQmb9Q6Xb9/vKne+Er9NP/h463H/6FY+UscjYj0In4kIh6NiMeyvj8eEU9ExPHVqd3ozYKfX3ny/WpQ2k7+OyvNf2pL538l6I3mPa2D4oWfvm9odGAr+afn/1Q1Gs72bOb9bzP92t7VDAAAAP8/hYjYH0lhZDkuFEZGav/Dfzj2Fsqzc/PPnpv98NJU7TsCA1Eq5E+6+uueh45lt/V5ebypfDJ7bvxVsa9aHpmcLU91OnnocvvWGP+pP4ud7h2w43xfC7qX8Q/dy/iH7mX8Q/dqMf77OtEPYPe1+vz/pAP9AHZf0/i37AddxP0/dC/jH7qX8Q9daa4vNv6SvECwKojCXdENwQ4FnX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI//AgAA//9Lr+a0") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0xf0ffff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100000081}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000, 0x40400}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000100000000000000000b000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) getresuid(0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xfdef) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) r6 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r6, 0x0, 0x0, 0x1001f0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000240)={0x3920e, r4, 0x3, 0x1, 0x5}) syz_clone(0xd000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0xf, 0x10, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x700, 0x700, 0x3, 0x8}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r9}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) 2m34.177379197s ago: executing program 1 (id=275): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000100), 0x6, 0x504, &(0x7f0000019940)="$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") r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_setup(0x6286, &(0x7f0000000380)={0x0, 0x607b, 0x8, 0x0, 0x10}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x5, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x8, 0x4, r0, 0x0, 0x0, 0x0, 0x800}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000240)=0x7, 0x0, 0x4) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000080)=ANY=[], 0x841, 0x0) mkdir(&(0x7f0000000040)='./file0/bus\x00', 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd7, 0x0, 0x0, 0x80000001, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='&!--\x00') r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) accept4$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f00000000c0)=0x1c, 0x800) 2m33.407904858s ago: executing program 1 (id=283): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000df0f000007"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x36) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000700)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) 2m33.33492216s ago: executing program 32 (id=283): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000df0f000007"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x36) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000700)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) 2.783444429s ago: executing program 5 (id=2676): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000018c0)={0x28, 0x0, 0xacf5e67dd0b583a1, 0x0, 0x25dfdbfd, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x8000}}}}}, 0x28}}, 0x24040010) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r6, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r7 = syz_open_pts(r6, 0x900) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000340)={0x7, 0x8001, 0x93, 0x81, 0x17, "7d842c024ce98365396b231d10675e7e275bf0"}) r8 = dup3(r7, r6, 0x80000) read(r8, &(0x7f00000000c0)=""/226, 0xe2) 2.563696792s ago: executing program 4 (id=2685): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 1.885976692s ago: executing program 5 (id=2697): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x36) write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0x0, 0x0) 1.862280222s ago: executing program 0 (id=2699): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x40200) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x4410, 0x0, 0x0, 0x3, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000140)={{0xa, 0x1}, {0x0, 0x9}, 0x3, 0x6, 0x7}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x900, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x4c}}, 0x0) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0x0, 0x10001}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x20, 0x26, &(0x7f0000000900)=@raw=[@jmp={0x5, 0x1, 0xb, 0x0, 0x8, 0xfffffffffffffffc, 0x1}, @call={0x85, 0x0, 0x0, 0xb1}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0x9, 0x1, 0x0, r2}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_fd={0x18, 0xb, 0x1, 0x0, r3}], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x68, '\x00', r6, @netfilter=0x2d, r3, 0x8, &(0x7f0000000240)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x10, 0x6, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000300)=[r3, r2, r7, r3], &(0x7f0000000380)=[{0x0, 0x3, 0x3, 0xc}, {0x1, 0x5, 0x5, 0x6}], 0x10, 0x9}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x7}, 0x18) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f0) 1.813312093s ago: executing program 5 (id=2700): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004000) sendmsg$NFT_BATCH(r2, 0x0, 0x0) 1.765569563s ago: executing program 5 (id=2703): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x4004000) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}}, 0x0) 1.765076394s ago: executing program 5 (id=2704): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 1.377568909s ago: executing program 4 (id=2705): r0 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, 0x0, &(0x7f00000014c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x2008}, 0x18) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x70bd26, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}, 0x1, 0x7}, 0x0) 1.317986s ago: executing program 0 (id=2707): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000540)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x6}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x0) 1.270472861s ago: executing program 4 (id=2708): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000018c0)={0x28, 0x0, 0xacf5e67dd0b583a1, 0x0, 0x25dfdbfd, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x8000}}}}}, 0x28}}, 0x24040010) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r6, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r7 = syz_open_pts(r6, 0x900) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000340)={0x7, 0x8001, 0x93, 0x81, 0x17, "7d842c024ce98365396b231d10675e7e275bf0"}) r8 = dup3(r7, r6, 0x80000) read(r8, &(0x7f00000000c0)=""/226, 0xe2) 890.155737ms ago: executing program 5 (id=2714): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000080)=0x5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040030946bd86db10c852d0000700000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r5}, 0x10) setitimer(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r7, 0x7) accept4$x25(r7, 0x0, 0x0, 0x80800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r10}, 0x10) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x1400, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 889.850247ms ago: executing program 2 (id=2715): stat(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, r0, &(0x7f0000000100)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfffffffffffffffa) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x11123, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[], 0x48) mmap(&(0x7f0000215000/0x3000)=nil, 0x3000, 0x8, 0x6011, r4, 0xffffffffffffc000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00', 0x1, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 729.980179ms ago: executing program 3 (id=2716): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 721.305279ms ago: executing program 2 (id=2717): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 630.090761ms ago: executing program 3 (id=2718): r0 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, 0x0, &(0x7f00000014c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x2008}, 0x18) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x70bd26, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}, 0x1, 0x7}, 0x0) 591.426031ms ago: executing program 3 (id=2719): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) 547.347362ms ago: executing program 2 (id=2720): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x40200) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x4410, 0x0, 0x0, 0x3, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000140)={{0xa, 0x1}, {0x0, 0x9}, 0x3, 0x6, 0x7}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x900, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x4c}}, 0x0) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0x0, 0x10001}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x20, 0x27, &(0x7f0000000900)=@raw=[@jmp={0x5, 0x1, 0xb, 0x0, 0x8, 0xfffffffffffffffc, 0x1}, @call={0x85, 0x0, 0x0, 0xb1}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0x9, 0x1, 0x0, r2}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x28}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_fd={0x18, 0xb, 0x1, 0x0, r3}], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x68, '\x00', r7, @netfilter=0x2d, r3, 0x8, &(0x7f0000000240)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x10, 0x6, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000300)=[r3, r2, r8, r3], &(0x7f0000000380)=[{0x0, 0x3, 0x3, 0xc}, {0x1, 0x5, 0x5, 0x6}], 0x10, 0x9}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x7}, 0x18) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb7"], 0x138) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 394.717724ms ago: executing program 4 (id=2721): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x100000000}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x898, 0x30, 0xffff, 0x4, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x8, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x0, 0x22, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x2, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40003, 0x0, 0x0, 0x9, 0x0, 0x0, 0xeeb, 0x7, 0x0, 0x0, 0x0, 0x0, 0x400, 0x8, 0x0, 0x0, 0x0, 0x81b, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8000, 0x6, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0xffffffff, 0x0, 0x40, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xf, 0x0, 0xfffffffe, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xf853, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1, 0x0, 0x0, 0x2, 0x0, 0x100, 0xfffffffc, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x55, 0xfff, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x6372, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffff9c, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x2, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x100000]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x7, 0xfffeffff, 0x100, 0x8, {0x4, 0x0, 0x400, 0x3200, 0x7fff, 0x7}, {0x7, 0x2, 0x5, 0x8, 0xd3, 0x766}, 0xfeea, 0x4, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0xc, 0x7ff, 0x8, 0x3, 0x80000000, 0x6, 0x3, 0x2, 0x1, 0x80000000, 0x0, 0x4, 0x80, 0x5, 0x3, 0x5, 0x9d, 0xfffffffe, 0x2, 0x8c, 0x80000001, 0x6, 0x7f, 0x2, 0x0, 0x5, 0x76, 0x3, 0x2, 0x7, 0x800, 0x0, 0x10000, 0xf0, 0x8, 0xb8, 0x151, 0xfff, 0x6, 0x9, 0x401, 0xfffffff8, 0x5, 0x8, 0xfffffffa, 0x4, 0x7, 0x8000, 0xf9, 0x1, 0x7fff, 0x1, 0x0, 0xfff, 0x5c0078f0, 0x7f, 0x1, 0x2, 0xfffffffa, 0x8, 0x7, 0x7, 0x7, 0x6, 0x80000000, 0x5, 0x4, 0x1, 0x6, 0xffffffff, 0x10000, 0x5, 0x6, 0x3, 0x2, 0xfffffffe, 0x8, 0x3, 0x74, 0x4, 0xfee, 0x401, 0x5, 0x5, 0xfff, 0x8f4, 0x3, 0x8000, 0x2, 0x6, 0x1, 0x1ff, 0x9, 0x4, 0x6, 0x9, 0xc, 0x0, 0x80, 0xe, 0xd, 0x6, 0x8, 0xfffffffe, 0xef, 0x2, 0x3, 0x1f, 0x7, 0x9, 0x1ec0, 0x2, 0xfffff001, 0x2, 0x0, 0x10001, 0xd5b, 0x5, 0x0, 0x1, 0x7, 0x3, 0x7, 0x8, 0x1, 0x4, 0x8, 0x101, 0x200, 0x6, 0x80000000, 0x5, 0x2, 0x2, 0x7fff, 0x7, 0x6, 0x3ff, 0x7, 0xffff935a, 0x8, 0xf64, 0x8, 0x4, 0x80000001, 0x3, 0xfe000000, 0x3, 0x2, 0x8, 0xba, 0x400000, 0x3, 0x8, 0x7, 0x7, 0x2, 0x400, 0x7, 0x1ff, 0x1, 0x746, 0x2, 0x6, 0x0, 0x1, 0x6, 0x53a, 0x5, 0x8, 0x6, 0x8, 0x3, 0x7ff, 0x6, 0xf, 0xa, 0x3, 0xfffff000, 0xdae4, 0x5, 0xa, 0x5, 0x7, 0x2, 0x66e, 0xe, 0x4, 0x0, 0x6, 0x1, 0x0, 0x9, 0x5, 0x10000, 0x3, 0x2, 0x7ff, 0x4, 0x5, 0x4, 0x4, 0x0, 0x80000000, 0x80, 0x5a78, 0xf96, 0x7, 0x6, 0x80, 0xc, 0xfffffff9, 0x7, 0x4, 0x5, 0x4, 0x9, 0x2, 0xffff4fba, 0x5, 0x3, 0x800, 0x93, 0x3, 0x3000000, 0x8, 0x80000001, 0x6, 0x6, 0xde4a, 0x9, 0xd, 0x10001, 0x4c, 0x8, 0xf0, 0x0, 0x5, 0x9, 0x4, 0x2, 0x8, 0x3, 0x2, 0x5, 0x9, 0x2, 0x4, 0x9, 0x7, 0x5, 0x10001, 0x8, 0x9]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) syz_open_procfs(0x0, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, 0x0, 0x40000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000100039042cbd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="8300040000000000200012800800011a736974001400028005000900b8e183b29da4489800000600080034000000"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, &(0x7f00000003c0)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffdb, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 352.083905ms ago: executing program 3 (id=2722): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000502, 0x0, &(0x7f0000000080)) 310.155275ms ago: executing program 0 (id=2723): bpf$PROG_LOAD(0x5, 0x0, 0xffffffab) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) 238.790306ms ago: executing program 2 (id=2724): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5, @ANYBLOB="09e669d62fa3ea8c00f3c2e121b1fefab0d7ba63f0ab3b020000006b54f36e64ff0700"/49], 0x1c}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 219.076797ms ago: executing program 3 (id=2725): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 218.483387ms ago: executing program 0 (id=2726): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/config\x00') r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280", @ANYRES32=r4], 0x48}}, 0x0) 189.371527ms ago: executing program 4 (id=2727): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x36) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000700)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) 161.293468ms ago: executing program 4 (id=2728): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00'}, 0x10) io_uring_enter(r1, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 123.626288ms ago: executing program 2 (id=2729): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x7c}}, 0x4004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}}, 0x0) 108.220658ms ago: executing program 0 (id=2730): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000040002800800", @ANYRES32], 0x48}}, 0x0) 63.165799ms ago: executing program 2 (id=2731): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000018c0)={0x28, 0x0, 0xacf5e67dd0b583a1, 0x0, 0x25dfdbfd, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x8000}}}}}, 0x28}}, 0x24040010) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r6, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r7 = syz_open_pts(r6, 0x900) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000340)={0x7, 0x8001, 0x93, 0x81, 0x17, "7d842c024ce98365396b231d10675e7e275bf0"}) r8 = dup3(r7, r6, 0x80000) read(r8, &(0x7f00000000c0)=""/226, 0xe2) 36.696189ms ago: executing program 0 (id=2732): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x36) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000700)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) 0s ago: executing program 3 (id=2733): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000540)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x6}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1cd05e929 code=0x7ffc0000 [ 153.813547][ T29] audit: type=1326 audit(1752384212.887:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9013 comm="syz.0.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1cd05e929 code=0x7ffc0000 [ 153.837066][ T29] audit: type=1326 audit(1752384212.887:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9013 comm="syz.0.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1cd05e929 code=0x7ffc0000 [ 153.860517][ T29] audit: type=1326 audit(1752384212.887:3195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9013 comm="syz.0.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1cd05e929 code=0x7ffc0000 [ 153.922039][ T9036] Cannot find add_set index 0 as target [ 153.932177][ T9036] loop0: detected capacity change from 0 to 512 [ 153.970435][ T9036] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.992834][ T9036] ext4 filesystem being mounted at /391/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.030082][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.180821][ T9074] loop4: detected capacity change from 0 to 164 [ 154.181708][ T9074] ISOFS: unable to read i-node block [ 154.181725][ T9074] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 154.315146][ T9097] xt_hashlimit: max too large, truncated to 1048576 [ 154.324749][ T10] hid-generic 0000:3000000:0000.004D: unknown main item tag 0x4 [ 154.332613][ T10] hid-generic 0000:3000000:0000.004D: unknown main item tag 0x2 [ 154.353643][ T10] hid-generic 0000:3000000:0000.004D: unknown main item tag 0x0 [ 154.361443][ T10] hid-generic 0000:3000000:0000.004D: unknown main item tag 0x0 [ 154.369189][ T10] hid-generic 0000:3000000:0000.004D: unknown main item tag 0x0 [ 154.376978][ T10] hid-generic 0000:3000000:0000.004D: unknown main item tag 0x0 [ 154.384681][ T10] hid-generic 0000:3000000:0000.004D: unknown main item tag 0x0 [ 154.392384][ T10] hid-generic 0000:3000000:0000.004D: unknown main item tag 0x0 [ 154.400195][ T10] hid-generic 0000:3000000:0000.004D: unknown main item tag 0x0 [ 154.408150][ T10] hid-generic 0000:3000000:0000.004D: unknown main item tag 0x0 [ 154.416158][ T10] hid-generic 0000:3000000:0000.004D: unknown main item tag 0x0 [ 154.423941][ T10] hid-generic 0000:3000000:0000.004D: unknown main item tag 0x0 [ 154.431635][ T10] hid-generic 0000:3000000:0000.004D: unknown main item tag 0x0 [ 154.439419][ T10] hid-generic 0000:3000000:0000.004D: unknown main item tag 0x0 [ 154.447252][ T10] hid-generic 0000:3000000:0000.004D: unknown main item tag 0x0 [ 154.455001][ T10] hid-generic 0000:3000000:0000.004D: unknown main item tag 0x0 [ 154.466868][ T10] hid-generic 0000:3000000:0000.004D: hidraw0: HID v0.00 Device [sy] on syz0 [ 154.547588][ T9116] loop2: detected capacity change from 0 to 2048 [ 154.555224][ T9116] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 154.682363][ T9135] x_tables: duplicate underflow at hook 1 [ 154.785972][ T9138] xt_hashlimit: max too large, truncated to 1048576 [ 154.856293][ T9155] netlink: 'syz.2.1821': attribute type 1 has an invalid length. [ 154.967095][ T9164] loop0: detected capacity change from 0 to 1024 [ 154.984569][ T9164] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1824: Failed to acquire dquot type 0 [ 155.007723][ T9164] EXT4-fs (loop0): 1 truncate cleaned up [ 155.014032][ T9164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.111214][ T9164] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1824: Failed to acquire dquot type 0 [ 155.212680][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.325575][ T9193] xt_hashlimit: max too large, truncated to 1048576 [ 155.333195][ T3371] hid-generic 0000:3000000:0000.004E: unknown main item tag 0x4 [ 155.340972][ T3371] hid-generic 0000:3000000:0000.004E: unknown main item tag 0x2 [ 155.350948][ T3371] hid-generic 0000:3000000:0000.004E: unknown main item tag 0x0 [ 155.358801][ T3371] hid-generic 0000:3000000:0000.004E: unknown main item tag 0x0 [ 155.366548][ T3371] hid-generic 0000:3000000:0000.004E: unknown main item tag 0x0 [ 155.374315][ T3371] hid-generic 0000:3000000:0000.004E: unknown main item tag 0x0 [ 155.382035][ T3371] hid-generic 0000:3000000:0000.004E: unknown main item tag 0x0 [ 155.389842][ T3371] hid-generic 0000:3000000:0000.004E: unknown main item tag 0x0 [ 155.397618][ T3371] hid-generic 0000:3000000:0000.004E: unknown main item tag 0x0 [ 155.405591][ T3371] hid-generic 0000:3000000:0000.004E: unknown main item tag 0x0 [ 155.413332][ T3371] hid-generic 0000:3000000:0000.004E: unknown main item tag 0x0 [ 155.421142][ T3371] hid-generic 0000:3000000:0000.004E: unknown main item tag 0x0 [ 155.428940][ T3371] hid-generic 0000:3000000:0000.004E: unknown main item tag 0x0 [ 155.436651][ T3371] hid-generic 0000:3000000:0000.004E: unknown main item tag 0x0 [ 155.444457][ T3371] hid-generic 0000:3000000:0000.004E: unknown main item tag 0x0 [ 155.452605][ T3371] hid-generic 0000:3000000:0000.004E: unknown main item tag 0x0 [ 155.474135][ T3371] hid-generic 0000:3000000:0000.004E: hidraw0: HID v0.00 Device [sy] on syz0 [ 155.624989][ T9212] hsr_slave_0: left promiscuous mode [ 155.948165][ T9212] hsr_slave_1: left promiscuous mode [ 156.413012][ T9221] __nla_validate_parse: 18 callbacks suppressed [ 156.413053][ T9221] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1844'. [ 156.782891][ T10] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x4 [ 156.783044][ T36] hid-generic 0000:3000000:0000.0050: unknown main item tag 0x4 [ 156.790678][ T10] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x2 [ 156.798313][ T36] hid-generic 0000:3000000:0000.0050: unknown main item tag 0x2 [ 156.811035][ T10] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x0 [ 156.813928][ T9250] xt_hashlimit: max too large, truncated to 1048576 [ 156.821301][ T10] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x0 [ 156.835666][ T10] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x0 [ 156.836267][ T36] hid-generic 0000:3000000:0000.0050: unknown main item tag 0x0 [ 156.843482][ T10] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x0 [ 156.851166][ T36] hid-generic 0000:3000000:0000.0050: unknown main item tag 0x0 [ 156.858983][ T10] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x0 [ 156.866517][ T36] hid-generic 0000:3000000:0000.0050: unknown main item tag 0x0 [ 156.874204][ T10] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x0 [ 156.881856][ T36] hid-generic 0000:3000000:0000.0050: unknown main item tag 0x0 [ 156.889575][ T10] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x0 [ 156.897175][ T36] hid-generic 0000:3000000:0000.0050: unknown main item tag 0x0 [ 156.904791][ T10] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x0 [ 156.912448][ T36] hid-generic 0000:3000000:0000.0050: unknown main item tag 0x0 [ 156.920094][ T10] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x0 [ 156.927756][ T36] hid-generic 0000:3000000:0000.0050: unknown main item tag 0x0 [ 156.927779][ T36] hid-generic 0000:3000000:0000.0050: unknown main item tag 0x0 [ 156.927806][ T36] hid-generic 0000:3000000:0000.0050: unknown main item tag 0x0 [ 156.935435][ T10] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x0 [ 156.943097][ T36] hid-generic 0000:3000000:0000.0050: unknown main item tag 0x0 [ 156.950735][ T10] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x0 [ 156.950758][ T10] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x0 [ 156.950778][ T10] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x0 [ 156.958452][ T36] hid-generic 0000:3000000:0000.0050: unknown main item tag 0x0 [ 156.966064][ T10] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x0 [ 156.973713][ T36] hid-generic 0000:3000000:0000.0050: unknown main item tag 0x0 [ 156.989341][ T9247] xt_hashlimit: max too large, truncated to 1048576 [ 156.996646][ T36] hid-generic 0000:3000000:0000.0050: unknown main item tag 0x0 [ 156.996675][ T36] hid-generic 0000:3000000:0000.0050: unknown main item tag 0x0 [ 157.043104][ T36] hid-generic 0000:3000000:0000.0050: hidraw0: HID v0.00 Device [sy] on syz0 [ 157.061556][ T10] hid-generic 0000:3000000:0000.004F: hidraw1: HID v0.00 Device [sy] on syz0 [ 157.122986][ T9257] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1858'. [ 157.132049][ T9257] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1858'. [ 157.141061][ T9257] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1858'. [ 157.155333][ T9260] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1856'. [ 157.157481][ T9257] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1858'. [ 157.173536][ T9260] hsr_slave_0: left promiscuous mode [ 157.180046][ T9260] hsr_slave_1: left promiscuous mode [ 157.262459][ T9270] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1862'. [ 157.301428][ T9272] loop0: detected capacity change from 0 to 512 [ 157.319786][ T9272] ext4: Unknown parameter '' [ 157.569461][ T9279] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1865'. [ 157.654048][ T9285] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1868'. [ 157.760541][ T9283] loop0: detected capacity change from 0 to 512 [ 157.778713][ T9283] EXT4-fs: Ignoring removed oldalloc option [ 157.787023][ T9283] EXT4-fs: Ignoring removed orlov option [ 157.823665][ T9283] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 157.854398][ T9283] EXT4-fs (loop0): orphan cleanup on readonly fs [ 157.879216][ T9283] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1867: bg 0: block 248: padding at end of block bitmap is not set [ 157.880419][ T9298] netlink: 'syz.2.1872': attribute type 1 has an invalid length. [ 157.902463][ T9298] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1872'. [ 157.914277][ T9283] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1867: Failed to acquire dquot type 1 [ 157.974906][ T9283] EXT4-fs (loop0): 1 truncate cleaned up [ 157.976300][ T9302] Cannot find add_set index 0 as target [ 157.992444][ T9304] bridge0: entered allmulticast mode [ 158.005596][ T9302] loop4: detected capacity change from 0 to 512 [ 158.025404][ T9283] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 158.044466][ T9283] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.063354][ T9302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.063431][ T9302] ext4 filesystem being mounted at /392/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.129821][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.164966][ T9323] sit0: entered promiscuous mode [ 158.172678][ T9323] netlink: 'syz.0.1881': attribute type 1 has an invalid length. [ 158.251302][ T9334] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 158.271321][ T9336] xt_hashlimit: max too large, truncated to 1048576 [ 158.280652][ T10] hid-generic 0000:3000000:0000.0051: unknown main item tag 0x4 [ 158.288405][ T10] hid-generic 0000:3000000:0000.0051: unknown main item tag 0x2 [ 158.296439][ T10] hid-generic 0000:3000000:0000.0051: unknown main item tag 0x0 [ 158.304305][ T10] hid-generic 0000:3000000:0000.0051: unknown main item tag 0x0 [ 158.312067][ T10] hid-generic 0000:3000000:0000.0051: unknown main item tag 0x0 [ 158.319809][ T10] hid-generic 0000:3000000:0000.0051: unknown main item tag 0x0 [ 158.327703][ T10] hid-generic 0000:3000000:0000.0051: unknown main item tag 0x0 [ 158.335406][ T10] hid-generic 0000:3000000:0000.0051: unknown main item tag 0x0 [ 158.343102][ T10] hid-generic 0000:3000000:0000.0051: unknown main item tag 0x0 [ 158.350810][ T10] hid-generic 0000:3000000:0000.0051: unknown main item tag 0x0 [ 158.358563][ T10] hid-generic 0000:3000000:0000.0051: unknown main item tag 0x0 [ 158.366247][ T10] hid-generic 0000:3000000:0000.0051: unknown main item tag 0x0 [ 158.373966][ T10] hid-generic 0000:3000000:0000.0051: unknown main item tag 0x0 [ 158.381662][ T10] hid-generic 0000:3000000:0000.0051: unknown main item tag 0x0 [ 158.389360][ T10] hid-generic 0000:3000000:0000.0051: unknown main item tag 0x0 [ 158.397052][ T10] hid-generic 0000:3000000:0000.0051: unknown main item tag 0x0 [ 158.412242][ T10] hid-generic 0000:3000000:0000.0051: hidraw0: HID v0.00 Device [sy] on syz0 [ 158.494627][ T9352] Cannot find add_set index 0 as target [ 158.502776][ T9352] loop2: detected capacity change from 0 to 512 [ 158.543733][ T9352] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.556784][ T9352] ext4 filesystem being mounted at /391/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.622895][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.652706][ T9368] loop2: detected capacity change from 0 to 512 [ 158.667179][ T10] hid-generic 0000:3000000:0000.0052: unknown main item tag 0x4 [ 158.674969][ T10] hid-generic 0000:3000000:0000.0052: unknown main item tag 0x2 [ 158.683112][ T9369] xt_hashlimit: max too large, truncated to 1048576 [ 158.692558][ T10] hid-generic 0000:3000000:0000.0052: unknown main item tag 0x0 [ 158.700341][ T10] hid-generic 0000:3000000:0000.0052: unknown main item tag 0x0 [ 158.708150][ T10] hid-generic 0000:3000000:0000.0052: unknown main item tag 0x0 [ 158.715888][ T10] hid-generic 0000:3000000:0000.0052: unknown main item tag 0x0 [ 158.723645][ T10] hid-generic 0000:3000000:0000.0052: unknown main item tag 0x0 [ 158.731452][ T10] hid-generic 0000:3000000:0000.0052: unknown main item tag 0x0 [ 158.739259][ T10] hid-generic 0000:3000000:0000.0052: unknown main item tag 0x0 [ 158.747007][ T10] hid-generic 0000:3000000:0000.0052: unknown main item tag 0x0 [ 158.749662][ T9368] EXT4-fs error (device loop2): __ext4_iget:5379: inode #4: block 193290: comm syz.2.1896: invalid block [ 158.755027][ T10] hid-generic 0000:3000000:0000.0052: unknown main item tag 0x0 [ 158.774040][ T10] hid-generic 0000:3000000:0000.0052: unknown main item tag 0x0 [ 158.781904][ T10] hid-generic 0000:3000000:0000.0052: unknown main item tag 0x0 [ 158.789607][ T10] hid-generic 0000:3000000:0000.0052: unknown main item tag 0x0 [ 158.794859][ T36] hid-generic 0000:3000000:0000.0053: unknown main item tag 0x4 [ 158.797331][ T10] hid-generic 0000:3000000:0000.0052: unknown main item tag 0x0 [ 158.804975][ T36] hid-generic 0000:3000000:0000.0053: unknown main item tag 0x2 [ 158.812614][ T10] hid-generic 0000:3000000:0000.0052: unknown main item tag 0x0 [ 158.833468][ T9375] xt_hashlimit: max too large, truncated to 1048576 [ 158.844305][ T9368] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.1896: Bad quota inode: 4, type: 1 [ 158.846984][ T36] hid-generic 0000:3000000:0000.0053: unknown main item tag 0x0 [ 158.861225][ T9368] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 158.863014][ T36] hid-generic 0000:3000000:0000.0053: unknown main item tag 0x0 [ 158.883252][ T9368] EXT4-fs (loop2): mount failed [ 158.885347][ T36] hid-generic 0000:3000000:0000.0053: unknown main item tag 0x0 [ 158.890891][ T10] hid-generic 0000:3000000:0000.0052: hidraw0: HID v0.00 Device [sy] on syz0 [ 158.897887][ T36] hid-generic 0000:3000000:0000.0053: unknown main item tag 0x0 [ 158.897914][ T36] hid-generic 0000:3000000:0000.0053: unknown main item tag 0x0 [ 158.923268][ T36] hid-generic 0000:3000000:0000.0053: unknown main item tag 0x0 [ 158.931016][ T36] hid-generic 0000:3000000:0000.0053: unknown main item tag 0x0 [ 158.938814][ T36] hid-generic 0000:3000000:0000.0053: unknown main item tag 0x0 [ 158.946529][ T36] hid-generic 0000:3000000:0000.0053: unknown main item tag 0x0 [ 158.954263][ T36] hid-generic 0000:3000000:0000.0053: unknown main item tag 0x0 [ 158.962139][ T36] hid-generic 0000:3000000:0000.0053: unknown main item tag 0x0 [ 158.969857][ T36] hid-generic 0000:3000000:0000.0053: unknown main item tag 0x0 [ 158.977648][ T36] hid-generic 0000:3000000:0000.0053: unknown main item tag 0x0 [ 158.985350][ T36] hid-generic 0000:3000000:0000.0053: unknown main item tag 0x0 [ 158.995514][ T36] hid-generic 0000:3000000:0000.0053: hidraw0: HID v0.00 Device [sy] on syz0 [ 159.064245][ T9384] netlink: 'syz.2.1896': attribute type 13 has an invalid length. [ 159.232690][ T9400] Cannot find add_set index 0 as target [ 159.241302][ T9400] loop0: detected capacity change from 0 to 512 [ 159.260240][ T9400] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.273157][ T9400] ext4 filesystem being mounted at /421/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.384493][ T9403] lo speed is unknown, defaulting to 1000 [ 159.455404][ T9403] loop5: detected capacity change from 0 to 1024 [ 159.462488][ T9403] EXT4-fs: Ignoring removed nobh option [ 159.468087][ T9403] EXT4-fs: Ignoring removed bh option [ 159.476958][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.774959][ T9415] xt_hashlimit: max too large, truncated to 1048576 [ 159.775156][ T9425] xt_hashlimit: max too large, truncated to 1048576 [ 159.782773][ T10] hid-generic 0000:3000000:0000.0054: unknown main item tag 0x4 [ 159.789485][ T36] hid-generic 0000:3000000:0000.0055: unknown main item tag 0x4 [ 159.795994][ T10] hid-generic 0000:3000000:0000.0054: unknown main item tag 0x2 [ 159.803712][ T36] hid-generic 0000:3000000:0000.0055: unknown main item tag 0x2 [ 159.818885][ T10] hid-generic 0000:3000000:0000.0054: unknown main item tag 0x0 [ 159.821707][ T36] hid-generic 0000:3000000:0000.0055: unknown main item tag 0x0 [ 159.826626][ T10] hid-generic 0000:3000000:0000.0054: unknown main item tag 0x0 [ 159.834349][ T36] hid-generic 0000:3000000:0000.0055: unknown main item tag 0x0 [ 159.834378][ T36] hid-generic 0000:3000000:0000.0055: unknown main item tag 0x0 [ 159.834406][ T36] hid-generic 0000:3000000:0000.0055: unknown main item tag 0x0 [ 159.842068][ T10] hid-generic 0000:3000000:0000.0054: unknown main item tag 0x0 [ 159.842091][ T10] hid-generic 0000:3000000:0000.0054: unknown main item tag 0x0 [ 159.849759][ T36] hid-generic 0000:3000000:0000.0055: unknown main item tag 0x0 [ 159.857420][ T10] hid-generic 0000:3000000:0000.0054: unknown main item tag 0x0 [ 159.865051][ T36] hid-generic 0000:3000000:0000.0055: unknown main item tag 0x0 [ 159.872788][ T10] hid-generic 0000:3000000:0000.0054: unknown main item tag 0x0 [ 159.872813][ T10] hid-generic 0000:3000000:0000.0054: unknown main item tag 0x0 [ 159.880483][ T36] hid-generic 0000:3000000:0000.0055: unknown main item tag 0x0 [ 159.888238][ T10] hid-generic 0000:3000000:0000.0054: unknown main item tag 0x0 [ 159.895848][ T36] hid-generic 0000:3000000:0000.0055: unknown main item tag 0x0 [ 159.895871][ T36] hid-generic 0000:3000000:0000.0055: unknown main item tag 0x0 [ 159.895892][ T36] hid-generic 0000:3000000:0000.0055: unknown main item tag 0x0 [ 159.903570][ T10] hid-generic 0000:3000000:0000.0054: unknown main item tag 0x0 [ 159.903600][ T10] hid-generic 0000:3000000:0000.0054: unknown main item tag 0x0 [ 159.911244][ T36] hid-generic 0000:3000000:0000.0055: unknown main item tag 0x0 [ 159.918913][ T10] hid-generic 0000:3000000:0000.0054: unknown main item tag 0x0 [ 159.926521][ T36] hid-generic 0000:3000000:0000.0055: unknown main item tag 0x0 [ 159.934244][ T10] hid-generic 0000:3000000:0000.0054: unknown main item tag 0x0 [ 159.941864][ T36] hid-generic 0000:3000000:0000.0055: unknown main item tag 0x0 [ 159.949493][ T10] hid-generic 0000:3000000:0000.0054: unknown main item tag 0x0 [ 159.957137][ T36] hid-generic 0000:3000000:0000.0055: unknown main item tag 0x0 [ 159.964767][ T10] hid-generic 0000:3000000:0000.0054: unknown main item tag 0x0 [ 160.039674][ T10] hid-generic 0000:3000000:0000.0054: hidraw0: HID v0.00 Device [sy] on syz0 [ 160.060087][ T36] hid-generic 0000:3000000:0000.0055: hidraw0: HID v0.00 Device [sy] on syz0 [ 160.155725][ T4360] EXT4-fs unmount: 1 callbacks suppressed [ 160.155742][ T4360] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.863826][ T9460] loop4: detected capacity change from 0 to 1024 [ 160.876284][ T9461] xt_hashlimit: max too large, truncated to 1048576 [ 160.885552][ T9460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.905145][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 160.905162][ T29] audit: type=1326 audit(1752384220.177:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9455 comm="syz.4.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687363e929 code=0x7ffc0000 [ 160.918869][ T9460] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1925: Allocating blocks 497-513 which overlap fs metadata [ 160.940763][ T29] audit: type=1326 audit(1752384220.177:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9455 comm="syz.4.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f687363e929 code=0x7ffc0000 [ 160.959651][ T9460] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 3 with error 117 [ 160.972400][ T29] audit: type=1326 audit(1752384220.177:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9455 comm="syz.4.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687363e929 code=0x7ffc0000 [ 160.984634][ T9460] EXT4-fs (loop4): This should not happen!! Data will be lost [ 160.984634][ T9460] [ 161.018357][ T29] audit: type=1326 audit(1752384220.177:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9455 comm="syz.4.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687363e929 code=0x7ffc0000 [ 161.041840][ T29] audit: type=1326 audit(1752384220.187:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9455 comm="syz.4.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f687363e929 code=0x7ffc0000 [ 161.065493][ T29] audit: type=1326 audit(1752384220.187:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9455 comm="syz.4.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687363e929 code=0x7ffc0000 [ 161.089114][ T29] audit: type=1326 audit(1752384220.187:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9455 comm="syz.4.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f687363e929 code=0x7ffc0000 [ 161.112536][ T29] audit: type=1326 audit(1752384220.187:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9455 comm="syz.4.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687363e929 code=0x7ffc0000 [ 161.136033][ T29] audit: type=1326 audit(1752384220.187:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9455 comm="syz.4.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f687363e929 code=0x7ffc0000 [ 161.159516][ T29] audit: type=1326 audit(1752384220.187:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9455 comm="syz.4.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687363e929 code=0x7ffc0000 [ 161.327913][ T36] hid-generic 0000:3000000:0000.0056: unknown main item tag 0x4 [ 161.335790][ T36] hid-generic 0000:3000000:0000.0056: unknown main item tag 0x2 [ 161.343532][ T9475] xt_hashlimit: max too large, truncated to 1048576 [ 161.351637][ T36] hid-generic 0000:3000000:0000.0056: unknown main item tag 0x0 [ 161.359466][ T36] hid-generic 0000:3000000:0000.0056: unknown main item tag 0x0 [ 161.367203][ T36] hid-generic 0000:3000000:0000.0056: unknown main item tag 0x0 [ 161.374887][ T36] hid-generic 0000:3000000:0000.0056: unknown main item tag 0x0 [ 161.382661][ T36] hid-generic 0000:3000000:0000.0056: unknown main item tag 0x0 [ 161.390392][ T36] hid-generic 0000:3000000:0000.0056: unknown main item tag 0x0 [ 161.398114][ T36] hid-generic 0000:3000000:0000.0056: unknown main item tag 0x0 [ 161.405904][ T36] hid-generic 0000:3000000:0000.0056: unknown main item tag 0x0 [ 161.413653][ T36] hid-generic 0000:3000000:0000.0056: unknown main item tag 0x0 [ 161.421410][ T36] hid-generic 0000:3000000:0000.0056: unknown main item tag 0x0 [ 161.429137][ T36] hid-generic 0000:3000000:0000.0056: unknown main item tag 0x0 [ 161.436876][ T36] hid-generic 0000:3000000:0000.0056: unknown main item tag 0x0 [ 161.444566][ T36] hid-generic 0000:3000000:0000.0056: unknown main item tag 0x0 [ 161.452333][ T36] hid-generic 0000:3000000:0000.0056: unknown main item tag 0x0 [ 161.460609][ T36] hid-generic 0000:3000000:0000.0056: hidraw0: HID v0.00 Device [sy] on syz0 [ 161.511872][ T9480] __nla_validate_parse: 12 callbacks suppressed [ 161.511892][ T9480] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1933'. [ 161.635967][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.656540][ T9487] netlink: 'syz.3.1935': attribute type 1 has an invalid length. [ 161.665752][ T9487] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1935'. [ 161.722674][ T9500] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1939'. [ 161.774931][ T9505] netlink: 'syz.0.1938': attribute type 2 has an invalid length. [ 161.884358][ T9516] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1944'. [ 161.888768][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1944'. [ 161.968335][ T9524] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 161.976676][ T9526] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1946'. [ 161.977485][ T9524] SELinux: Context Ü is not valid (left unmapped). [ 161.985765][ T9526] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1946'. [ 162.195111][ T9538] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1950'. [ 162.398305][ T9542] xt_hashlimit: max too large, truncated to 1048576 [ 162.620005][ T9550] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1955'. [ 162.724247][ T9559] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1960'. [ 163.437119][ T9570] lo speed is unknown, defaulting to 1000 [ 163.922530][ T9566] loop2: detected capacity change from 0 to 512 [ 163.958849][ T9566] EXT4-fs: Ignoring removed oldalloc option [ 163.987193][ T9566] EXT4-fs: Ignoring removed orlov option [ 164.024175][ T9566] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 164.114073][ T9566] EXT4-fs (loop2): orphan cleanup on readonly fs [ 164.162834][ T9566] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1962: bg 0: block 248: padding at end of block bitmap is not set [ 164.222260][ T9584] loop3: detected capacity change from 0 to 512 [ 164.253283][ T9566] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1962: Failed to acquire dquot type 1 [ 164.274755][ T9584] EXT4-fs: Ignoring removed oldalloc option [ 164.303198][ T9584] EXT4-fs: Ignoring removed orlov option [ 164.331840][ T9566] EXT4-fs (loop2): 1 truncate cleaned up [ 164.364322][ T9584] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 164.395373][ T9566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 164.590741][ T9584] EXT4-fs (loop3): orphan cleanup on readonly fs [ 164.613876][ T9566] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.886119][ T9610] lo speed is unknown, defaulting to 1000 [ 165.086633][ T9584] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1966: bg 0: block 248: padding at end of block bitmap is not set [ 165.256713][ T9584] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1966: Failed to acquire dquot type 1 [ 165.525748][ T9584] EXT4-fs (loop3): 1 truncate cleaned up [ 165.593459][ T9584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 165.673872][ T9584] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.826641][ T9630] xt_hashlimit: max too large, truncated to 1048576 [ 166.054763][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 166.054814][ T29] audit: type=1400 audit(1752384225.327:3750): avc: denied { create } for pid=9638 comm="syz.3.1987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 166.087173][ T29] audit: type=1400 audit(1752384225.327:3751): avc: denied { connect } for pid=9638 comm="syz.3.1987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 166.106963][ T29] audit: type=1400 audit(1752384225.327:3752): avc: denied { write } for pid=9638 comm="syz.3.1987" path="socket:[22869]" dev="sockfs" ino=22869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 166.130490][ T29] audit: type=1400 audit(1752384225.337:3753): avc: denied { write } for pid=9638 comm="syz.3.1987" name="kcm" dev="proc" ino=4026532579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 166.153155][ T29] audit: type=1400 audit(1752384225.337:3754): avc: denied { create } for pid=9638 comm="syz.3.1987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 166.461212][ T9645] lo speed is unknown, defaulting to 1000 [ 166.579497][ T9651] __nla_validate_parse: 9 callbacks suppressed [ 166.579519][ T9651] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1989'. [ 166.904461][ T9660] bridge0: entered allmulticast mode [ 166.929214][ T9662] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1994'. [ 167.011581][ T9669] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1997'. [ 167.035124][ T9672] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1998'. [ 167.125788][ T29] audit: type=1400 audit(1752384226.107:3755): avc: denied { write } for pid=9655 comm="syz.3.1991" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 167.148824][ T29] audit: type=1326 audit(1752384226.167:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9659 comm="syz.5.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5d571258e7 code=0x7ffc0000 [ 167.172205][ T29] audit: type=1326 audit(1752384226.167:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9659 comm="syz.5.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5d570cab19 code=0x7ffc0000 [ 167.195746][ T29] audit: type=1326 audit(1752384226.167:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9659 comm="syz.5.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5d571258e7 code=0x7ffc0000 [ 167.219131][ T29] audit: type=1326 audit(1752384226.167:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9659 comm="syz.5.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5d570cab19 code=0x7ffc0000 [ 167.271053][ T9666] loop2: detected capacity change from 0 to 512 [ 167.331726][ T9666] EXT4-fs: Ignoring removed oldalloc option [ 167.360614][ T9666] EXT4-fs: Ignoring removed orlov option [ 167.449427][ T9666] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 167.510477][ T9666] EXT4-fs (loop2): orphan cleanup on readonly fs [ 167.569318][ T9666] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1996: bg 0: block 248: padding at end of block bitmap is not set [ 167.638541][ T9666] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1996: Failed to acquire dquot type 1 [ 167.741713][ T9666] EXT4-fs (loop2): 1 truncate cleaned up [ 167.766563][ T9666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 167.817425][ T9666] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.035218][ T9690] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2005'. [ 168.082604][ T9695] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2008'. [ 168.150174][ T9692] xt_hashlimit: max too large, truncated to 1048576 [ 168.166943][ T9704] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2010'. [ 168.242048][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2004'. [ 168.523276][ T9711] loop0: detected capacity change from 0 to 512 [ 168.556302][ T9711] EXT4-fs: Ignoring removed oldalloc option [ 168.585832][ T9711] EXT4-fs: Ignoring removed orlov option [ 168.592316][ T9711] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 168.605851][ T9711] EXT4-fs (loop0): orphan cleanup on readonly fs [ 168.613069][ T9711] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2013: bg 0: block 248: padding at end of block bitmap is not set [ 168.627711][ T9711] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2013: Failed to acquire dquot type 1 [ 168.640207][ T9711] EXT4-fs (loop0): 1 truncate cleaned up [ 168.647883][ T9711] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 168.661047][ T9711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.671413][ T9722] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2016'. [ 168.725281][ T9731] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2020'. [ 168.925919][ T9742] xt_hashlimit: max too large, truncated to 1048576 [ 169.007414][ T3393] hid-generic 0000:3000000:0000.0057: unknown main item tag 0x4 [ 169.015184][ T3393] hid-generic 0000:3000000:0000.0057: unknown main item tag 0x2 [ 169.027437][ T9753] xt_hashlimit: max too large, truncated to 1048576 [ 169.074479][ T9756] loop3: detected capacity change from 0 to 512 [ 169.088759][ T3393] hid-generic 0000:3000000:0000.0057: unknown main item tag 0x0 [ 169.096514][ T3393] hid-generic 0000:3000000:0000.0057: unknown main item tag 0x0 [ 169.104319][ T3393] hid-generic 0000:3000000:0000.0057: unknown main item tag 0x0 [ 169.112013][ T3393] hid-generic 0000:3000000:0000.0057: unknown main item tag 0x0 [ 169.119764][ T3393] hid-generic 0000:3000000:0000.0057: unknown main item tag 0x0 [ 169.127556][ T3393] hid-generic 0000:3000000:0000.0057: unknown main item tag 0x0 [ 169.135217][ T3393] hid-generic 0000:3000000:0000.0057: unknown main item tag 0x0 [ 169.142985][ T3393] hid-generic 0000:3000000:0000.0057: unknown main item tag 0x0 [ 169.150739][ T3393] hid-generic 0000:3000000:0000.0057: unknown main item tag 0x0 [ 169.158446][ T3393] hid-generic 0000:3000000:0000.0057: unknown main item tag 0x0 [ 169.166307][ T3393] hid-generic 0000:3000000:0000.0057: unknown main item tag 0x0 [ 169.174048][ T3393] hid-generic 0000:3000000:0000.0057: unknown main item tag 0x0 [ 169.181903][ T3393] hid-generic 0000:3000000:0000.0057: unknown main item tag 0x0 [ 169.189680][ T3393] hid-generic 0000:3000000:0000.0057: unknown main item tag 0x0 [ 169.208175][ T9755] loop4: detected capacity change from 0 to 512 [ 169.255913][ T3393] hid-generic 0000:3000000:0000.0057: hidraw0: HID v0.00 Device [sy] on syz0 [ 169.268269][ T9756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 169.291291][ T9755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 169.310693][ T9755] ext4 filesystem being mounted at /419/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.337293][ T9756] ext4 filesystem being mounted at /350/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.417841][ T9764] loop0: detected capacity change from 0 to 512 [ 169.426855][ T9764] EXT4-fs: Ignoring removed oldalloc option [ 169.436070][ T9764] EXT4-fs: Ignoring removed orlov option [ 169.462122][ T9764] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 169.556799][ T9764] EXT4-fs (loop0): orphan cleanup on readonly fs [ 169.578045][ T9764] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2029: bg 0: block 248: padding at end of block bitmap is not set [ 169.595625][ T9764] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2029: Failed to acquire dquot type 1 [ 169.708923][ T9764] EXT4-fs (loop0): 1 truncate cleaned up [ 169.733410][ T9764] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 169.755649][ T9764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.915008][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 170.276688][ T9803] xt_hashlimit: max too large, truncated to 1048576 [ 170.428383][ T9810] xt_hashlimit: max too large, truncated to 1048576 [ 170.696312][ T9829] xt_hashlimit: max too large, truncated to 1048576 [ 171.381361][ T9866] Cannot find add_set index 0 as target [ 171.440762][ T9866] loop4: detected capacity change from 0 to 512 [ 171.463514][ T9866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.476522][ T9866] ext4 filesystem being mounted at /425/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 171.508838][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.585274][ T9878] hsr_slave_0: left promiscuous mode [ 171.597283][ T9878] hsr_slave_1: left promiscuous mode [ 171.637136][ T9880] __nla_validate_parse: 14 callbacks suppressed [ 171.637157][ T9880] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2069'. [ 171.715926][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 171.715985][ T29] audit: type=1400 audit(1752384230.987:3867): avc: denied { append } for pid=9883 comm="syz.0.2071" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 171.776853][ T29] audit: type=1400 audit(1752384231.017:3868): avc: denied { execmod } for pid=9883 comm="syz.0.2071" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=24408 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 171.803130][ T29] audit: type=1400 audit(1752384231.017:3869): avc: denied { execute } for pid=9883 comm="syz.0.2071" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=24408 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 171.893616][ T9891] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2074'. [ 172.075898][ T9897] loop0: detected capacity change from 0 to 512 [ 172.085386][ T9897] EXT4-fs: Ignoring removed oldalloc option [ 172.097745][ T9897] EXT4-fs: Ignoring removed orlov option [ 172.123056][ T9897] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 172.156612][ T9897] EXT4-fs (loop0): orphan cleanup on readonly fs [ 172.172182][ T9897] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2077: bg 0: block 248: padding at end of block bitmap is not set [ 172.210191][ T9901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2076'. [ 172.261152][ T9897] Quota error (device loop0): write_blk: dquota write failed [ 172.269902][ T9897] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 172.280784][ T9897] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2077: Failed to acquire dquot type 1 [ 172.515918][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 172.532377][ T9904] xt_hashlimit: max too large, truncated to 1048576 [ 172.540175][ T7491] hid-generic 0000:3000000:0000.0058: unknown main item tag 0x4 [ 172.547984][ T7491] hid-generic 0000:3000000:0000.0058: unknown main item tag 0x2 [ 172.568017][ T7491] hid-generic 0000:3000000:0000.0058: unknown main item tag 0x0 [ 172.569484][ T9897] EXT4-fs (loop0): 1 truncate cleaned up [ 172.575729][ T7491] hid-generic 0000:3000000:0000.0058: unknown main item tag 0x0 [ 172.575760][ T7491] hid-generic 0000:3000000:0000.0058: unknown main item tag 0x0 [ 172.575789][ T7491] hid-generic 0000:3000000:0000.0058: unknown main item tag 0x0 [ 172.575829][ T7491] hid-generic 0000:3000000:0000.0058: unknown main item tag 0x0 [ 172.575854][ T7491] hid-generic 0000:3000000:0000.0058: unknown main item tag 0x0 [ 172.575878][ T7491] hid-generic 0000:3000000:0000.0058: unknown main item tag 0x0 [ 172.575906][ T7491] hid-generic 0000:3000000:0000.0058: unknown main item tag 0x0 [ 172.576011][ T7491] hid-generic 0000:3000000:0000.0058: unknown main item tag 0x0 [ 172.576039][ T7491] hid-generic 0000:3000000:0000.0058: unknown main item tag 0x0 [ 172.576067][ T7491] hid-generic 0000:3000000:0000.0058: unknown main item tag 0x0 [ 172.576102][ T7491] hid-generic 0000:3000000:0000.0058: unknown main item tag 0x0 [ 172.576127][ T7491] hid-generic 0000:3000000:0000.0058: unknown main item tag 0x0 [ 172.576184][ T7491] hid-generic 0000:3000000:0000.0058: unknown main item tag 0x0 [ 172.579445][ T7491] hid-generic 0000:3000000:0000.0058: hidraw0: HID v0.00 Device [sy] on syz0 [ 172.599674][ T9897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 172.645223][ T9908] xt_hashlimit: max too large, truncated to 1048576 [ 172.646160][ T7491] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x4 [ 172.667520][ T9897] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.668667][ T7491] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x2 [ 172.687026][ T7491] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x0 [ 172.763326][ T7491] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x0 [ 172.771170][ T7491] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x0 [ 172.778988][ T7491] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x0 [ 172.786699][ T7491] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x0 [ 172.794411][ T7491] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x0 [ 172.802128][ T7491] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x0 [ 172.809887][ T7491] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x0 [ 172.817595][ T7491] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x0 [ 172.825357][ T7491] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x0 [ 172.833137][ T7491] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x0 [ 172.840856][ T7491] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x0 [ 172.848616][ T7491] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x0 [ 172.856346][ T7491] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x0 [ 172.908757][ T7491] hid-generic 0000:3000000:0000.0059: hidraw0: HID v0.00 Device [sy] on syz0 [ 172.932618][ T9915] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2082'. [ 173.067668][ T9930] xt_hashlimit: max too large, truncated to 1048576 [ 173.165571][ T9934] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2089'. [ 173.213751][ T29] audit: type=1400 audit(1752384232.487:3870): avc: denied { create } for pid=9937 comm="syz.5.2091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 173.215680][ T9940] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2092'. [ 173.233443][ T29] audit: type=1400 audit(1752384232.487:3871): avc: denied { read append } for pid=9937 comm="syz.5.2091" name="usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 173.266422][ T29] audit: type=1400 audit(1752384232.487:3872): avc: denied { open } for pid=9937 comm="syz.5.2091" path="/dev/usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 173.302072][ T9941] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2090'. [ 173.319557][ T9945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2093'. [ 173.721878][ T29] audit: type=1326 audit(1752384232.997:3873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9955 comm="syz.3.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f00e6a058e7 code=0x7ffc0000 [ 173.745336][ T29] audit: type=1326 audit(1752384232.997:3874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9955 comm="syz.3.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f00e69aab19 code=0x7ffc0000 [ 173.793700][ T9948] loop4: detected capacity change from 0 to 512 [ 173.823714][ T9948] EXT4-fs: Ignoring removed oldalloc option [ 173.848349][ T9948] EXT4-fs: Ignoring removed orlov option [ 173.939790][ T9948] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 173.972031][ T9948] EXT4-fs (loop4): orphan cleanup on readonly fs [ 173.997468][ T9948] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2094: bg 0: block 248: padding at end of block bitmap is not set [ 174.032982][ T9948] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2094: Failed to acquire dquot type 1 [ 174.087629][ T9968] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2098'. [ 174.113530][ T9948] EXT4-fs (loop4): 1 truncate cleaned up [ 174.128731][ T9948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 174.150146][ T9948] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.281017][ T9978] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2101'. [ 174.294051][ T9979] xt_hashlimit: max too large, truncated to 1048576 [ 174.553101][ T9988] bridge0: port 1(batadv5) entered blocking state [ 174.559847][ T9988] bridge0: port 1(batadv5) entered disabled state [ 174.568408][ T9988] batadv5: entered allmulticast mode [ 174.574530][ T9988] batadv5: entered promiscuous mode [ 174.590540][ T9989] xt_hashlimit: max too large, truncated to 1048576 [ 174.769044][T10004] xt_hashlimit: max too large, truncated to 1048576 [ 175.022972][T10018] loop5: detected capacity change from 0 to 512 [ 175.036446][T10018] EXT4-fs: Ignoring removed oldalloc option [ 175.044202][T10018] EXT4-fs: Ignoring removed orlov option [ 175.058448][ T5408] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled [ 175.067871][ T5408] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled [ 175.080422][T10018] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 175.103082][T10028] xt_hashlimit: max too large, truncated to 1048576 [ 175.116088][T10018] EXT4-fs (loop5): orphan cleanup on readonly fs [ 175.138534][T10018] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2112: bg 0: block 248: padding at end of block bitmap is not set [ 175.162052][T10018] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2112: Failed to acquire dquot type 1 [ 175.185072][T10018] EXT4-fs (loop5): 1 truncate cleaned up [ 175.206536][T10018] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 175.231332][T10018] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.360048][T10051] bridge0: entered allmulticast mode [ 175.524525][T10056] loop2: detected capacity change from 0 to 512 [ 175.765419][T10056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 175.821913][T10074] xt_hashlimit: max too large, truncated to 1048576 [ 175.879146][T10056] ext4 filesystem being mounted at /446/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.366544][T10091] lo speed is unknown, defaulting to 1000 [ 176.435400][T10093] Cannot find add_set index 0 as target [ 176.471810][T10093] loop3: detected capacity change from 0 to 512 [ 176.513438][T10093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.574865][T10093] ext4 filesystem being mounted at /361/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.889465][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.124872][T10102] __nla_validate_parse: 8 callbacks suppressed [ 177.124892][T10102] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2138'. [ 177.242114][T10105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2136'. [ 177.659302][T10110] xt_hashlimit: max too large, truncated to 1048576 [ 177.792847][ T7491] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x4 [ 177.800697][ T7491] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x2 [ 177.809035][T10114] xt_hashlimit: max too large, truncated to 1048576 [ 177.904382][ T7491] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x0 [ 177.912187][ T7491] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x0 [ 177.919889][ T7491] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x0 [ 177.927593][ T7491] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x0 [ 177.935264][ T7491] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x0 [ 177.942958][ T7491] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x0 [ 177.950686][ T7491] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x0 [ 177.958410][ T7491] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x0 [ 177.966095][ T7491] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x0 [ 177.973802][ T7491] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x0 [ 177.981539][ T7491] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x0 [ 177.989284][ T7491] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x0 [ 177.997071][ T7491] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x0 [ 178.004868][ T7491] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x0 [ 178.069449][ T7491] hid-generic 0000:3000000:0000.005A: hidraw0: HID v0.00 Device [sy] on syz0 [ 178.104749][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2144'. [ 178.859331][T10142] Cannot find add_set index 0 as target [ 178.872053][T10142] loop4: detected capacity change from 0 to 512 [ 178.882403][T10142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.997814][T10145] lo speed is unknown, defaulting to 1000 [ 179.095134][T10142] ext4 filesystem being mounted at /447/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.719271][T10152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2153'. [ 181.096264][T10157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2156'. [ 181.105902][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.965997][T10158] lo speed is unknown, defaulting to 1000 [ 182.175283][T10161] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2157'. [ 182.431800][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 182.431816][ T29] audit: type=1326 audit(1752384241.707:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10177 comm="syz.5.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5d571258e7 code=0x7ffc0000 [ 182.506937][ T29] audit: type=1326 audit(1752384241.747:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10177 comm="syz.5.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5d570cab19 code=0x7ffc0000 [ 182.530545][ T29] audit: type=1326 audit(1752384241.747:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10177 comm="syz.5.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5d571258e7 code=0x7ffc0000 [ 182.554017][ T29] audit: type=1326 audit(1752384241.747:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10177 comm="syz.5.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5d570cab19 code=0x7ffc0000 [ 182.577550][ T29] audit: type=1326 audit(1752384241.747:4018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10177 comm="syz.5.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5712e929 code=0x7ffc0000 [ 182.601502][ T29] audit: type=1326 audit(1752384241.747:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10177 comm="syz.5.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f5d5712e929 code=0x7ffc0000 [ 182.625116][ T29] audit: type=1326 audit(1752384241.747:4020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10177 comm="syz.5.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5712e929 code=0x7ffc0000 [ 182.648691][ T29] audit: type=1326 audit(1752384241.747:4021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10177 comm="syz.5.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d5712e929 code=0x7ffc0000 [ 182.672210][ T29] audit: type=1326 audit(1752384241.747:4022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10177 comm="syz.5.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5712e929 code=0x7ffc0000 [ 182.695788][ T29] audit: type=1326 audit(1752384241.747:4023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10177 comm="syz.5.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d5712e929 code=0x7ffc0000 [ 182.812184][T10199] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2168'. [ 182.823972][T10188] loop3: detected capacity change from 0 to 512 [ 182.851424][T10202] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2169'. [ 182.861165][T10188] EXT4-fs: Ignoring removed oldalloc option [ 182.887803][T10188] EXT4-fs: Ignoring removed orlov option [ 182.911083][T10188] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 182.952420][T10204] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2170'. [ 182.968764][T10188] EXT4-fs (loop3): orphan cleanup on readonly fs [ 183.013497][T10188] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2163: bg 0: block 248: padding at end of block bitmap is not set [ 183.059332][T10188] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2163: Failed to acquire dquot type 1 [ 183.089549][T10188] EXT4-fs (loop3): 1 truncate cleaned up [ 183.097241][T10210] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2172'. [ 183.119746][T10188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 183.162886][T10188] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.208625][T10219] xt_hashlimit: max too large, truncated to 1048576 [ 183.250507][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 183.292520][T10223] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2178'. [ 183.430967][T10234] lo speed is unknown, defaulting to 1000 [ 183.556862][T10237] xt_hashlimit: max too large, truncated to 1048576 [ 183.702325][T10241] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2180'. [ 184.018351][T10248] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2183'. [ 184.051401][T10250] Cannot find add_set index 0 as target [ 184.064890][T10250] loop3: detected capacity change from 0 to 512 [ 184.075391][T10250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.093114][T10250] ext4 filesystem being mounted at /373/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 184.109162][T10223] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 184.136170][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.301046][T10257] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2186'. [ 184.407636][T10265] Cannot find add_set index 0 as target [ 184.428741][T10265] loop0: detected capacity change from 0 to 512 [ 184.465779][T10265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.497287][T10265] ext4 filesystem being mounted at /485/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 184.643982][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.668268][T10279] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2194'. [ 184.884496][ T7491] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x4 [ 184.892349][ T7491] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x2 [ 184.900061][ T7491] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x0 [ 184.907778][ T7491] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x0 [ 184.915434][ T7491] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x0 [ 184.923205][ T7491] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x0 [ 184.930915][ T7491] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x0 [ 184.938660][ T7491] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x0 [ 184.946317][ T7491] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x0 [ 184.954004][ T7491] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x0 [ 184.961887][ T7491] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x0 [ 184.969620][ T7491] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x0 [ 184.977309][ T7491] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x0 [ 184.985030][ T7491] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x0 [ 184.992697][ T7491] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x0 [ 185.000410][ T7491] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x0 [ 185.008156][ T7491] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x0 [ 185.015819][ T7491] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x0 [ 185.023512][ T7491] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x0 [ 185.031188][ T7491] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x0 [ 185.038891][ T7491] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x0 [ 185.046616][ T7491] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x0 [ 185.054331][ T7491] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x0 [ 185.062028][ T7491] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x0 [ 185.069750][ T7491] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x0 [ 185.077540][ T7491] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x0 [ 185.085362][ T7491] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x0 [ 185.089469][T10281] xt_hashlimit: max too large, truncated to 1048576 [ 185.093168][ T7491] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x0 [ 185.107509][ T7491] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x0 [ 185.122460][T10284] bridge0: entered allmulticast mode [ 185.125416][ T7491] hid-generic 0000:3000000:0000.005B: hidraw0: HID v0.00 Device [sy] on syz0 [ 185.139193][T10284] batadv5: left allmulticast mode [ 185.144340][T10284] batadv5: left promiscuous mode [ 185.149580][T10284] bridge0: port 1(batadv5) entered disabled state [ 185.499487][T10328] syz.2.2212 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 185.593866][T10336] xt_hashlimit: max too large, truncated to 1048576 [ 185.601511][ T10] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x4 [ 185.609277][ T10] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x2 [ 185.617030][ T10] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x0 [ 185.624728][ T10] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x0 [ 185.632510][ T10] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x0 [ 185.640238][ T10] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x0 [ 185.648061][ T10] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x0 [ 185.655899][ T10] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x0 [ 185.663649][ T10] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x0 [ 185.671493][ T10] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x0 [ 185.679301][ T10] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x0 [ 185.687105][ T10] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x0 [ 185.694824][ T10] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x0 [ 185.702550][ T10] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x0 [ 185.710259][ T10] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x0 [ 185.718096][ T10] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x0 [ 185.725934][ T10] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x0 [ 185.733665][ T10] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x0 [ 185.741521][ T10] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x0 [ 185.749236][ T10] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x0 [ 185.757020][ T10] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x0 [ 185.764719][ T10] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x0 [ 185.772479][ T10] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x0 [ 185.780223][ T10] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x0 [ 185.787939][ T10] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x0 [ 185.795704][ T10] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x0 [ 185.803454][ T10] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x0 [ 185.811207][ T10] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x0 [ 185.819052][ T10] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x0 [ 185.833669][ T10] hid-generic 0000:3000000:0000.005C: hidraw0: HID v0.00 Device [sy] on syz0 [ 185.845888][T10344] bridge0: entered allmulticast mode [ 186.008410][T10347] lo speed is unknown, defaulting to 1000 [ 186.899421][T10363] loop3: detected capacity change from 0 to 512 [ 187.017322][T10363] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 187.085986][T10363] ext4 filesystem being mounted at /381/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.414766][T10391] __nla_validate_parse: 11 callbacks suppressed [ 187.414787][T10391] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2230'. [ 187.470070][T10396] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2231'. [ 187.610924][T10402] xt_hashlimit: max too large, truncated to 1048576 [ 187.735244][T10404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2234'. [ 187.790954][T10411] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2237'. [ 187.824737][T10417] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2238'. [ 187.926038][T10425] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2242'. [ 188.003025][T10433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2246'. [ 188.135946][T10436] xt_hashlimit: max too large, truncated to 1048576 [ 188.213219][T10442] netlink: 'syz.5.2250': attribute type 1 has an invalid length. [ 188.222390][T10442] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2250'. [ 188.255579][T10454] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2253'. [ 188.265641][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 188.265655][ T29] audit: type=1400 audit(1752384247.537:4238): avc: denied { prog_run } for pid=10441 comm="syz.5.2250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 188.311267][T10461] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2257'. [ 188.632965][T10491] xt_hashlimit: max too large, truncated to 1048576 [ 188.645546][T10492] xt_hashlimit: max too large, truncated to 1048576 [ 188.654290][ T10] hid-generic 0000:3000000:0000.005D: unknown main item tag 0x4 [ 188.662133][ T10] hid-generic 0000:3000000:0000.005D: unknown main item tag 0x2 [ 188.669867][ T10] hid-generic 0000:3000000:0000.005D: unknown main item tag 0x0 [ 188.677596][ T10] hid-generic 0000:3000000:0000.005D: unknown main item tag 0x0 [ 188.685587][ T10] hid-generic 0000:3000000:0000.005D: unknown main item tag 0x0 [ 188.693330][ T10] hid-generic 0000:3000000:0000.005D: unknown main item tag 0x0 [ 188.701037][ T10] hid-generic 0000:3000000:0000.005D: unknown main item tag 0x0 [ 188.708778][ T10] hid-generic 0000:3000000:0000.005D: unknown main item tag 0x0 [ 188.716455][ T10] hid-generic 0000:3000000:0000.005D: unknown main item tag 0x0 [ 188.724158][ T10] hid-generic 0000:3000000:0000.005D: unknown main item tag 0x0 [ 188.731893][ T10] hid-generic 0000:3000000:0000.005D: unknown main item tag 0x0 [ 188.739758][ T10] hid-generic 0000:3000000:0000.005D: unknown main item tag 0x0 [ 188.747481][ T10] hid-generic 0000:3000000:0000.005D: unknown main item tag 0x0 [ 188.755163][ T10] hid-generic 0000:3000000:0000.005D: unknown main item tag 0x0 [ 188.762996][ T10] hid-generic 0000:3000000:0000.005D: unknown main item tag 0x0 [ 188.770703][ T10] hid-generic 0000:3000000:0000.005D: unknown main item tag 0x0 [ 188.778437][ T10] hid-generic 0000:3000000:0000.005D: unknown main item tag 0x0 [ 188.786136][ T10] hid-generic 0000:3000000:0000.005D: unknown main item tag 0x0 [ 188.793961][ T10] hid-generic 0000:3000000:0000.005D: unknown main item tag 0x0 [ 188.801784][ T10] hid-generic 0000:3000000:0000.005D: unknown main item tag 0x0 [ 188.809660][ T10] hid-generic 0000:3000000:0000.005D: unknown main item tag 0x0 [ 188.823068][ T10] hid-generic 0000:3000000:0000.005D: hidraw0: HID v0.00 Device [sy] on syz0 [ 188.978028][T10519] Cannot find add_set index 0 as target [ 189.003185][T10519] loop4: detected capacity change from 0 to 512 [ 189.013417][T10519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.029681][T10519] ext4 filesystem being mounted at /474/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.119397][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.175561][ T29] audit: type=1326 audit(1752384248.447:4239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10538 comm="syz.4.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f68736358e7 code=0x7ffc0000 [ 189.199097][ T29] audit: type=1326 audit(1752384248.447:4240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10538 comm="syz.4.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f68735dab19 code=0x7ffc0000 [ 189.222641][ T29] audit: type=1326 audit(1752384248.447:4241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10538 comm="syz.4.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f68736358e7 code=0x7ffc0000 [ 189.246262][ T29] audit: type=1326 audit(1752384248.447:4242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10538 comm="syz.4.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f68735dab19 code=0x7ffc0000 [ 189.269935][ T29] audit: type=1326 audit(1752384248.447:4243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10538 comm="syz.4.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687363e929 code=0x7ffc0000 [ 189.293524][ T29] audit: type=1326 audit(1752384248.447:4244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10538 comm="syz.4.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687363e929 code=0x7ffc0000 [ 189.326060][ T29] audit: type=1326 audit(1752384248.547:4245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10538 comm="syz.4.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f687363e929 code=0x7ffc0000 [ 189.349777][ T29] audit: type=1326 audit(1752384248.547:4246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10538 comm="syz.4.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687363e929 code=0x7ffc0000 [ 189.373295][ T29] audit: type=1326 audit(1752384248.547:4247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10538 comm="syz.4.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687363e929 code=0x7ffc0000 [ 189.665047][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 189.846489][T10590] bridge0: entered allmulticast mode [ 189.894809][T10594] netlink: 'syz.3.2299': attribute type 2 has an invalid length. [ 190.418674][T10630] netlink: 'syz.3.2313': attribute type 1 has an invalid length. [ 190.740534][T10658] lo speed is unknown, defaulting to 1000 [ 191.818164][T10685] netlink: 'syz.5.2334': attribute type 1 has an invalid length. [ 192.438596][T10744] __nla_validate_parse: 24 callbacks suppressed [ 192.438625][T10744] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2352'. [ 192.454123][T10744] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2352'. [ 192.463130][T10744] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2352'. [ 192.600680][T10748] lo speed is unknown, defaulting to 1000 [ 192.685325][T10744] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2352'. [ 192.800284][T10755] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2359'. [ 192.991160][T10760] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2361'. [ 193.218502][T10763] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2362'. [ 193.449246][T10776] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2366'. [ 193.550448][T10778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2365'. [ 194.043677][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 194.043692][ T29] audit: type=1326 audit(1752384253.317:4388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10789 comm="syz.4.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f68736358e7 code=0x7ffc0000 [ 194.093493][T10790] bridge0: entered allmulticast mode [ 194.161426][ T29] audit: type=1326 audit(1752384253.357:4389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10789 comm="syz.4.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f68735dab19 code=0x7ffc0000 [ 194.185155][ T29] audit: type=1326 audit(1752384253.357:4390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10789 comm="syz.4.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f68736358e7 code=0x7ffc0000 [ 194.208710][ T29] audit: type=1326 audit(1752384253.357:4391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10789 comm="syz.4.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f68735dab19 code=0x7ffc0000 [ 194.232414][ T29] audit: type=1326 audit(1752384253.357:4392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10789 comm="syz.4.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687363e929 code=0x7ffc0000 [ 194.245228][T10798] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2375'. [ 194.255942][ T29] audit: type=1326 audit(1752384253.367:4393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10789 comm="syz.4.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f687363e929 code=0x7ffc0000 [ 194.255981][ T29] audit: type=1326 audit(1752384253.367:4394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10789 comm="syz.4.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687363e929 code=0x7ffc0000 [ 194.312256][ T29] audit: type=1326 audit(1752384253.367:4395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10789 comm="syz.4.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f687363e929 code=0x7ffc0000 [ 194.335919][ T29] audit: type=1326 audit(1752384253.367:4396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10789 comm="syz.4.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687363e929 code=0x7ffc0000 [ 194.335947][ T29] audit: type=1326 audit(1752384253.367:4397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10789 comm="syz.4.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f687363e929 code=0x7ffc0000 [ 194.375670][T10802] netlink: 'syz.3.2377': attribute type 2 has an invalid length. [ 194.605327][T10818] loop0: detected capacity change from 0 to 512 [ 194.617602][T10818] EXT4-fs: Ignoring removed oldalloc option [ 194.625301][T10818] EXT4-fs: Ignoring removed orlov option [ 194.666914][T10836] netlink: 'syz.5.2391': attribute type 2 has an invalid length. [ 194.721083][T10818] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 194.883894][T10842] lo speed is unknown, defaulting to 1000 [ 194.956217][T10818] EXT4-fs (loop0): orphan cleanup on readonly fs [ 195.165243][T10818] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2384: bg 0: block 248: padding at end of block bitmap is not set [ 195.498154][T10818] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2384: Failed to acquire dquot type 1 [ 195.574840][T10818] EXT4-fs (loop0): 1 truncate cleaned up [ 195.664742][T10818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 195.805809][T10818] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.067947][T10867] netlink: 'syz.2.2403': attribute type 1 has an invalid length. [ 196.103694][ T7491] hid-generic 0000:3000000:0000.005E: unknown main item tag 0x4 [ 196.111571][ T7491] hid-generic 0000:3000000:0000.005E: unknown main item tag 0x2 [ 196.119358][ T7491] hid-generic 0000:3000000:0000.005E: unknown main item tag 0x0 [ 196.127814][ T7491] hid-generic 0000:3000000:0000.005E: unknown main item tag 0x0 [ 196.135511][ T7491] hid-generic 0000:3000000:0000.005E: unknown main item tag 0x0 [ 196.143333][ T7491] hid-generic 0000:3000000:0000.005E: unknown main item tag 0x0 [ 196.145390][T10876] xt_hashlimit: max too large, truncated to 1048576 [ 196.151067][ T7491] hid-generic 0000:3000000:0000.005E: unknown main item tag 0x0 [ 196.165357][ T7491] hid-generic 0000:3000000:0000.005E: unknown main item tag 0x0 [ 196.173158][ T7491] hid-generic 0000:3000000:0000.005E: unknown main item tag 0x0 [ 196.180927][ T7491] hid-generic 0000:3000000:0000.005E: unknown main item tag 0x0 [ 196.188732][ T7491] hid-generic 0000:3000000:0000.005E: unknown main item tag 0x0 [ 196.196430][ T7491] hid-generic 0000:3000000:0000.005E: unknown main item tag 0x0 [ 196.204206][ T7491] hid-generic 0000:3000000:0000.005E: unknown main item tag 0x0 [ 196.211978][ T7491] hid-generic 0000:3000000:0000.005E: unknown main item tag 0x0 [ 196.219679][ T7491] hid-generic 0000:3000000:0000.005E: unknown main item tag 0x0 [ 196.227411][ T7491] hid-generic 0000:3000000:0000.005E: unknown main item tag 0x0 [ 196.234991][T10884] Cannot find add_set index 0 as target [ 196.240728][ T7491] hid-generic 0000:3000000:0000.005E: unknown main item tag 0x0 [ 196.243762][T10884] loop2: detected capacity change from 0 to 512 [ 196.248411][ T7491] hid-generic 0000:3000000:0000.005E: unknown main item tag 0x0 [ 196.262428][ T7491] hid-generic 0000:3000000:0000.005E: unknown main item tag 0x0 [ 196.270156][ T7491] hid-generic 0000:3000000:0000.005E: unknown main item tag 0x0 [ 196.273279][T10884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.277880][ T7491] hid-generic 0000:3000000:0000.005E: unknown main item tag 0x0 [ 196.304080][T10884] ext4 filesystem being mounted at /500/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 196.408419][ T7491] hid-generic 0000:3000000:0000.005E: hidraw0: HID v0.00 Device [sy] on syz0 [ 196.431315][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.554931][T10899] loop0: detected capacity change from 0 to 512 [ 196.565645][T10899] EXT4-fs: Ignoring removed oldalloc option [ 196.573984][T10899] EXT4-fs: Ignoring removed orlov option [ 196.589188][T10899] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 196.618570][T10899] EXT4-fs (loop0): orphan cleanup on readonly fs [ 196.639947][T10910] xt_hashlimit: max too large, truncated to 1048576 [ 196.659484][T10899] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2416: bg 0: block 248: padding at end of block bitmap is not set [ 196.687091][T10914] bridge0: entered allmulticast mode [ 196.699463][T10899] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2416: Failed to acquire dquot type 1 [ 196.722608][T10899] EXT4-fs (loop0): 1 truncate cleaned up [ 196.745786][T10899] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 196.769039][T10899] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.072306][T10938] lo speed is unknown, defaulting to 1000 [ 197.376542][ T36] hid-generic 0000:3000000:0000.005F: unknown main item tag 0x4 [ 197.384357][ T36] hid-generic 0000:3000000:0000.005F: unknown main item tag 0x2 [ 197.405504][T10944] xt_hashlimit: max too large, truncated to 1048576 [ 197.552198][T10951] xt_hashlimit: max too large, truncated to 1048576 [ 197.561962][ T7491] hid-generic 0000:3000000:0000.0060: unknown main item tag 0x4 [ 197.569664][ T7491] hid-generic 0000:3000000:0000.0060: unknown main item tag 0x2 [ 197.577368][ T7491] hid-generic 0000:3000000:0000.0060: unknown main item tag 0x0 [ 197.585042][ T7491] hid-generic 0000:3000000:0000.0060: unknown main item tag 0x0 [ 197.592726][ T7491] hid-generic 0000:3000000:0000.0060: unknown main item tag 0x0 [ 197.600430][ T7491] hid-generic 0000:3000000:0000.0060: unknown main item tag 0x0 [ 197.608119][ T7491] hid-generic 0000:3000000:0000.0060: unknown main item tag 0x0 [ 197.615839][ T7491] hid-generic 0000:3000000:0000.0060: unknown main item tag 0x0 [ 197.623560][ T7491] hid-generic 0000:3000000:0000.0060: unknown main item tag 0x0 [ 197.631295][ T7491] hid-generic 0000:3000000:0000.0060: unknown main item tag 0x0 [ 197.639139][ T7491] hid-generic 0000:3000000:0000.0060: unknown main item tag 0x0 [ 197.646817][ T7491] hid-generic 0000:3000000:0000.0060: unknown main item tag 0x0 [ 197.654474][ T7491] hid-generic 0000:3000000:0000.0060: unknown main item tag 0x0 [ 197.662175][ T7491] hid-generic 0000:3000000:0000.0060: unknown main item tag 0x0 [ 197.669866][ T7491] hid-generic 0000:3000000:0000.0060: unknown main item tag 0x0 [ 197.677557][ T7491] hid-generic 0000:3000000:0000.0060: unknown main item tag 0x0 [ 197.685229][ T7491] hid-generic 0000:3000000:0000.0060: unknown main item tag 0x0 [ 197.692898][ T7491] hid-generic 0000:3000000:0000.0060: unknown main item tag 0x0 [ 197.700580][ T7491] hid-generic 0000:3000000:0000.0060: unknown main item tag 0x0 [ 197.708258][ T7491] hid-generic 0000:3000000:0000.0060: unknown main item tag 0x0 [ 197.715991][ T7491] hid-generic 0000:3000000:0000.0060: unknown main item tag 0x0 [ 197.773788][ T36] hid-generic 0000:3000000:0000.005F: unknown main item tag 0x0 [ 197.781519][ T36] hid-generic 0000:3000000:0000.005F: unknown main item tag 0x0 [ 197.789251][ T36] hid-generic 0000:3000000:0000.005F: unknown main item tag 0x0 [ 197.796963][ T36] hid-generic 0000:3000000:0000.005F: unknown main item tag 0x0 [ 197.804667][ T36] hid-generic 0000:3000000:0000.005F: unknown main item tag 0x0 [ 197.812403][ T36] hid-generic 0000:3000000:0000.005F: unknown main item tag 0x0 [ 197.820120][ T36] hid-generic 0000:3000000:0000.005F: unknown main item tag 0x0 [ 197.827811][ T36] hid-generic 0000:3000000:0000.005F: unknown main item tag 0x0 [ 197.835473][ T36] hid-generic 0000:3000000:0000.005F: unknown main item tag 0x0 [ 197.843185][ T36] hid-generic 0000:3000000:0000.005F: unknown main item tag 0x0 [ 197.850880][ T36] hid-generic 0000:3000000:0000.005F: unknown main item tag 0x0 [ 197.858659][ T36] hid-generic 0000:3000000:0000.005F: unknown main item tag 0x0 [ 197.866661][ T36] hid-generic 0000:3000000:0000.005F: unknown main item tag 0x0 [ 197.874628][ T36] hid-generic 0000:3000000:0000.005F: unknown main item tag 0x0 [ 197.928614][T10956] __nla_validate_parse: 18 callbacks suppressed [ 197.928639][T10956] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2435'. [ 197.954857][T10957] xt_hashlimit: max too large, truncated to 1048576 [ 197.988530][ T36] hid-generic 0000:3000000:0000.005F: hidraw0: HID v0.00 Device [sy] on syz0 [ 198.007035][ T7491] hid-generic 0000:3000000:0000.0060: hidraw0: HID v0.00 Device [sy] on syz0 [ 198.034762][T10962] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2437'. [ 198.130464][T10959] loop0: detected capacity change from 0 to 512 [ 198.144321][T10959] EXT4-fs: Ignoring removed oldalloc option [ 198.151696][T10959] EXT4-fs: Ignoring removed orlov option [ 198.184180][T10959] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 198.201344][T10968] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2438'. [ 198.220966][T10972] Cannot find add_set index 0 as target [ 198.231884][T10959] EXT4-fs (loop0): orphan cleanup on readonly fs [ 198.245976][T10972] loop5: detected capacity change from 0 to 512 [ 198.264924][T10959] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2436: bg 0: block 248: padding at end of block bitmap is not set [ 198.290872][T10972] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.310858][T10959] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2436: Failed to acquire dquot type 1 [ 198.326192][T10972] ext4 filesystem being mounted at /411/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.342453][T10959] EXT4-fs (loop0): 1 truncate cleaned up [ 198.462058][ T4360] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.478180][T10959] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 198.502214][T10959] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.573958][T10985] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2445'. [ 198.616151][T10993] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2447'. [ 198.644935][T10998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2450'. [ 198.698353][T11005] xt_hashlimit: max too large, truncated to 1048576 [ 198.707737][ T3371] hid-generic 0000:3000000:0000.0061: unknown main item tag 0x4 [ 198.715508][ T3371] hid-generic 0000:3000000:0000.0061: unknown main item tag 0x2 [ 198.723234][ T3371] hid-generic 0000:3000000:0000.0061: unknown main item tag 0x0 [ 198.730955][ T3371] hid-generic 0000:3000000:0000.0061: unknown main item tag 0x0 [ 198.738773][ T3371] hid-generic 0000:3000000:0000.0061: unknown main item tag 0x0 [ 198.746646][ T3371] hid-generic 0000:3000000:0000.0061: unknown main item tag 0x0 [ 198.754374][ T3371] hid-generic 0000:3000000:0000.0061: unknown main item tag 0x0 [ 198.762251][ T3371] hid-generic 0000:3000000:0000.0061: unknown main item tag 0x0 [ 198.769961][ T3371] hid-generic 0000:3000000:0000.0061: unknown main item tag 0x0 [ 198.777713][ T3371] hid-generic 0000:3000000:0000.0061: unknown main item tag 0x0 [ 198.785393][ T3371] hid-generic 0000:3000000:0000.0061: unknown main item tag 0x0 [ 198.793150][ T3371] hid-generic 0000:3000000:0000.0061: unknown main item tag 0x0 [ 198.801244][ T3371] hid-generic 0000:3000000:0000.0061: unknown main item tag 0x0 [ 198.809089][ T3371] hid-generic 0000:3000000:0000.0061: unknown main item tag 0x0 [ 198.816973][ T3371] hid-generic 0000:3000000:0000.0061: unknown main item tag 0x0 [ 198.824677][ T3371] hid-generic 0000:3000000:0000.0061: unknown main item tag 0x0 [ 198.832439][ T3371] hid-generic 0000:3000000:0000.0061: unknown main item tag 0x0 [ 198.840240][ T3371] hid-generic 0000:3000000:0000.0061: unknown main item tag 0x0 [ 198.848149][ T3371] hid-generic 0000:3000000:0000.0061: unknown main item tag 0x0 [ 198.855832][ T3371] hid-generic 0000:3000000:0000.0061: unknown main item tag 0x0 [ 198.863559][ T3371] hid-generic 0000:3000000:0000.0061: unknown main item tag 0x0 [ 198.877030][ T3371] hid-generic 0000:3000000:0000.0061: hidraw0: HID v0.00 Device [sy] on syz0 [ 198.942268][T11017] xt_hashlimit: max too large, truncated to 1048576 [ 199.031036][T11019] loop0: detected capacity change from 0 to 512 [ 199.038599][T11019] EXT4-fs: Ignoring removed oldalloc option [ 199.044615][T11019] EXT4-fs: Ignoring removed orlov option [ 199.052252][T11032] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2462'. [ 199.062168][T11019] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 199.072183][T11028] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2460'. [ 199.082477][T11019] EXT4-fs (loop0): orphan cleanup on readonly fs [ 199.089492][T11019] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2458: bg 0: block 248: padding at end of block bitmap is not set [ 199.104222][T11019] __quota_error: 87 callbacks suppressed [ 199.104237][T11019] Quota error (device loop0): write_blk: dquota write failed [ 199.117433][T11019] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 199.127487][T11019] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2458: Failed to acquire dquot type 1 [ 199.139536][T11019] EXT4-fs (loop0): 1 truncate cleaned up [ 199.146024][T11019] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 199.159111][T11019] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.296265][T11046] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2466'. [ 199.326515][T11047] xt_hashlimit: max too large, truncated to 1048576 [ 199.337731][ T7491] hid-generic 0000:3000000:0000.0062: unknown main item tag 0x4 [ 199.345442][ T7491] hid-generic 0000:3000000:0000.0062: unknown main item tag 0x2 [ 199.353181][ T7491] hid-generic 0000:3000000:0000.0062: unknown main item tag 0x0 [ 199.360868][ T7491] hid-generic 0000:3000000:0000.0062: unknown main item tag 0x0 [ 199.368542][ T7491] hid-generic 0000:3000000:0000.0062: unknown main item tag 0x0 [ 199.376208][ T7491] hid-generic 0000:3000000:0000.0062: unknown main item tag 0x0 [ 199.383978][ T7491] hid-generic 0000:3000000:0000.0062: unknown main item tag 0x0 [ 199.391657][ T7491] hid-generic 0000:3000000:0000.0062: unknown main item tag 0x0 [ 199.399331][ T7491] hid-generic 0000:3000000:0000.0062: unknown main item tag 0x0 [ 199.407145][ T7491] hid-generic 0000:3000000:0000.0062: unknown main item tag 0x0 [ 199.414862][ T7491] hid-generic 0000:3000000:0000.0062: unknown main item tag 0x0 [ 199.422569][ T7491] hid-generic 0000:3000000:0000.0062: unknown main item tag 0x0 [ 199.430290][ T7491] hid-generic 0000:3000000:0000.0062: unknown main item tag 0x0 [ 199.438169][ T7491] hid-generic 0000:3000000:0000.0062: unknown main item tag 0x0 [ 199.445861][ T7491] hid-generic 0000:3000000:0000.0062: unknown main item tag 0x0 [ 199.453547][ T7491] hid-generic 0000:3000000:0000.0062: unknown main item tag 0x0 [ 199.461299][ T7491] hid-generic 0000:3000000:0000.0062: unknown main item tag 0x0 [ 199.468993][ T7491] hid-generic 0000:3000000:0000.0062: unknown main item tag 0x0 [ 199.476732][ T7491] hid-generic 0000:3000000:0000.0062: unknown main item tag 0x0 [ 199.484430][ T7491] hid-generic 0000:3000000:0000.0062: unknown main item tag 0x0 [ 199.492201][ T7491] hid-generic 0000:3000000:0000.0062: unknown main item tag 0x0 [ 199.502887][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2463'. [ 199.712999][ T29] audit: type=1400 audit(1752384258.987:4479): avc: denied { create } for pid=11061 comm="syz.0.2473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 199.733302][ T29] audit: type=1400 audit(1752384258.987:4480): avc: denied { read append } for pid=11061 comm="syz.0.2473" name="usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 199.757362][ T29] audit: type=1400 audit(1752384258.987:4481): avc: denied { open } for pid=11061 comm="syz.0.2473" path="/dev/usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 199.783030][ T7491] hid-generic 0000:3000000:0000.0062: hidraw0: HID v0.00 Device [sy] on syz0 [ 199.905797][ T29] audit: type=1400 audit(1752384259.057:4482): avc: denied { write } for pid=11061 comm="syz.0.2473" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 200.026179][T11077] Cannot find add_set index 0 as target [ 200.038297][T11077] loop5: detected capacity change from 0 to 512 [ 200.145142][T11077] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.164114][T11077] ext4 filesystem being mounted at /419/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 200.373453][ T4360] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.439081][T11092] bridge0: entered allmulticast mode [ 200.732153][T11116] Cannot find add_set index 0 as target [ 200.740842][T11116] loop0: detected capacity change from 0 to 512 [ 200.855041][T11116] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.949617][T11116] ext4 filesystem being mounted at /545/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 201.153365][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.379922][ T29] audit: type=1400 audit(1752384260.647:4483): avc: denied { execmod } for pid=11159 comm="syz.2.2506" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=27319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 201.406307][ T29] audit: type=1400 audit(1752384260.647:4484): avc: denied { execute } for pid=11159 comm="syz.2.2506" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=27319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 201.574294][ T29] audit: type=1400 audit(1752384260.847:4485): avc: denied { prog_run } for pid=11169 comm="syz.5.2512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 201.839546][T11186] loop3: detected capacity change from 0 to 512 [ 201.856401][T11186] EXT4-fs: Ignoring removed oldalloc option [ 201.864546][T11186] EXT4-fs: Ignoring removed orlov option [ 201.879458][T11186] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 201.900850][T11186] EXT4-fs (loop3): orphan cleanup on readonly fs [ 201.912950][T11186] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2521: bg 0: block 248: padding at end of block bitmap is not set [ 201.932540][T11186] Quota error (device loop3): write_blk: dquota write failed [ 201.941041][T11186] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2521: Failed to acquire dquot type 1 [ 201.970393][T11186] EXT4-fs (loop3): 1 truncate cleaned up [ 202.044136][T11199] xt_hashlimit: max too large, truncated to 1048576 [ 202.064351][T11171] netlink: 'syz.5.2512': attribute type 1 has an invalid length. [ 202.315124][T11186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 202.330650][T11186] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.732798][T11240] loop4: detected capacity change from 0 to 512 [ 202.741856][T11240] EXT4-fs: Ignoring removed oldalloc option [ 202.755439][T11240] EXT4-fs: Ignoring removed orlov option [ 202.763282][T11240] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 202.775545][T11247] xt_hashlimit: max too large, truncated to 1048576 [ 202.790917][T11240] EXT4-fs (loop4): orphan cleanup on readonly fs [ 202.813232][T11240] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2537: bg 0: block 248: padding at end of block bitmap is not set [ 202.837920][T11240] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2537: Failed to acquire dquot type 1 [ 202.875258][T11240] EXT4-fs (loop4): 1 truncate cleaned up [ 202.902091][T11240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 202.933730][T11240] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.994021][T11254] __nla_validate_parse: 11 callbacks suppressed [ 202.994043][T11254] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2541'. [ 203.014470][T11256] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2542'. [ 203.283507][T11270] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2548'. [ 203.367740][T11271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2547'. [ 203.710442][T11277] xt_hashlimit: max too large, truncated to 1048576 [ 203.724662][T11274] loop3: detected capacity change from 0 to 512 [ 203.731408][T11274] EXT4-fs: Ignoring removed oldalloc option [ 203.743405][T11274] EXT4-fs: Ignoring removed orlov option [ 203.761673][T11274] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 203.824997][T11274] EXT4-fs (loop3): orphan cleanup on readonly fs [ 203.832401][T11274] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2550: bg 0: block 248: padding at end of block bitmap is not set [ 203.910043][T11274] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2550: Failed to acquire dquot type 1 [ 203.922425][T11274] EXT4-fs (loop3): 1 truncate cleaned up [ 203.930742][T11274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 203.962666][T11274] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.054898][T11301] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2559'. [ 204.069256][T11298] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2558'. [ 204.165821][T11295] loop2: detected capacity change from 0 to 512 [ 204.183190][T11295] EXT4-fs: Ignoring removed oldalloc option [ 204.197321][T11295] EXT4-fs: Ignoring removed orlov option [ 204.212665][T11295] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 204.264346][T11295] EXT4-fs (loop2): orphan cleanup on readonly fs [ 204.286723][T11295] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2557: bg 0: block 248: padding at end of block bitmap is not set [ 204.318225][T11295] __quota_error: 12 callbacks suppressed [ 204.318268][T11295] Quota error (device loop2): write_blk: dquota write failed [ 204.332858][T11295] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 204.343588][T11295] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2557: Failed to acquire dquot type 1 [ 204.365606][T11313] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2562'. [ 204.390892][T11295] EXT4-fs (loop2): 1 truncate cleaned up [ 204.681003][T11295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 204.719982][T11295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.917907][T11326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2566'. [ 205.119842][T11330] loop2: detected capacity change from 0 to 512 [ 205.142303][T11330] EXT4-fs: Ignoring removed oldalloc option [ 205.145912][T11338] xt_hashlimit: max too large, truncated to 1048576 [ 205.163721][T11330] EXT4-fs: Ignoring removed orlov option [ 205.176705][T11337] netlink: 'syz.0.2570': attribute type 1 has an invalid length. [ 205.186459][T11337] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2570'. [ 205.224539][T11330] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 205.238811][T11330] EXT4-fs (loop2): orphan cleanup on readonly fs [ 205.244151][T11340] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2571'. [ 205.275843][T11330] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2568: bg 0: block 248: padding at end of block bitmap is not set [ 205.354607][T11330] Quota error (device loop2): write_blk: dquota write failed [ 205.363828][T11330] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 205.376126][T11330] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2568: Failed to acquire dquot type 1 [ 205.401234][ T29] audit: type=1326 audit(1752384264.677:4493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.4.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f68736358e7 code=0x7ffc0000 [ 205.479312][T11330] EXT4-fs (loop2): 1 truncate cleaned up [ 205.497248][ T29] audit: type=1326 audit(1752384264.697:4494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.4.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f68735dab19 code=0x7ffc0000 [ 205.497287][ T29] audit: type=1326 audit(1752384264.697:4495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.4.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f68736358e7 code=0x7ffc0000 [ 205.497356][ T29] audit: type=1326 audit(1752384264.697:4496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.4.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f68735dab19 code=0x7ffc0000 [ 205.497440][ T29] audit: type=1326 audit(1752384264.697:4497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.4.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687363e929 code=0x7ffc0000 [ 205.497465][ T29] audit: type=1326 audit(1752384264.697:4498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.4.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f687363e929 code=0x7ffc0000 [ 205.545902][T11330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 205.662351][T11330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.872745][T11379] netlink: 'syz.2.2589': attribute type 1 has an invalid length. [ 206.073527][ T3393] hid-generic 0000:3000000:0000.0063: unknown main item tag 0x4 [ 206.081388][ T3393] hid-generic 0000:3000000:0000.0063: unknown main item tag 0x2 [ 206.093105][ T3393] hid-generic 0000:3000000:0000.0063: unknown main item tag 0x0 [ 206.101066][ T3393] hid-generic 0000:3000000:0000.0063: unknown main item tag 0x0 [ 206.108887][ T3393] hid-generic 0000:3000000:0000.0063: unknown main item tag 0x0 [ 206.116572][ T3393] hid-generic 0000:3000000:0000.0063: unknown main item tag 0x0 [ 206.124290][ T3393] hid-generic 0000:3000000:0000.0063: unknown main item tag 0x0 [ 206.132140][ T3393] hid-generic 0000:3000000:0000.0063: unknown main item tag 0x0 [ 206.139873][ T3393] hid-generic 0000:3000000:0000.0063: unknown main item tag 0x0 [ 206.147659][ T3393] hid-generic 0000:3000000:0000.0063: unknown main item tag 0x0 [ 206.155411][ T3393] hid-generic 0000:3000000:0000.0063: unknown main item tag 0x0 [ 206.163137][ T3393] hid-generic 0000:3000000:0000.0063: unknown main item tag 0x0 [ 206.171043][ T3393] hid-generic 0000:3000000:0000.0063: unknown main item tag 0x0 [ 206.178835][ T3393] hid-generic 0000:3000000:0000.0063: unknown main item tag 0x0 [ 206.186746][ T3393] hid-generic 0000:3000000:0000.0063: unknown main item tag 0x0 [ 206.194595][ T3393] hid-generic 0000:3000000:0000.0063: unknown main item tag 0x0 [ 206.381108][ T3393] hid-generic 0000:3000000:0000.0063: hidraw0: HID v0.00 Device [sy] on syz0 [ 206.592777][ T7491] hid-generic 0000:3000000:0000.0064: unknown main item tag 0x0 [ 206.600642][ T7491] hid-generic 0000:3000000:0000.0064: unknown main item tag 0x0 [ 206.608400][ T7491] hid-generic 0000:3000000:0000.0064: unknown main item tag 0x0 [ 206.616115][ T7491] hid-generic 0000:3000000:0000.0064: unknown main item tag 0x0 [ 206.623910][ T7491] hid-generic 0000:3000000:0000.0064: unknown main item tag 0x0 [ 206.631677][ T7491] hid-generic 0000:3000000:0000.0064: unknown main item tag 0x0 [ 206.639375][ T7491] hid-generic 0000:3000000:0000.0064: unknown main item tag 0x0 [ 206.647057][ T7491] hid-generic 0000:3000000:0000.0064: unknown main item tag 0x0 [ 206.654717][ T7491] hid-generic 0000:3000000:0000.0064: unknown main item tag 0x0 [ 206.662492][ T7491] hid-generic 0000:3000000:0000.0064: unknown main item tag 0x0 [ 206.670192][ T7491] hid-generic 0000:3000000:0000.0064: unknown main item tag 0x0 [ 206.677949][ T7491] hid-generic 0000:3000000:0000.0064: unknown main item tag 0x0 [ 206.685641][ T7491] hid-generic 0000:3000000:0000.0064: unknown main item tag 0x0 [ 206.693454][ T7491] hid-generic 0000:3000000:0000.0064: unknown main item tag 0x0 [ 206.701151][ T7491] hid-generic 0000:3000000:0000.0064: unknown main item tag 0x0 [ 206.708954][ T7491] hid-generic 0000:3000000:0000.0064: unknown main item tag 0x0 [ 206.716604][ T7491] hid-generic 0000:3000000:0000.0064: unknown main item tag 0x0 [ 206.724305][ T7491] hid-generic 0000:3000000:0000.0064: unknown main item tag 0x0 [ 206.731980][ T7491] hid-generic 0000:3000000:0000.0064: unknown main item tag 0x0 [ 206.739672][ T7491] hid-generic 0000:3000000:0000.0064: unknown main item tag 0x0 [ 206.747365][ T7491] hid-generic 0000:3000000:0000.0064: unknown main item tag 0x0 [ 206.755141][ T7491] hid-generic 0000:3000000:0000.0064: unknown main item tag 0x0 [ 206.760270][T11409] xt_hashlimit: max too large, truncated to 1048576 [ 206.762898][ T7491] hid-generic 0000:3000000:0000.0064: unknown main item tag 0x0 [ 206.777178][ T7491] hid-generic 0000:3000000:0000.0064: unknown main item tag 0x0 [ 206.784855][ T7491] hid-generic 0000:3000000:0000.0064: unknown main item tag 0x0 [ 206.792632][ T7491] hid-generic 0000:3000000:0000.0064: unknown main item tag 0x0 [ 206.800443][ T7491] hid-generic 0000:3000000:0000.0064: unknown main item tag 0x0 [ 206.808226][ T7491] hid-generic 0000:3000000:0000.0064: unknown main item tag 0x0 [ 206.815979][ T7491] hid-generic 0000:3000000:0000.0064: unknown main item tag 0x0 [ 206.823829][ T7491] hid-generic 0000:3000000:0000.0064: unknown main item tag 0x0 [ 206.831626][ T7491] hid-generic 0000:3000000:0000.0064: unknown main item tag 0x0 [ 206.839420][ T7491] hid-generic 0000:3000000:0000.0064: unknown main item tag 0x0 [ 206.912255][ T7491] hid-generic 0000:3000000:0000.0064: hidraw0: HID v0.00 Device [sy] on syz0 [ 206.990325][T11413] loop4: detected capacity change from 0 to 512 [ 206.998853][T11413] EXT4-fs: Ignoring removed oldalloc option [ 207.020661][T11413] EXT4-fs: Ignoring removed orlov option [ 207.032487][T11413] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 207.083624][T11413] EXT4-fs (loop4): orphan cleanup on readonly fs [ 207.112430][T11413] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2602: bg 0: block 248: padding at end of block bitmap is not set [ 207.135420][T11413] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2602: Failed to acquire dquot type 1 [ 207.166616][T11413] EXT4-fs (loop4): 1 truncate cleaned up [ 207.199557][T11413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 207.234435][T11413] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.022836][T11493] __nla_validate_parse: 15 callbacks suppressed [ 208.022858][T11493] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2630'. [ 208.125346][T11498] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2631'. [ 208.463986][ T3371] hid-generic 0000:3000000:0000.0065: unknown main item tag 0x4 [ 208.471858][ T3371] hid-generic 0000:3000000:0000.0065: unknown main item tag 0x2 [ 208.481934][ T3371] hid-generic 0000:3000000:0000.0065: unknown main item tag 0x0 [ 208.489735][ T3371] hid-generic 0000:3000000:0000.0065: unknown main item tag 0x0 [ 208.497545][ T3371] hid-generic 0000:3000000:0000.0065: unknown main item tag 0x0 [ 208.505231][ T3371] hid-generic 0000:3000000:0000.0065: unknown main item tag 0x0 [ 208.513012][ T3371] hid-generic 0000:3000000:0000.0065: unknown main item tag 0x0 [ 208.520741][ T3371] hid-generic 0000:3000000:0000.0065: unknown main item tag 0x0 [ 208.528446][ T3371] hid-generic 0000:3000000:0000.0065: unknown main item tag 0x0 [ 208.536131][ T3371] hid-generic 0000:3000000:0000.0065: unknown main item tag 0x0 [ 208.543862][ T3371] hid-generic 0000:3000000:0000.0065: unknown main item tag 0x0 [ 208.551601][ T3371] hid-generic 0000:3000000:0000.0065: unknown main item tag 0x0 [ 208.559461][ T3371] hid-generic 0000:3000000:0000.0065: unknown main item tag 0x0 [ 208.567189][ T3371] hid-generic 0000:3000000:0000.0065: unknown main item tag 0x0 [ 208.574882][ T3371] hid-generic 0000:3000000:0000.0065: unknown main item tag 0x0 [ 208.582613][ T3371] hid-generic 0000:3000000:0000.0065: unknown main item tag 0x0 [ 208.595787][ T3371] hid-generic 0000:3000000:0000.0065: hidraw0: HID v0.00 Device [sy] on syz0 [ 208.626001][T11539] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2646'. [ 209.159880][T11556] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2653'. [ 209.276487][T11572] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2658'. [ 209.277116][ T3371] hid-generic 0000:3000000:0000.0066: unknown main item tag 0x4 [ 209.293435][ T3371] hid-generic 0000:3000000:0000.0066: unknown main item tag 0x2 [ 209.302206][ T3371] hid-generic 0000:3000000:0000.0066: unknown main item tag 0x0 [ 209.310090][ T3371] hid-generic 0000:3000000:0000.0066: unknown main item tag 0x0 [ 209.317874][ T3371] hid-generic 0000:3000000:0000.0066: unknown main item tag 0x0 [ 209.325564][ T3371] hid-generic 0000:3000000:0000.0066: unknown main item tag 0x0 [ 209.333360][ T3371] hid-generic 0000:3000000:0000.0066: unknown main item tag 0x0 [ 209.341307][ T3371] hid-generic 0000:3000000:0000.0066: unknown main item tag 0x0 [ 209.349208][ T3371] hid-generic 0000:3000000:0000.0066: unknown main item tag 0x0 [ 209.357047][ T3371] hid-generic 0000:3000000:0000.0066: unknown main item tag 0x0 [ 209.364744][ T3371] hid-generic 0000:3000000:0000.0066: unknown main item tag 0x0 [ 209.372494][ T3371] hid-generic 0000:3000000:0000.0066: unknown main item tag 0x0 [ 209.380221][ T3371] hid-generic 0000:3000000:0000.0066: unknown main item tag 0x0 [ 209.387981][ T3371] hid-generic 0000:3000000:0000.0066: unknown main item tag 0x0 [ 209.395821][ T3371] hid-generic 0000:3000000:0000.0066: unknown main item tag 0x0 [ 209.403640][ T3371] hid-generic 0000:3000000:0000.0066: unknown main item tag 0x0 [ 209.422120][ T3371] hid-generic 0000:3000000:0000.0066: hidraw0: HID v0.00 Device [sy] on syz0 [ 209.457938][T11579] bridge0: entered allmulticast mode [ 209.467031][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 209.467052][ T29] audit: type=1326 audit(1752384268.727:4525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11578 comm="syz.2.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc0402558e7 code=0x7ffc0000 [ 209.496703][ T29] audit: type=1326 audit(1752384268.727:4526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11578 comm="syz.2.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc0401fab19 code=0x7ffc0000 [ 209.520323][ T29] audit: type=1326 audit(1752384268.727:4527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11578 comm="syz.2.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc0402558e7 code=0x7ffc0000 [ 209.543836][ T29] audit: type=1326 audit(1752384268.727:4528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11578 comm="syz.2.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc0401fab19 code=0x7ffc0000 [ 209.543870][ T29] audit: type=1326 audit(1752384268.727:4529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11578 comm="syz.2.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04025e929 code=0x7ffc0000 [ 209.543901][ T29] audit: type=1326 audit(1752384268.727:4530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11578 comm="syz.2.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fc04025e929 code=0x7ffc0000 [ 209.543977][ T29] audit: type=1326 audit(1752384268.727:4531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11578 comm="syz.2.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04025e929 code=0x7ffc0000 [ 209.544008][ T29] audit: type=1326 audit(1752384268.727:4532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11578 comm="syz.2.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc04025e929 code=0x7ffc0000 [ 209.544037][ T29] audit: type=1326 audit(1752384268.727:4533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11578 comm="syz.2.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04025e929 code=0x7ffc0000 [ 209.544150][ T29] audit: type=1326 audit(1752384268.727:4534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11578 comm="syz.2.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc04025e929 code=0x7ffc0000 [ 209.554536][T11568] loop3: detected capacity change from 0 to 512 [ 209.756232][T11568] EXT4-fs: Ignoring removed oldalloc option [ 209.764382][T11568] EXT4-fs: Ignoring removed orlov option [ 209.774690][T11568] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 209.786284][T11592] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2666'. [ 209.804584][T11568] EXT4-fs (loop3): orphan cleanup on readonly fs [ 209.818429][T11568] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2657: bg 0: block 248: padding at end of block bitmap is not set [ 209.839236][T11568] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2657: Failed to acquire dquot type 1 [ 209.866206][T11568] EXT4-fs (loop3): 1 truncate cleaned up [ 209.901591][T11568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 209.942805][T11568] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.063183][ T3371] hid-generic 0000:3000000:0000.0067: unknown main item tag 0x4 [ 210.070986][ T3371] hid-generic 0000:3000000:0000.0067: unknown main item tag 0x2 [ 210.079196][ T3371] hid-generic 0000:3000000:0000.0067: unknown main item tag 0x0 [ 210.086940][ T3371] hid-generic 0000:3000000:0000.0067: unknown main item tag 0x0 [ 210.094824][ T3371] hid-generic 0000:3000000:0000.0067: unknown main item tag 0x0 [ 210.102684][ T3371] hid-generic 0000:3000000:0000.0067: unknown main item tag 0x0 [ 210.110596][ T3371] hid-generic 0000:3000000:0000.0067: unknown main item tag 0x0 [ 210.118362][ T3371] hid-generic 0000:3000000:0000.0067: unknown main item tag 0x0 [ 210.126038][ T3371] hid-generic 0000:3000000:0000.0067: unknown main item tag 0x0 [ 210.133746][ T3371] hid-generic 0000:3000000:0000.0067: unknown main item tag 0x0 [ 210.141453][ T3371] hid-generic 0000:3000000:0000.0067: unknown main item tag 0x0 [ 210.149211][ T3371] hid-generic 0000:3000000:0000.0067: unknown main item tag 0x0 [ 210.156991][ T3371] hid-generic 0000:3000000:0000.0067: unknown main item tag 0x0 [ 210.164659][ T3371] hid-generic 0000:3000000:0000.0067: unknown main item tag 0x0 [ 210.172371][ T3371] hid-generic 0000:3000000:0000.0067: unknown main item tag 0x0 [ 210.180094][ T3371] hid-generic 0000:3000000:0000.0067: unknown main item tag 0x0 [ 210.241906][T11617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2670'. [ 210.582996][ T3371] hid-generic 0000:3000000:0000.0067: hidraw0: HID v0.00 Device [sy] on syz0 [ 210.661254][T11631] netlink: 'syz.2.2677': attribute type 1 has an invalid length. [ 210.669993][T11631] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2677'. [ 210.680966][T11633] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2678'. [ 210.812728][T11648] 9pnet_fd: Insufficient options for proto=fd [ 210.919233][ T7491] hid-generic 0000:3000000:0000.0068: unknown main item tag 0x4 [ 210.927074][ T7491] hid-generic 0000:3000000:0000.0068: unknown main item tag 0x2 [ 210.934825][ T7491] hid-generic 0000:3000000:0000.0068: unknown main item tag 0x0 [ 210.942553][ T7491] hid-generic 0000:3000000:0000.0068: unknown main item tag 0x0 [ 210.950419][ T7491] hid-generic 0000:3000000:0000.0068: unknown main item tag 0x0 [ 210.958127][ T7491] hid-generic 0000:3000000:0000.0068: unknown main item tag 0x0 [ 210.965871][ T7491] hid-generic 0000:3000000:0000.0068: unknown main item tag 0x0 [ 210.973604][ T7491] hid-generic 0000:3000000:0000.0068: unknown main item tag 0x0 [ 210.981300][ T7491] hid-generic 0000:3000000:0000.0068: unknown main item tag 0x0 [ 210.989086][ T7491] hid-generic 0000:3000000:0000.0068: unknown main item tag 0x0 [ 210.996760][ T7491] hid-generic 0000:3000000:0000.0068: unknown main item tag 0x0 [ 211.004473][ T7491] hid-generic 0000:3000000:0000.0068: unknown main item tag 0x0 [ 211.012250][ T7491] hid-generic 0000:3000000:0000.0068: unknown main item tag 0x0 [ 211.020024][ T7491] hid-generic 0000:3000000:0000.0068: unknown main item tag 0x0 [ 211.027855][ T7491] hid-generic 0000:3000000:0000.0068: unknown main item tag 0x0 [ 211.035531][ T7491] hid-generic 0000:3000000:0000.0068: unknown main item tag 0x0 [ 211.044004][ T7491] hid-generic 0000:3000000:0000.0068: hidraw0: HID v0.00 Device [sy] on syz0 [ 211.110249][T11665] netlink: 'syz.2.2689': attribute type 1 has an invalid length. [ 211.122259][T11665] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2689'. [ 211.230313][T11667] loop2: detected capacity change from 0 to 512 [ 211.251771][T11667] EXT4-fs: Ignoring removed oldalloc option [ 211.259561][T11667] EXT4-fs: Ignoring removed orlov option [ 211.275216][T11667] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 211.305939][T11672] bridge0: entered allmulticast mode [ 211.337284][T11667] EXT4-fs (loop2): orphan cleanup on readonly fs [ 211.355350][T11667] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2690: bg 0: block 248: padding at end of block bitmap is not set [ 211.378642][T11667] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2690: Failed to acquire dquot type 1 [ 211.414293][T11681] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 211.416583][T11667] EXT4-fs (loop2): 1 truncate cleaned up [ 211.428745][T11681] loop3: detected capacity change from 0 to 512 [ 211.444500][T11667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 211.463753][T11681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.484312][T11681] ext4 filesystem being mounted at /480/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 211.511809][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.512189][T11688] 9pnet_fd: Insufficient options for proto=fd [ 211.529217][T11667] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.647463][T11704] xt_hashlimit: max too large, truncated to 1048576 [ 211.655481][ T3371] hid-generic 0000:3000000:0000.0069: unknown main item tag 0x4 [ 211.663386][ T3371] hid-generic 0000:3000000:0000.0069: unknown main item tag 0x2 [ 211.671202][ T3371] hid-generic 0000:3000000:0000.0069: unknown main item tag 0x0 [ 211.678945][ T3371] hid-generic 0000:3000000:0000.0069: unknown main item tag 0x0 [ 211.686717][ T3371] hid-generic 0000:3000000:0000.0069: unknown main item tag 0x0 [ 211.694485][ T3371] hid-generic 0000:3000000:0000.0069: unknown main item tag 0x0 [ 211.702199][ T3371] hid-generic 0000:3000000:0000.0069: unknown main item tag 0x0 [ 211.709978][ T3371] hid-generic 0000:3000000:0000.0069: unknown main item tag 0x0 [ 211.717696][ T3371] hid-generic 0000:3000000:0000.0069: unknown main item tag 0x0 [ 211.725384][ T3371] hid-generic 0000:3000000:0000.0069: unknown main item tag 0x0 [ 211.733344][ T3371] hid-generic 0000:3000000:0000.0069: unknown main item tag 0x0 [ 211.740509][ T7490] hid-generic 0000:3000000:0000.006A: unknown main item tag 0x4 [ 211.741055][ T3371] hid-generic 0000:3000000:0000.0069: unknown main item tag 0x0 [ 211.748786][ T7490] hid-generic 0000:3000000:0000.006A: unknown main item tag 0x2 [ 211.756388][ T3371] hid-generic 0000:3000000:0000.0069: unknown main item tag 0x0 [ 211.771773][ T3371] hid-generic 0000:3000000:0000.0069: unknown main item tag 0x0 [ 211.779536][ T3371] hid-generic 0000:3000000:0000.0069: unknown main item tag 0x0 [ 211.787278][ T3371] hid-generic 0000:3000000:0000.0069: unknown main item tag 0x0 [ 211.791181][ T7490] hid-generic 0000:3000000:0000.006A: unknown main item tag 0x0 [ 211.794942][ T3371] hid-generic 0000:3000000:0000.0069: unknown main item tag 0x0 [ 211.802675][ T7490] hid-generic 0000:3000000:0000.006A: unknown main item tag 0x0 [ 211.810282][ T3371] hid-generic 0000:3000000:0000.0069: unknown main item tag 0x0 [ 211.817998][ T7490] hid-generic 0000:3000000:0000.006A: unknown main item tag 0x0 [ 211.825626][ T3371] hid-generic 0000:3000000:0000.0069: unknown main item tag 0x0 [ 211.833276][ T7490] hid-generic 0000:3000000:0000.006A: unknown main item tag 0x0 [ 211.840940][ T3371] hid-generic 0000:3000000:0000.0069: unknown main item tag 0x0 [ 211.848586][ T7490] hid-generic 0000:3000000:0000.006A: unknown main item tag 0x0 [ 211.856218][ T3371] hid-generic 0000:3000000:0000.0069: unknown main item tag 0x0 [ 211.863854][ T7490] hid-generic 0000:3000000:0000.006A: unknown main item tag 0x0 [ 211.871582][ T3371] hid-generic 0000:3000000:0000.0069: unknown main item tag 0x0 [ 211.879139][ T7490] hid-generic 0000:3000000:0000.006A: unknown main item tag 0x0 [ 211.879168][ T7490] hid-generic 0000:3000000:0000.006A: unknown main item tag 0x0 [ 211.886825][ T3371] hid-generic 0000:3000000:0000.0069: unknown main item tag 0x0 [ 211.894451][ T7490] hid-generic 0000:3000000:0000.006A: unknown main item tag 0x0 [ 211.902101][ T3371] hid-generic 0000:3000000:0000.0069: unknown main item tag 0x0 [ 211.909776][ T7490] hid-generic 0000:3000000:0000.006A: unknown main item tag 0x0 [ 211.917423][ T3371] hid-generic 0000:3000000:0000.0069: unknown main item tag 0x0 [ 211.925039][ T7490] hid-generic 0000:3000000:0000.006A: unknown main item tag 0x0 [ 211.932691][ T3371] hid-generic 0000:3000000:0000.0069: unknown main item tag 0x0 [ 211.940385][ T7490] hid-generic 0000:3000000:0000.006A: unknown main item tag 0x0 [ 211.948043][ T3371] hid-generic 0000:3000000:0000.0069: unknown main item tag 0x0 [ 211.955671][ T7490] hid-generic 0000:3000000:0000.006A: unknown main item tag 0x0 [ 211.963329][ T3371] hid-generic 0000:3000000:0000.0069: unknown main item tag 0x0 [ 211.970977][ T7490] hid-generic 0000:3000000:0000.006A: unknown main item tag 0x0 [ 211.978622][ T3371] hid-generic 0000:3000000:0000.0069: unknown main item tag 0x0 [ 211.997799][ T7490] hid-generic 0000:3000000:0000.006A: hidraw0: HID v0.00 Device [sy] on syz0 [ 212.094040][T11716] bridge0: entered allmulticast mode [ 212.105642][ T3371] hid-generic 0000:3000000:0000.0069: hidraw0: HID v0.00 Device [sy] on syz0 [ 212.155356][T11721] Cannot find add_set index 0 as target [ 212.159145][T11721] loop2: detected capacity change from 0 to 512 [ 212.176688][T11721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.195811][T11721] ext4 filesystem being mounted at /556/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 212.250408][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.363744][T11729] loop3: detected capacity change from 0 to 512 [ 212.373118][T11729] EXT4-fs: Ignoring removed oldalloc option [ 212.383539][T11729] EXT4-fs: Ignoring removed orlov option [ 212.395450][T11729] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 212.413850][T11729] EXT4-fs (loop3): orphan cleanup on readonly fs [ 212.424457][T11729] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2711: bg 0: block 248: padding at end of block bitmap is not set [ 212.454615][T11729] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2711: Failed to acquire dquot type 1 [ 212.475594][T11729] EXT4-fs (loop3): 1 truncate cleaned up [ 212.548139][T11729] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 212.578095][T11729] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.918896][T11754] xt_hashlimit: max too large, truncated to 1048576 [ 212.927389][ T7490] hid-generic 0000:3000000:0000.006B: unknown main item tag 0x4 [ 212.935166][ T7490] hid-generic 0000:3000000:0000.006B: unknown main item tag 0x2 [ 212.942956][ T7490] hid-generic 0000:3000000:0000.006B: unknown main item tag 0x0 [ 212.950694][ T7490] hid-generic 0000:3000000:0000.006B: unknown main item tag 0x0 [ 212.958413][ T7490] hid-generic 0000:3000000:0000.006B: unknown main item tag 0x0 [ 212.966140][ T7490] hid-generic 0000:3000000:0000.006B: unknown main item tag 0x0 [ 212.973974][ T7490] hid-generic 0000:3000000:0000.006B: unknown main item tag 0x0 [ 212.981687][ T7490] hid-generic 0000:3000000:0000.006B: unknown main item tag 0x0 [ 212.989408][ T7490] hid-generic 0000:3000000:0000.006B: unknown main item tag 0x0 [ 212.997159][ T7490] hid-generic 0000:3000000:0000.006B: unknown main item tag 0x0 [ 213.004853][ T7490] hid-generic 0000:3000000:0000.006B: unknown main item tag 0x0 [ 213.012668][ T7490] hid-generic 0000:3000000:0000.006B: unknown main item tag 0x0 [ 213.020408][ T7490] hid-generic 0000:3000000:0000.006B: unknown main item tag 0x0 [ 213.028270][ T7490] hid-generic 0000:3000000:0000.006B: unknown main item tag 0x0 [ 213.035980][ T7490] hid-generic 0000:3000000:0000.006B: unknown main item tag 0x0 [ 213.043705][ T7490] hid-generic 0000:3000000:0000.006B: unknown main item tag 0x0 [ 213.051433][ T7490] hid-generic 0000:3000000:0000.006B: unknown main item tag 0x0 [ 213.059179][ T7490] hid-generic 0000:3000000:0000.006B: unknown main item tag 0x0 [ 213.067008][ T7490] hid-generic 0000:3000000:0000.006B: unknown main item tag 0x0 [ 213.074777][ T7490] hid-generic 0000:3000000:0000.006B: unknown main item tag 0x0 [ 213.082556][ T7490] hid-generic 0000:3000000:0000.006B: unknown main item tag 0x0 [ 213.090774][ T7490] hid-generic 0000:3000000:0000.006B: hidraw0: HID v0.00 Device [sy] on syz0 [ 213.131908][T11756] netlink: 'syz.4.2721': attribute type 1 has an invalid length. [ 213.140390][T11756] __nla_validate_parse: 3 callbacks suppressed [ 213.140417][T11756] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2721'. [ 213.215552][T11769] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2726'. [ 213.298057][T11779] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2729'. [ 213.313411][T11781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2730'. [ 213.396505][ T5445] ================================================================== [ 213.404668][ T5445] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios [ 213.413304][ T5445] [ 213.415647][ T5445] write to 0xffff888118ca7108 of 44 bytes by task 11788 on cpu 0: [ 213.423463][ T5445] tty_set_termios+0xc0/0x8c0 [ 213.428163][ T5445] set_termios+0x496/0x4e0 [ 213.432599][ T5445] tty_mode_ioctl+0x379/0x5c0 [ 213.437292][ T5445] n_tty_ioctl_helper+0x91/0x210 [ 213.442248][ T5445] n_tty_ioctl+0x101/0x200 [ 213.446678][ T5445] tty_ioctl+0x842/0xb80 [ 213.450957][ T5445] __se_sys_ioctl+0xcb/0x140 [ 213.455570][ T5445] __x64_sys_ioctl+0x43/0x50 [ 213.460194][ T5445] x64_sys_call+0x19a8/0x2fb0 [ 213.464888][ T5445] do_syscall_64+0xd2/0x200 [ 213.469595][ T5445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.475504][ T5445] [ 213.477851][ T5445] read to 0xffff888118ca7122 of 1 bytes by task 5445 on cpu 1: [ 213.485409][ T5445] n_tty_receive_char_flow_ctrl+0x59/0x1a0 [ 213.491263][ T5445] n_tty_lookahead_flow_ctrl+0xed/0x130 [ 213.496831][ T5445] tty_port_default_lookahead_buf+0x8e/0xc0 [ 213.502768][ T5445] flush_to_ldisc+0x281/0x360 [ 213.507468][ T5445] process_scheduled_works+0x4cb/0x9d0 [ 213.512954][ T5445] worker_thread+0x582/0x770 [ 213.517566][ T5445] kthread+0x489/0x510 [ 213.521646][ T5445] ret_from_fork+0xda/0x150 [ 213.526160][ T5445] ret_from_fork_asm+0x1a/0x30 [ 213.530938][ T5445] [ 213.533273][ T5445] value changed: 0x13 -> 0x6b [ 213.537953][ T5445] [ 213.540283][ T5445] Reported by Kernel Concurrency Sanitizer on: [ 213.546451][ T5445] CPU: 1 UID: 0 PID: 5445 Comm: kworker/u8:48 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 213.559137][ T5445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 213.569204][ T5445] Workqueue: events_unbound flush_to_ldisc [ 213.575051][ T5445] ================================================================== [ 213.585058][T11791] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2733'.