last executing test programs: 15m34.447603333s ago: executing program 1 (id=2782): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, 0x0, 0x0}, 0x20) 15m34.326950103s ago: executing program 1 (id=2783): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea}}, &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x54}, 0x94) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) socket$kcm(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803fd, 0x1, 0x800}) 15m34.183642626s ago: executing program 1 (id=2785): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000001000000070000000c"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)='%-5lx \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x18) inotify_init1(0x80000) (fail_nth: 2) 15m33.939598958s ago: executing program 1 (id=2786): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe, 0x2, @perf_bp={0x0, 0xd}, 0x1216, 0x2010000, 0x2, 0x5, 0x8, 0x20005, 0xb, 0x0, 0x8, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = geteuid() quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x2, 0x7fe2, 0x3, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r4, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r4, &(0x7f0000000000)='./file0\x00', 0x5) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x2c0, 0x0, 0x2c0, 0x138, 0x0, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xff, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xf, 0x7b7b, @remote, 0x4e22}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r5, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x4001) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='yeah', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 15m32.928130657s ago: executing program 1 (id=2798): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000004, 0x3032, 0xffffffffffffffff, 0x0) timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone(0x4011, 0x0, 0xc, 0x0, 0x0, 0x0) timer_gettime(r1, &(0x7f0000000380)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) r3 = socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0xf1712, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x101280, 0x10003, 0xc, 0x9, 0x5, 0x9, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0xf1712, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x101280, 0x10003, 0xc, 0x9, 0x5, 0x9, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa, 0x4000011, r4, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x10, 0x1403, 0x1, 0x70bd26, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x10, 0x1403, 0x1, 0x70bd26, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xd, 0x1000, &(0x7f0000002cc0)=""/4096, 0x40f00, 0x40, '\x00', 0x0, 0x0, r2, 0x19c00, 0x0, 0xfd7c, 0x10, &(0x7f0000000180)={0x0, 0x2, 0x5b, 0x9}, 0x10}, 0x94) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) (async) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(r7, 0x1, &(0x7f00000003c0)={{r8, r9+10000000}, {0x77359400}}, &(0x7f0000000400)) (async) timer_settime(r7, 0x1, &(0x7f00000003c0)={{r8, r9+10000000}, {0x77359400}}, &(0x7f0000000400)) 15m32.648643872s ago: executing program 1 (id=2802): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xa, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x40}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r0, 0x0, &(0x7f0000000000), 0x2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0x4, 0x4, 0x3b8, 0xffffffff, 0xd0, 0x0, 0x1a8, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'ipvlan1\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'geneve1\x00', 'macvlan0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x3, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioperm(0x0, 0xd, 0x4000000000000020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AgiNfbGsrzrtbzrUptIuGeuSFTiBEf+AM49ceeC4MalHJD4YYFqJA5TzezY2di79qaJvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiIdyNipjyelFu81d3y8z7ZfbC4t/tgMYkse+dfSVGeH4uen8ldK19zKiJ+8J2InyRH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5427r9ceozVTx5a+1JwoU1/++I873/hZXq3p8khvO56mbtMrB3FylyPie6cRbAQule2ZGHVF+EzSiHg+Il4urv+ZuFT8NgGAiyzLZiKb6c0DABddWsyBJWm1nAuYjjStVrtzeC/E1bTRandu3W9tri1158quRyW9v9Ko3ynnCq9HJcnzc0X6Yb52KH83Ip6LiF9OXiny1cVWY2mUNz4AMMauHRr//zvZHf8BgAvu+I/NAAAXkfEfAMaP8R8Axo/xHwDGT3f8v/K4P5Zl2c9PozoAwBnw/A8A48f4DwBj5ftvv51v2V75/ddL721trrbeu71Ub69Wm5uL1cXWxnp1udVaLr6zp3nS6zVarfW512Lz/evfXG93Zttb2/earc21zr3ie73v1SvFWTtn0DIAYJDnXvroL0k+Ir95pdiiZy2HykhrBpy2dNQVAEbm0qgrAIyM1b5gfD18xn/sDwGYHoALos8SvY+Y6vcHQlmWZadXJeCU3fyC+X8YVz3z/z4FDGPmpPn/Ym1gbxLChWT+H8ZXliXDrvkfw54IAJxvx8zxXz/L+xBgdAa8//98uf9d+ebAj5YOn/HhadYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzrf99X+r5TK/05Gm1WrEM8UCQJXk/kqjficino2IP09WJvP83IjrDAA8qfTvSbn+182ZV6cfKXrx2kFyIiJ++ut3fvX+Qqez8aeIieTfk/vHOx+Wx2snBps6jRYAAMfbH6eLfc+D/Ce7Dxb3t7Oszz++3b0ryOPu7U7E3kH8y3G52E9FJSKu/icp811Jz9zFk9j5ICI+36/9SUwXcyDdW5bD8fPYz5xp/PSR+Gm5QHNa/lt87inUBcbNR3n/81a/6y+NG8W+//U/VfRQT67s//KXWtwr+sCH8ff7v0sD+r8bw8Z47Q/f7aauHC37IOKLlyP2Y+/19D/78ZMB8V8dMv5fv/Tiy4PKst9E3Iz+8XtjzXaa67Ptre3bK82F5fpyfa1Wm5+bv/PG3ddrs8Uc9ezg0eCfb956dlBZ3v6rA+JPndD+rw7Z/t/+/90ffuWY+F9/pV/8NF44Jn4+Jn5tyPgLV38/8Lk7j790tP3JML//W0PG//hv20eWDQcARqe9tb260GjUNyTGNPHjOBfVGC6R/5c9B9Xom/jWWcWaiP5Fv3ile00fKsqyzxRrUI/xNGbdgPPg4KKPiP+NujIAAAAAAAAAAAAAAEBfZ/EXS6NuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfXpwEAAP//+E3TQw==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) r3 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000088fe508a8500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r3, 0x0, 0x0) fchdir(r5) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x3, 0x13, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x80000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xff, @local, 0x1ff}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd29, 0x3506}]}, 0x98}, 0x1, 0x7}, 0x0) 15m32.622883334s ago: executing program 32 (id=2802): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xa, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x40}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r0, 0x0, &(0x7f0000000000), 0x2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0x4, 0x4, 0x3b8, 0xffffffff, 0xd0, 0x0, 0x1a8, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'ipvlan1\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'geneve1\x00', 'macvlan0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x3, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioperm(0x0, 0xd, 0x4000000000000020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) r3 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000088fe508a8500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r3, 0x0, 0x0) fchdir(r5) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x3, 0x13, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x80000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xff, @local, 0x1ff}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd29, 0x3506}]}, 0x98}, 0x1, 0x7}, 0x0) 4.035255563s ago: executing program 4 (id=11776): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x22) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) socket(0x1e, 0x1, 0x103) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) semget(0x0, 0x4, 0x4) socket(0x400000000010, 0x3, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r3 = syz_open_dev$sg(0x0, 0x0, 0x802) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, 0x0) socketpair(0x1, 0xa, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8905, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000006"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0c00000004000000040000000000010000000000", @ANYRES32=r9, @ANYBLOB="000000b607e93f1500", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000e9"], 0x50) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r6, {0xffff, 0x4}, {0x10}, {0x5, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x40) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@private1, @in6=@remote, 0x4e24, 0x1a, 0x4e26, 0x7, 0x2, 0x0, 0x80, 0x32, r6, 0xee01}, {0x2000006, 0x4, 0x5, 0x5, 0x8, 0x7, 0xc, 0x4}, {0x3ff, 0x3, 0x5, 0x80}, 0xfffff001, 0x6e6bb9, 0x1}, {{@in6=@mcast2, 0x4d5, 0x3c}, 0xa, @in=@multicast1, 0x3507, 0x4, 0x0, 0x0, 0x9, 0xc6b, 0x2}}, 0xe8) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r11}, 0x8) 3.913670344s ago: executing program 5 (id=11778): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000a0000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r1, 0x0, 0x8000000000000003}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000127bd7000fbdbdf25010000000c0099000100000028000000"], 0x20}, 0x1, 0x0, 0x0, 0x6404c041}, 0x20000001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000a00)=ANY=[@ANYBLOB="93879b4599623f691cf9bd7dc06b4dcfb1c3a37cfeb5fd3d80dd24e0c09e20fb6571ff2b2a3c4ec5b0f44827ce8d9dd11bcb2ef4036154894ae4c74d8108cdc1ee983fd5d8dbab0cd84c1698a261c24d3f4748eb34f77a2d49bd173967ec2b6847761d013c9bba74b6f8eeb686020c25239f0e96545a916ecb99131bd506bd83134e386933dc97d9132135755b68a194662dab932e93f4d45e01fa67ef70d177194c6c401a5867f17b309a5af6ef6b5807111ee5d1988a9927316fa8238079e5058b0000000000", @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, 0x0, 0x0, 0xc1, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) mq_timedreceive(r2, &(0x7f0000004600)=""/102365, 0x18fdd, 0x0, 0x0) 3.17355629s ago: executing program 4 (id=11784): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000a0000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 3.077989748s ago: executing program 2 (id=11786): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0xc, 0x0, 0x7ffc0002}]}) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) 3.077260638s ago: executing program 4 (id=11787): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x30, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}, @NFTA_QUOTA_CONSUMED={0xc}]}}}]}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 3.05124419s ago: executing program 5 (id=11788): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000a0000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r1, 0x0, 0x8000000000000003}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000127bd7000fbdbdf25010000000c0099000100000028000000"], 0x20}, 0x1, 0x0, 0x0, 0x6404c041}, 0x20000001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000a00)=ANY=[@ANYBLOB="93879b4599623f691cf9bd7dc06b4dcfb1c3a37cfeb5fd3d80dd24e0c09e20fb6571ff2b2a3c4ec5b0f44827ce8d9dd11bcb2ef4036154894ae4c74d8108cdc1ee983fd5d8dbab0cd84c1698a261c24d3f4748eb34f77a2d49bd173967ec2b6847761d013c9bba74b6f8eeb686020c25239f0e96545a916ecb99131bd506bd83134e386933dc97d9132135755b68a194662dab932e93f4d45e01fa67ef70d177194c6c401a5867f17b309a5af6ef6b5807111ee5d1988a9927316fa8238079e5058b0000000000", @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, 0x0, 0x0, 0xc1, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mq_timedreceive(r2, &(0x7f0000004600)=""/102365, 0x18fdd, 0x0, 0x0) 3.035390332s ago: executing program 2 (id=11789): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x7, 0x4, 0x208, 0xd9, 0x0, 0xffffffffffffffff, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000005dba0000000000000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x110, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0xedf2}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x10040400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0xcea, &(0x7f0000000c00)={0x0, 0xfffffffc, 0x400, 0x0, 0x2c1}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x1}) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r2, 0x0, 0x0, 0x0, 0x44040001, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200060000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000020000000000000ffffffffffd9ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x10, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000380)) 3.030058582s ago: executing program 4 (id=11790): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_io_uring_setup(0x5e9, &(0x7f0000000480)={0x0, 0x9e6e, 0x1000, 0x2}, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000000)={0x18, 0x0, {0x7, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r8, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r5, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x4}, 0x4000810) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x3c, 0x64, 0xf31, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x1ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fedbdf2500000000050006000400000005"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x88) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r12, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r14}, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r2}, 0x8) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b708000000000000d2c8cfdf335d8bc2833e01667b83f8ff00000000bfa200000000000007020000f8ffffffb7030000a092b48dcca9c3474edba6d90000c300"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r15}, 0x10) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) 2.705000301s ago: executing program 4 (id=11793): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x18) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) 2.700403291s ago: executing program 3 (id=11794): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, 0x0, 0x0, 0xc1, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 2.617936459s ago: executing program 4 (id=11795): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r4, r4, 0x2f}, 0x20) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000008c0d00000000000026bddb2d05d145739b941da3eed39a2f2b10b5ba", @ANYRES32, @ANYRES8=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000000140)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r9, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 2.316164825s ago: executing program 3 (id=11797): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000a0000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r1, 0x0, 0x8000000000000003}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000127bd7000fbdbdf25010000000c0099000100000028000000"], 0x20}, 0x1, 0x0, 0x0, 0x6404c041}, 0x20000001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000a00)=ANY=[@ANYBLOB="93879b4599623f691cf9bd7dc06b4dcfb1c3a37cfeb5fd3d80dd24e0c09e20fb6571ff2b2a3c4ec5b0f44827ce8d9dd11bcb2ef4036154894ae4c74d8108cdc1ee983fd5d8dbab0cd84c1698a261c24d3f4748eb34f77a2d49bd173967ec2b6847761d013c9bba74b6f8eeb686020c25239f0e96545a916ecb99131bd506bd83134e386933dc97d9132135755b68a194662dab932e93f4d45e01fa67ef70d177194c6c401a5867f17b309a5af6ef6b5807111ee5d1988a9927316fa8238079e5058b0000000000", @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, 0x0, 0x0, 0xc1, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) mq_timedreceive(r2, &(0x7f0000004600)=""/102365, 0x18fdd, 0x0, 0x0) 2.126861992s ago: executing program 5 (id=11801): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0x5, 0x3, 0x2, 0x0, 0xe61b, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000040)='GPL\x00', 0x2, 0x96, &(0x7f0000000080)=""/150}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x20000000000000ff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0x8e, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x9d, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) memfd_create(&(0x7f00000004c0)='\x00', 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r5, 0x0, 0x5}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x0, 0x1, 0x9, 0x100, {0x4, 0x2, 0x7, 0x2, 0x8000, 0x3}, {0x8, 0x0, 0x7fff, 0x8, 0x1, 0x100}, 0x2, 0x10, 0xe723}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1, 0x2}}}}]}]}, 0x84}}, 0xc0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r8}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) tkill(r2, 0x13) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x4, 0x4, 0x4c8, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3f8, 0x3f8, 0x3f8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x198, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x6, 0x7}, {0x1, 0x1, 0x4}, {0x4, 0x5, 0x5}, 0xfffffffc, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) syz_usbip_server_init(0x2) 2.126357412s ago: executing program 2 (id=11802): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x5437, 0x0) 1.81250111s ago: executing program 2 (id=11803): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x3ee53089, 0x10003, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x94) recvmmsg(r0, &(0x7f0000003d40)=[{{0x0, 0x94, 0x0}, 0x5}], 0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = io_uring_setup(0xdac, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x4000040) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) read$nci(r4, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x4}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000010001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd70000035000002000000500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r9], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 1.490091478s ago: executing program 3 (id=11806): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000a0000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0x8000000000000003}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 1.185183705s ago: executing program 3 (id=11808): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, 0x0, 0x0, 0xc1, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 1.113070592s ago: executing program 0 (id=11809): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='ext4_alloc_da_blocks\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0xa08000, &(0x7f0000000240), 0xfe, 0x56b, &(0x7f00000003c0)="$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") 1.062616676s ago: executing program 5 (id=11810): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x5437, 0x0) 1.058171717s ago: executing program 0 (id=11811): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x8}}, 0x20) 978.049983ms ago: executing program 5 (id=11812): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}}, 0x20}}, 0x20048010) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) r6 = socket(0xa, 0x3, 0x87) sendto(r6, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xffffff81, {0x0, 0x0, 0x0, r8, {0xe, 0x3}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x40004) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000140)={0x3, 0x0, 0x98, &(0x7f0000000080)={0x7, 0x2, 0x11}}) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) socket$nl_route(0x10, 0x3, 0x0) socket(0x21, 0x803, 0x0) 932.162078ms ago: executing program 0 (id=11813): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x30, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}, @NFTA_QUOTA_CONSUMED={0xc}]}}}]}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 931.691278ms ago: executing program 3 (id=11814): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x2000000004}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x22c7, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) preadv2(r3, &(0x7f0000000800)=[{&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000000500)=""/138, 0x8a}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000000740)=""/184, 0xb8}, {&(0x7f00000005c0)=""/124, 0x7c}, {&(0x7f0000000200)=""/40, 0x28}, {&(0x7f0000000280)=""/38, 0x26}], 0x7, 0x7fff, 0x80000000, 0x12) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$eJzs3U1vG0UfAPD/bt7atE+TSs+Bl4sFSERCJE3aApVAIuLCoT3RA0es2C1RnQYlRqJVxItA3EAC8QHgAHwEjnDgO8AZOEClCOVAys1o7V3HxHbapA6ukt9PGnlmZ+2Z9XjW68nsJIBjqxQRL0fESESci4ipfHuah3i/FbL9trc2lv7e2lhKotF47c8kknxb8VpJ/ngqf4GZNCL9KInHe5S7fuv2jXKtVl3L03P1lbfm1m/dfnZ5pXy9er16c+G58xcuXnzh0sLzAzvWzZXkk6e+ufzbZx9XPv/pj++ns/qezvM6j2NQSlFqvye7XRp0YUN2oiOejA6xIgAA7CnNr/1Hm9f/UzESOxdvU/Hpj0OtHAAAADAQjUbxCAAAABxdid/+AAAAcMQV8wC2tzaWijDE6Qj8xzYXI2K61f5389DKGW3f0zu26/7eQSpFxKsnrixkIQ7pPmwAAACA4+yHxdbCf93jf2k80rHfyYiYLNb2G6DSrnT3+E96Z8BF0mFzMeLFiLjbNf6XFrtMj+Sp/zWHCseSa8u16rmIOBMRMzE2kaXn9yjj3SdufNsvr3P878tfX5/Pys8ed/ZI74xO/Ps5lXK9/CDHzI7NDyIeG+3V/kl7zLdzncyDeGN5+6V+eVn7Z+1dhO725zA1vop4umf/31m5NNl7fda55vlgLj8rTHSX8cvprz/sV35n/89CVn7xtwAOX9b/J/du/+Y6ue31etf3X8Z3f135uV/evdu/9/l/PLnarOB4vu2dcr2+Nh8xnlzu3u7T1Fa8H8X7lbX/zJO9v/+L678k/+4/07E+9H688t7Zq/3y9P/hytq/sq/+v//Im5OPzvQr//76/4VmZYoXcf13b/fbQMOuJwAAAAAAAACDkTbn9iXpbDueprOzrXm+/4/JtLa6Xn/m2urbNyutOYDTMZYW8z+nOuaDzrduI2+nF3alz0fE2Yj4YupkMz27tFqrDPvgAQAA4Jg41ef3f+b3g9zsAQAAADycpoddAQAAAODQ+f0PAAAAR9qDrOtfq64V/yLogE8XETlYZCT/4D0s9Tl6kSGelAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIfwIAAP//keS8Nw==") bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r4, 0x2007ffc) sendfile(r4, r4, 0x0, 0x800000009) 809.714188ms ago: executing program 0 (id=11815): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x5437, 0x0) 801.853329ms ago: executing program 2 (id=11816): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000001880)=@newtaction={0x1890, 0x30, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [{0x13c4, 0x1, [@m_ife={0x105c, 0x0, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xf}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xb, 0x40, 0x1, 0x879, 0x6}}}]}, {0x1004, 0x6, "044e6e40e87abc2a96fa156816444ab8edddf6c49ddc151a396bf9e20c4660c45f86740b9a2ffc77218912f0b073040acffd2e1dc920a9e7109d372a81f562d82d199414440c4d06e9e6ca8ab503d901b2ea8dcb06d8ef0d6e3aeb235ac21bb31b1c1805c2995e162d7e28652442b899e41a180fa6f674963e0a5814f8880f19544721729e920fbd5a38a293b3b5cd1f90fe90f4f9a25b3cf9e98d6dc3f3b9c11b7154fbec8b36cea76bdc25bd5d0ec78b13a763a0bfb6844671f49e6a64bf7a88b049e52f555695709a739223b132698586d3b2084c0b603dc55be6d483bf3dcff7a9be6ac8d0c1080c5336ee5b9f5d7a2dcce9d25ef24665159f9367437068dd10d63facc158cdb03f9fda23211f80d65a89fab394e0d5d9db349e82da915b060765cd6af24152115427aba65a28ae3ba3c49e51c3a02d0640c27278cebe27b995efdb774626a35709fd9f0bdafceb26e86d8348bfffde90ea24aabb55a97dd4375bfb93126097404ceb20de01f93370580ebb48f09959d31ee97886bdb9b4f35e3d9c3e055ab9a75e044c7ffaa31a6de01e2aa89054075c067cfa8a3d78c8a6b69482a9ad5400c39bdb006e3f310622b561a6f589d1715b3728388b7b46cc7143568bc4f37756763b74757d4f5c5f60b41ab4a1e837e51c3f2e88782c06595f805888b1f213dcb48320fcf562972a73addbf3f1639bf1f8657553eed7e2e4551569e16a9dfac5b10f200f75d108a535dd35b0459e9d90451ebbf65575bfd1ce666ebfdb47da73b50c46fadb79cb2509419d255cb4a61f59e79bf3b252ee210368a4b27993ff1249134cb1f339721e99978232cac55ebb6524a2bcff9fbc013a952956fe04e995d8a5523bee050e975acbfbf8d7a82d9903392ef7673ec558b9e563a9eb4468bae3e60e99eb8ac789b2227c06bce8ed6b57df898542e1d3d13401f56236f5963eee279032fd633e2ab234819a5a99bac33baebf35c389f24c233bbb2340539ffff0839d4c7a43152ae78953fc82398ab560cf506dfe8c69b0a68126b947b1a6921ebfd2e23d464c9758f075522a0c2e0dc541f0e3efaf24b29bc8a9c77f2732435dd48b32b1fd9f6ef8fd790aa021214136a5ae8a74354b90557fc265069c330e2bb9b0dea887de4557a218760ce7a7183811f31a7e9bb79b1cb2ff08ee2c76af2cad1e894e51af684ecf5176106cda6427e9a6b4f564a1502f6fd62ef323920ffa04ffc6de1e1f925bc38fddeaded9c3710d43d4168061159fc09866eb18fa3fed2be5d5528fed01fb7e84b56d8c726efba5598768aab2801ea1fdf34ce38c4475547e94603ecdfabaa1843d2235d3262812d14c88a7e013620d2f15adbb30fb0f27ce9d37bcbc63a432f70313d9ad731dd9fb230934f8098924269202dcf33113651bd068a1a7d691c5abcf4a9cb802999bb95c20b50ff34eec731eff7f0df1a8a1425e2321b64668fd6f9e5151998d7a850c16aef7ca11b24e883efe1778987dab1b2bdad194ab457033644e3e824f4e5941290bafe13ec6b02aca681fc35b9b590de97d15c62a48f7a6f16c891e6e14a1000c613136057eb8b0bc130b318c7447f81c85fd09d72d64201ccd90b3d82eb6fb543c9eefeef8c9826b24c5518fd0b7071f4ee1a56a573de6f41a91385426881e972740b1f06a9f31fd496c9ebb8247574dc0dac84b18a1d3c7b9ab9ef16817117e331c3f088fe4f882420ccbaccc7a4ec052963e3bde5e0607bdda5434343e1e35dcfc15764908dbe2487b94915a2b73e7add0bdaa2b062be37aef474a109deb5db23b73dbd78628e1c5e1daa6292acdb6c05fe0c127d087ceb7ba4348a068d605e8166dd9812320aff2f050891018d1875ac322b19a054a0a7888cdd967ce191ab843813b2d6b2a7a15f4d0a00e203c7e705847392f3b0254d7972d889d8c3cfd99a1c862f3f1bf26189ecc7b439fd3b209019f2e02f7c351de354c683222d26c51d18e5f56f0ca26b8009fde92df95a4dc1ae3479011408e52cbde8aa0c3d285ba057cc11d5645d4219040640244126ce8d7a9ffbfbb16426a24d1c6a428fc4cb1622af8bbeed0c6ea4cbb99f667def09c53af9acb1ec1e2611ccf3cba0f4f6440b3acdefc77c4f120b819425f191371c5c9fe11f5cdbe496fbaea8f36b3b2db926051dc4b29f978c60633bc9f8f314c9c80352d7d5bc44a17990702b9fb76555da07242cf57e53489e8b5536f6f060dc2a579120b79273489a0636d630c3bdabb52cdabd6c1974ce76bb9e13e839e81bb5f1a1301d83b7416cef76a3bc77d5c347f4b9625a35901d4e489d529dfeb601e4fe8315f62901077b22b470050b682a9d312527c8b35c16957ceca144d4dad3de67dd3cf8a5418643b50ed38d308a154be58aaf8badba9ae15267ae3adad4f9b8030c5b9c348b25e3fff55060250749e1fdd27b870782a4d9cb0450d9d44824abb39585ddb0a9d579e24e950f2bc1a8e8c41a7644e89e5a8b3ab9ff4c22e9d46e61e031be26cde83580d3fcb7db03bb176ba68b126cb07b60d766cd78e0172b65aab697d1ef1b22465f79cd4b10d6568db88c41175de0757e346d47c08bbc9ec9cdb51a0d55ea30fde1ce9918ea5e20ad71bc31be75b6faf1d31bd99d6f4e9ab78fcf8b202a4123c2fb5ca7e2ae151bd2e3bf19a29ba0055f1742094097e3dbb14407366ad7111bc172c293e00e5d3768c296a557f128201c83b3c5fd2d81046cc85ad58c796ad49363036982e6705f0bf22aa3ffa056a0c35db5f0e755178f99bf788e5fa0fb240db9ec40620aa47f164e323b779ea60502bbb43f5dab55a753e4ddf1f7bc257609a04e268e0099653d81a90492702c39ef77db6c8e696993572d4d1b9a4dddcb0873e4c63c648e9a3c3a83b5a60b78d6fc4bd0f84ddea99125a767a23c768352c87d31a95d3dbb2d5e05367584ee4dbfee0ffee04b3a1aab9177654e3d2583f23262000e3cc6dfc7c987ad7c964c77e5c29207b03a5ff6aac08e91190d930cb2a9aad68714bb28649fd544721ab7b6b1870eb5559b0767dd2f25cb94d5e74d29a5df32e1c0b5fdbde2e5710ca4ce2fbf9716a9c99440ea779f09e35e37cb39c2364359e499bad936213785c6eef147d1903176fb937af23650bd223837a6f1c3803a017278cd186f845321d2b3ffce397cab1c8a3f180c897d9964286478961127c72bc93ab5c5e2e8890ca6b553c2cae2e641930b58d477cd1abe91b9e3f67feeee4b68ad187eb578e1dcd8b944d8cf1d70121fa1115e46ad48862ffa21316cd6e19c312d45289b8ef822eeb9cf1b6d2dccde1b8da56256d0f39b04263ec3c7a23ca4fe0c1ce3037fabfdaa26cb701f2cfc614c2126ab3e39a9b95ba35434bd66a69ecf9b3e0b1e067709a375ce1e6d8a00784f673be68e1f567d266125e9fd1100cc0066716de585ab76d2e2b65cbb5e0317036d8d44b78ba80f8e628eff1da155bfc2a3e27187f95b3ba1c3fec63ba5422ce753d84590c5f0c2a5e120250accfcd96999b886d52a1fc6d4c3e7bc40dad243421a5ca8d9b39b898ca9d51b9fac4f4efc889c5f755c044ecc299ca8a294eb9d28e6bbca22ab335e89101038662df64fc4798bb7e069e7bebe421084c9dda4ef32bdc4a81874f1602c89a478e67909b0842a45807494df840dbe902644188b10f9ec72fc7c705cfa1aaadf45150d6be35c1c170aafe88a082d745268a33f8da9336775a03a30ccb787f80496888301b2adb0afb0d778cd6f5f672c3b20f9479edcae44df30c56e19461a0920d6eacbb9d58d1259349345cc0204bee5d80d0fe1174a811cff6cfae9a40876b89f2d5e0153ca4d450e3f292495dada74c1bfb915ea12aa8d32168a643934d0a16fe67bc941a28c3ce5661a62ed5da7e1ac0982426460f185a5faf5a49cbc010152200db403f8081a9bcf24982e4ad984a2a65608d33d6303ee7f4f527687635edef5fed026e3bff1eb6a210a3d8a57e1c897a4e1e34f7bc2189d9c1fe65533d40503df27580fd6242c6b96d4242c47edf5819583ffac36df0e1df8f7e87644b15e0b44545bafa265d5058d03af6e7daa380b4f0efeb4e09ed7baa71bb2017ac257918ae6564bd62b292c0d9560dcd0c3b3f8952153bf1ee65e2ffeed6970988912029588cc21c6d05e28e85cd31535664e93b8e7377aef793a283e49f230d8769804a20dfd242d949c9b6a95107f8885d58b8eaa327a657b8eb7f874d7ea0f97eb684e78b1282dc893b9203dda07433e3b605ecb207d891a4c3be340c41347a4f2acd592b8e5cee71b5171c8975318bc6f65471121913cbf9633ceb2fabd49e736086618bcb5aefb0d39aae126755d9ef41122e633ff2940c7dc2cc6fb6daf62beb5610e7b9bc640ec285460e3ce1184bee7471131a4b8bfe7b7e5138df947d78a34d0821c8bfbac3b025cb521852ef75649986d3b0769d51118541613cf96d3d82e4b13787a6cd0f8bf69556dc296349ffc70cda41af3fe901a8c3a1f1555b73cbdb9295ba93f837b3da3fc9c09a6dc91ad138f654f1e4350bb22f2f7b25a4a63ba8714f35e859f51b4205bce44997ba615bdd56562d467c55942e28d15060118e74e2c5ae23b4cf44c2747ebf425208123072b16f5f75e8e01d27647e3282a18f71a244832d6bdbd9207e55573091fa1f29dfcdd4a02be54064b25d10e0ba7d9cd769adb7ed64afebf58548dd5220b96ef2e403b6742e111879de425f716cd757fda6488b03c1eb6d24f0a24934f4b7c3107d57f7d117c4be1ccf12ce4df73a4ccab5b1939cf447f0c50136e578dea8de04da3cf7f8fea1b7a64d34c84d40ded5519cf40fb09553f421291907bb15f6b7d002e52f43c756e94df5faa91a69b486f13c8cd7a3f205a26fea06666f34b48c231a8c582884d9174358c72e0bb04e7d5f16f2f17b4f348ddbed261655c8245b2b975c9e3ed5d49f8dfe26d3906e10d310c04214b9dfd83c2eeb3cf6dd8b9f9be18a1db69d8996ce32980c8848d372316bbc34cddd65587765ea58b7d4966bdd1de51af37ac10e5ebdbfa162df9912443f08b110ade9f59beab5b955993e1336867a91540fa5502f734204e8d6d0d63e557df78592fd6aa31b577eb7935422dd43b0ae211da785aaa13031d6c3841f851c3c0bb3e643ccdbdba545435a14ed8fbdddcec55f955783dcf5ac0a83eb3f2e408fa697e7a8d23b65b9b48aa23d82f004b4dbe7a4bc1315c191e0f4fee6014dc8b8bba294528adb2f5c32dcc1655828f80457d763a26e84f4a7ca9ae4e8d8019545e24c12eb34fee395701a1d8114e80432c7698fcc61bace3d291f83924b090d631e036b4d61cb34e4db4f37d96ed8dfea01f253a3e18100d0dc925251577a2d7645b1aed53c710efb58a7f612ee4469611126b213700aa794657e5c7bd2134e6d1a024d70dd506479a3ebf999fb6d22965ede57293f89ca13870ab5aacd87184c28b509deea13a4f102473adfe306b007ed57fa7bdd87ca80d6b03934e4947f8834dc8df880a528f6886167bda34864ea10abdfcc84318d38b625fed8b0c4f86b94bc290e814c0924d2fe2a3d59311343461ac6f8c14c1aa71826f6799480974c40dea88f2a370663da14e9b5aa11ca20b08dba5810a6ab412b80d3fcb122dea998f3cbaa9233852a8c42788cc6dcdcd23cdb4ab4a2db4b175dbe5afc566584f94178ffe2c083e3e845e5357a4a1b0bf39362cbc236afc12f8df5b9eb6060146cc2a5e45946506c06364cc706de7b95b9ce6d3588ec7fcad62a645744904d5b5c538c76e6a14cf7cdab"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_bpf={0x74, 0x3, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xd, 0x1, 0x0, 0x6a}}]}, {0x31, 0x6, "948023c6e258d7a16f8a21ed2f4d928ae461caae78a63aed434f2ad9840ec9e24cf53057febb9fb2663e51995b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_csum={0x1d0, 0x7, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xb, 0x8, 0x8, 0x9}, 0x57}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x3, 0x6, 0x4, 0x6}, 0x26}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x7, 0x8, 0x5}, 0x1f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x716, 0x9d, 0x2, 0x6, 0x9}, 0x14}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xa0, 0xfb5, 0x2, 0xffffffe0, 0xd2f}, 0x13}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x329, 0x7, 0x3, 0x6, 0x4}, 0x66}}]}, {0xfb, 0x6, "b8b7d63b5701ef1f6d749d60629569652cf3c41e3988f9db924269afb4ec564ed80361826e7e7a55668392e815fd17630c7ded74ea2ee63b46053c105c6e01158b24c8b1834e42d33a8bd4e9983fe0aa5e862e7d6a2e69399260db6ff59a00cb128c671e17463929899524913cf2622870dc13bf96ae46372d1b58941c5e20a1b4ac1c1687cbc39f0ab1527a946d7cc50e9a36cc1343feff45a0a50062ca3799d9138bb560b9230da20f59a1b1d0698dcb16b9c6b7af2ab237208c71ce333c9667071c26d7b5b1493a2dbc089fd67c33a071f4e833fe49af969b94a7d16201e867b021d86e8504dbd28971f5273297ec126fa8d0d8be9b"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_gact={0x120, 0x7, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1456, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x7e1, 0x3}}]}, {0xdc, 0x6, "72356620894ada3fbaf646e222835135b58124d3e78ad768b204014738caf77bea813eead03779e716b0a01e13454b75df12012b2a4aabf554d3bc0ca5323a836afe40e36e5a8a03849a51a8ff04ebe6fe450e5cf44cac2d94002d4e63b819a025e5909ae72eb26af7ee353bd7dfac18208187eca739015fa7caf1ec1110ce8a12eda3d0c2e8ae1fd2eef5e9bb807b8f77d54b50b11a4d255b56c60a09faf2a336ddaac7fbe12ebb314c9a05e03e1ed78fb588f921eb8784b73f4752f81e2e22bd815e21fa0c48a203de07b3bf9ca7cb21eb2b175c7789d8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x4}, {0x108, 0x1, [@m_mpls={0x104, 0x8, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x9da59}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x809b}, @TCA_MPLS_LABEL={0x8, 0x5, 0x80bfc}]}, {0xb7, 0x6, "01a082c4c5cb469693143f47c3596050a981906121beb0037cf4cbc88c190fbe195a82522eb938d1e2458c8c8cd8f3865ccccde682dab8466c09dcc9b3360a7b9c59ee25e642a917ab7de32c648717a705aca8bf14c23f08fc65de47cec1879a1100434c3f2f82869ecb4688caea69f1fdd61c3ef0a27b7d4fc75dac66550b5f25bb41f742e432c4e19bd2bbf01182550119b0cd59d5f4a1eb93c93f85396be524d9965158145b19e81ffb4e050b173b7faa3f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x3ac, 0x1, [@m_connmark={0x1ec, 0xa, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb, 0x7, 0x20000000, 0x8001, 0x10}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x1ff, 0x8, 0x3, 0xfffffffd}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2bc0000, 0x4, 0x0, 0x2, 0x7f}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x5, 0x4, 0xef35, 0x1}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5902, 0x5, 0x8, 0xf}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x200, 0x0, 0x6, 0xfffffffc, 0x942}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xcb, 0x0, 0x9, 0x1}, 0x1}}]}, {0xf7, 0x6, "9973d2ffb446e827e4cd2a9fb940beb68b30f64b1d5b7b3733c24863927a57bb61b1067991dd9736fdbec5ea7e7fce1f82a0fcb440b4f24590ae26fa9ec111a6eab914e4abe24e76adc9efb869ab838681d141f7307c105c23ec0d2aa5a041018d5dc21f899ea03078b5a14ec7c03c9cc853face17d8c911a66a2f4b8ed7e9803eec31e188eda6dc9908e9d9158017421f7cfcdb272c8b1c691ae283561f240777044c10507484229c71981c1ca01f41482dfeaed0279f26294e9cc1db179d4f4701b97a62091c0ed1fbfd204f752a431b0faa9a0e4054e3f094554bb4fe77118b380b134dcff862b88d855c9dbebd968d0b0a"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x50, 0xc, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x14, 0x4, [{0x0, 0xfd, 0x1, 0x10}, {0xfffc, 0x9, 0x82, 0x3}]}]}, {0x12, 0x6, "361e517f6157191aa8addb050263"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0xb4, 0x19, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, ')-\x95]&:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x10001, 0x7, 0x6, 0x9, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffff3e, 0x7fff, 0x6, 0xd, 0x5}}, @TCA_DEF_DATA={0xa, 0x3, '=@-\xe0\'\x00'}, @TCA_DEF_DATA={0x11, 0x3, '\xad}%^%\xdc#!*[\xed)\x00'}, @TCA_DEF_DATA={0xd, 0x3, 'rpfilter\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xc, 0x80, 0x8, 0x4, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_mirred={0xb8, 0x9, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x10, 0x0, 0xf15b4de, 0x3}, 0x4}}]}, {0x69, 0x6, "ed23e29c6f61d2101a9fbfd61fc4ec4013fe0dbc3d72fccf0cf500f7a7ada071afafb97ad5b8819c4cb259aac2ea448cdb0b24d424805b08ec9722c39fea55c5bf5aefbf70b34f3761f3d1b9539851c5225ab8398059914485655ddf31bcbcd8532e18580a"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x1890}, 0x1, 0x0, 0x0, 0x880}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getcwd(&(0x7f0000000140)=""/237, 0xed) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r7, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) close(r7) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) connect(r7, &(0x7f0000000280)=@nfc_llcp={0x27, r8, 0x1, 0x7, 0xef, 0xfc, "538cd70836f1c2f79fac4457f689c3fa872595f1b4b3b2a586a1f273007b3d4c609af051f99c463b8d90bc5b65bee8bea9b842e36053b79ff1f50381dee4f8", 0x19}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES8=r5, @ANYRES32=r3, @ANYBLOB="3c0000001000850600"/20], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002800500030032000000140007000000000000000000000000000000000108000a00", @ANYRES32=r10], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x8, 0xd0c, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x40, 0x20, 0x4000000, 0x4}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000400), 0xc, &(0x7f0000000e00)={&(0x7f0000000e80)=ANY=[@ANYBLOB="40010000", @ANYRES16=0x0, @ANYBLOB="000126bd7000fddbdf2513000000200001801400020076657468305f746f5f626f6e6400000008000100", @ANYRES32=0x0, @ANYBLOB="2800018008000300000000001400020076657468305f6d61637674617000000008000300020000007c000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="080001", @ANYRES32=r10, @ANYBLOB="140002006c6f000000000000000000000000000008000300020000001400020070696d367265670000000000000000001400020070696d36726567300000000000000000080003000100000014000200766c616e3000000000000000000000006800018008000100", @ANYRES32=r10, @ANYBLOB="140002006261746164365f736c6176655f310000140002006970766c616e310000000000000000000800033000000000000000000008000100"/72, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="0800030003000000"], 0x140}, 0x1, 0x0, 0x0, 0x1}, 0x4004400) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) 259.342567ms ago: executing program 0 (id=11817): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 205.288652ms ago: executing program 2 (id=11818): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = creat(0x0, 0xd931d3864d39ddd8) write$binfmt_elf32(r1, 0x0, 0x69) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 65.177844ms ago: executing program 5 (id=11819): socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffffa2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000080000001e9500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0026}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='rxrpc_improper_term\x00', r4, 0x0, 0x1200000000004}, 0x18) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r5, &(0x7f00000025c0)=[{&(0x7f00000000c0)="34c782ad2303db31fddd045d8a", 0xd}], 0x1) r6 = dup(r2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)="c082b44eb524", 0x6}, {&(0x7f0000000340)="a43b2eaab400000092e588a84c82af9e9bbb7ade", 0x14}], 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@data_journal}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") mknod(0x0, 0x8001420, 0x0) inotify_init1(0x800) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 36.206667ms ago: executing program 3 (id=11820): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 0 (id=11821): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x30, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}, @NFTA_QUOTA_CONSUMED={0xc}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) kernel console output (not intermixed with test programs): 48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad6a4f749 code=0x7ffc0000 [ 1160.643609][ T29] audit: type=1326 audit(1767602445.028:115987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11814 comm="syz.5.10948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad6a4f749 code=0x7ffc0000 [ 1160.667679][ T29] audit: type=1326 audit(1767602445.028:115988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11814 comm="syz.5.10948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad6a4f749 code=0x7ffc0000 [ 1160.678576][T11817] loop5: detected capacity change from 0 to 512 [ 1160.691703][ T29] audit: type=1326 audit(1767602445.028:115989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11814 comm="syz.5.10948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad6a4f749 code=0x7ffc0000 [ 1160.691734][ T29] audit: type=1326 audit(1767602445.028:115990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11814 comm="syz.5.10948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcad6a4f749 code=0x7ffc0000 [ 1160.745767][ T29] audit: type=1326 audit(1767602445.028:115991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11814 comm="syz.5.10948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcad6a4f783 code=0x7ffc0000 [ 1160.769467][ T29] audit: type=1326 audit(1767602445.028:115992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11814 comm="syz.5.10948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcad6a4e1ff code=0x7ffc0000 [ 1160.793222][ T29] audit: type=1326 audit(1767602445.028:115993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11814 comm="syz.5.10948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fcad6a4f7d7 code=0x7ffc0000 [ 1160.845677][T11822] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1160.947883][T11834] loop2: detected capacity change from 0 to 512 [ 1160.955531][T11834] EXT4-fs: Ignoring removed i_version option [ 1160.972959][T11817] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1161.019788][T11834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1161.051492][T11817] EXT4-fs (loop5): 1 orphan inode deleted [ 1161.057441][T11817] EXT4-fs (loop5): 1 truncate cleaned up [ 1161.091589][T11817] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1161.140870][T11845] loop0: detected capacity change from 0 to 2048 [ 1161.150791][T11848] loop4: detected capacity change from 0 to 512 [ 1161.158240][T11848] EXT4-fs: Ignoring removed i_version option [ 1161.167469][T11848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1161.217043][ T2160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1161.228828][ T4145] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1161.245056][T17275] loop0: unable to read partition table [ 1161.254824][T17275] loop0: partition table beyond EOD, truncated [ 1161.306759][T11845] loop0: unable to read partition table [ 1161.312490][T11845] loop0: partition table beyond EOD, truncated [ 1161.318998][T11845] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 1161.345836][ T4696] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1161.362556][T11851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1161.385189][T11851] ext4 filesystem being mounted at /321/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1161.502523][ T3004] loop0: unable to read partition table [ 1161.508563][ T3004] loop0: partition table beyond EOD, truncated [ 1161.545657][T11880] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10956'. [ 1161.644778][T11891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10958'. [ 1161.676857][T11895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10959'. [ 1161.723339][T11898] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10963'. [ 1161.863042][T11903] netlink: 272 bytes leftover after parsing attributes in process `syz.3.10965'. [ 1161.951077][T11907] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1162.283727][T11928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.316357][T11932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.326917][T11928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.338214][T11932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.363615][T11927] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1162.558520][T11957] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1162.577269][T11957] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1162.585685][T11957] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1162.592797][T11957] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.10975: Failed to acquire dquot type 0 [ 1162.605351][T11957] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.10975: Failed to acquire dquot type 0 [ 1162.616904][T11957] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.10975: Freeing blocks not in datazone - block = 0, count = 4096 [ 1162.630647][T11957] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.10975: Failed to acquire dquot type 0 [ 1162.645188][T11957] EXT4-fs (loop3): 1 orphan inode deleted [ 1162.754869][T11962] netlink: 272 bytes leftover after parsing attributes in process `syz.2.10977'. [ 1162.847620][T11971] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10979'. [ 1162.858114][T11971] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1162.868340][T11966] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(15) [ 1162.875328][T11966] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1162.883076][T11966] vhci_hcd vhci_hcd.0: Device attached [ 1162.899947][T11973] vhci_hcd: connection closed [ 1162.902749][ T2833] vhci_hcd vhci_hcd.2: stop threads [ 1162.912906][ T2833] vhci_hcd vhci_hcd.2: release socket [ 1162.918396][ T2833] vhci_hcd vhci_hcd.2: disconnect device [ 1162.959368][T11980] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1162.993006][T11983] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1163.013757][T11983] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.10984: inode has both inline data and extents flags [ 1163.034913][T11983] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.10984: couldn't read orphan inode 15 (err -117) [ 1163.335854][T11998] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10988'. [ 1163.378143][T12000] netlink: 272 bytes leftover after parsing attributes in process `syz.3.10990'. [ 1163.429549][T11993] IPv6: Can't replace route, no match found [ 1163.594150][T12008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.616334][T12008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1164.168491][T12037] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1164.198279][T12036] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(15) [ 1164.204944][T12036] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1164.212645][T12036] vhci_hcd vhci_hcd.0: Device attached [ 1164.319430][T12040] vhci_hcd: connection closed [ 1164.320072][ T2829] vhci_hcd vhci_hcd.4: stop threads [ 1164.330033][ T2829] vhci_hcd vhci_hcd.4: release socket [ 1164.335494][ T2829] vhci_hcd vhci_hcd.4: disconnect device [ 1166.022491][T12059] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1166.048790][ T29] kauditd_printk_skb: 1342 callbacks suppressed [ 1166.048887][ T29] audit: type=1400 audit(1767602450.666:117328): avc: denied { write } for pid=12056 comm="syz.0.11009" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1166.076303][ T29] audit: type=1400 audit(1767602450.666:117329): avc: denied { create } for pid=12056 comm="syz.0.11009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1166.096852][ T29] audit: type=1400 audit(1767602450.666:117330): avc: denied { write } for pid=12056 comm="syz.0.11009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1166.117306][ T29] audit: type=1400 audit(1767602450.686:117331): avc: denied { create } for pid=12056 comm="syz.0.11009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1166.301018][ T29] audit: type=1400 audit(1767602450.936:117332): avc: denied { create } for pid=12060 comm="syz.2.11011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1166.321230][ T29] audit: type=1400 audit(1767602450.936:117333): avc: denied { connect } for pid=12060 comm="syz.2.11011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1166.389400][T12070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1166.411734][T12065] __nla_validate_parse: 2 callbacks suppressed [ 1166.411749][T12065] netlink: 272 bytes leftover after parsing attributes in process `syz.5.11012'. [ 1166.435297][ T29] audit: type=1400 audit(1767602451.066:117334): avc: denied { create } for pid=12071 comm="syz.0.11015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1166.446778][T12070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.470459][T12072] set_capacity_and_notify: 4 callbacks suppressed [ 1166.470476][T12072] loop0: detected capacity change from 0 to 2048 [ 1166.545966][T12078] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 1166.593998][T17278] loop0: unable to read partition table [ 1166.619294][T17278] loop0: partition table beyond EOD, truncated [ 1166.659803][ T29] audit: type=1400 audit(1767602451.306:117335): avc: denied { read append } for pid=12076 comm="syz.4.11017" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1166.666636][T12072] loop0: unable to read partition table [ 1166.684075][ T29] audit: type=1400 audit(1767602451.306:117336): avc: denied { ioctl open } for pid=12076 comm="syz.4.11017" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1166.715240][T12085] random: crng reseeded on system resumption [ 1166.726356][T12072] loop0: partition table beyond EOD, truncated [ 1166.732594][T12072] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 1166.848503][T12092] loop0: detected capacity change from 0 to 512 [ 1166.859392][ T29] audit: type=1400 audit(1767602451.356:117337): avc: denied { ioctl } for pid=12071 comm="syz.0.11015" path="socket:[157082]" dev="sockfs" ino=157082 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1166.884696][T12093] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11018'. [ 1166.922491][T12092] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1166.952069][T12092] EXT4-fs (loop0): mount failed [ 1167.060229][T12102] loop4: detected capacity change from 0 to 2048 [ 1167.130664][T17278] loop4: unable to read partition table [ 1167.136509][T17278] loop4: partition table beyond EOD, truncated [ 1167.145614][T12108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11022'. [ 1167.168094][T12109] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11023'. [ 1167.192881][T12102] loop4: unable to read partition table [ 1167.212428][T12109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11023'. [ 1167.225433][T12102] loop4: partition table beyond EOD, truncated [ 1167.231664][T12102] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 1167.272004][T12092] loop0: detected capacity change from 0 to 8192 [ 1167.279272][T12106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11022'. [ 1167.297437][T12092] vfat: Unknown parameter '¼ÕYÒó>9x´rxðh¥íö;ÿ*dåé±èù7©[ù5KñƒïDü¤p:nswoc¹V«nçûó­úÖ|swïÞz}y­ºVݬT–—Þ¸ÿzåÒÚúR}"ßúòÇÜÿÆÏÒjÍäGzÛq™:M/ÅIÝŒˆï]E°¸‘·gbÔá‰$ñ|D¼œÝÿ³q#ûm' [ 1167.336156][ T3004] loop4: unable to read partition table [ 1167.344882][T12102] serio: Serial port ttyS3 [ 1167.355567][ T3004] loop4: partition table beyond EOD, truncated [ 1167.441395][T12120] netlink: 272 bytes leftover after parsing attributes in process `syz.2.11027'. [ 1167.873997][T12141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1167.915061][T12141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1168.362973][T12152] loop5: detected capacity change from 0 to 512 [ 1168.371182][T12152] EXT4-fs: Ignoring removed i_version option [ 1168.381690][T12152] EXT4-fs mount: 7 callbacks suppressed [ 1168.381704][T12152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1168.515998][T12157] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11037'. [ 1168.587248][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11037'. [ 1168.645561][ T2160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1168.728068][T12169] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1168.880798][T12174] loop4: detected capacity change from 0 to 1024 [ 1168.938540][T12174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1169.070426][T12189] loop5: detected capacity change from 0 to 512 [ 1169.097097][T12189] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1169.118522][T12190] loop2: detected capacity change from 0 to 1024 [ 1169.137791][T12190] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1169.155100][T12189] ext4 filesystem being mounted at /535/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1169.387190][ T2160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1169.817527][T12207] FAULT_INJECTION: forcing a failure. [ 1169.817527][T12207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1169.830966][T12207] CPU: 1 UID: 0 PID: 12207 Comm: syz.0.11052 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1169.831045][T12207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1169.831060][T12207] Call Trace: [ 1169.831074][T12207] [ 1169.831083][T12207] __dump_stack+0x1d/0x30 [ 1169.831107][T12207] dump_stack_lvl+0x95/0xd0 [ 1169.831127][T12207] dump_stack+0x15/0x1b [ 1169.831144][T12207] should_fail_ex+0x265/0x280 [ 1169.831187][T12207] should_fail+0xb/0x20 [ 1169.831210][T12207] should_fail_usercopy+0x1a/0x20 [ 1169.831251][T12207] _copy_to_user+0x20/0xa0 [ 1169.831285][T12207] simple_read_from_buffer+0xb5/0x130 [ 1169.831313][T12207] proc_fail_nth_read+0x10e/0x150 [ 1169.831417][T12207] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1169.831498][T12207] vfs_read+0x1a8/0x770 [ 1169.831516][T12207] ? __rcu_read_unlock+0x4f/0x70 [ 1169.831539][T12207] ? __fget_files+0x184/0x1c0 [ 1169.831562][T12207] ? mutex_lock+0x58/0x90 [ 1169.831652][T12207] ksys_read+0xda/0x1a0 [ 1169.831677][T12207] __x64_sys_read+0x40/0x50 [ 1169.831701][T12207] x64_sys_call+0x2889/0x3000 [ 1169.831811][T12207] do_syscall_64+0xca/0x2b0 [ 1169.831847][T12207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.831886][T12207] RIP: 0033:0x7f4f753be15c [ 1169.831905][T12207] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1169.831949][T12207] RSP: 002b:00007f4f73e27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1169.831970][T12207] RAX: ffffffffffffffda RBX: 00007f4f75615fa0 RCX: 00007f4f753be15c [ 1169.831982][T12207] RDX: 000000000000000f RSI: 00007f4f73e270a0 RDI: 0000000000000009 [ 1169.831993][T12207] RBP: 00007f4f73e27090 R08: 0000000000000000 R09: 0000000000000000 [ 1169.832005][T12207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1169.832017][T12207] R13: 00007f4f75616038 R14: 00007f4f75615fa0 R15: 00007ffd224eff98 [ 1169.832037][T12207] [ 1170.042794][T12208] loop5: detected capacity change from 0 to 512 [ 1170.055940][T12208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1170.068460][T12208] ext4 filesystem being mounted at /538/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1170.139809][ T2160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.202239][T12213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1170.220403][T12213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1170.222980][T12212] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1170.305824][T12216] loop0: detected capacity change from 0 to 512 [ 1170.322700][T12216] EXT4-fs: Ignoring removed i_version option [ 1170.348577][T12216] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1170.408005][ T4696] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.466062][ T5554] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.559483][T12222] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1170.596354][T12219] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 1170.596438][ T4145] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.603044][T12219] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1170.603460][T12219] vhci_hcd vhci_hcd.0: Device attached [ 1170.645590][T12223] vhci_hcd: connection closed [ 1170.645823][ T2833] vhci_hcd vhci_hcd.4: stop threads [ 1170.655878][ T2833] vhci_hcd vhci_hcd.4: release socket [ 1170.661323][ T2833] vhci_hcd vhci_hcd.4: disconnect device [ 1170.708008][T12226] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1170.746691][T12226] EXT4-fs (loop2): mount failed [ 1170.842811][T12226] vfat: Unknown parameter '¼ÕYÒó>9x´rxðh¥íö;ÿ*dåé±èù7©[ù5KñƒïDü¤p:nswoc¹V«nçûó­úÖ|swïÞz}y­ºVݬT–—Þ¸ÿzåÒÚúR}"ßúòÇÜÿÆÏÒjÍäGzÛq™:M/ÅIÝŒˆï]E°¸‘·gbÔá‰$ñ|D¼œÝÿ³q#ûm' [ 1171.008255][T12221] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1171.030727][T12221] ext4 filesystem being mounted at /355/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1171.062531][ T29] kauditd_printk_skb: 366 callbacks suppressed [ 1171.062548][ T29] audit: type=1326 audit(1767602455.705:117702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12229 comm="syz.5.11059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcad6a465e7 code=0x7ffc0000 [ 1171.120417][ T29] audit: type=1326 audit(1767602455.735:117703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12229 comm="syz.5.11059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcad69eb829 code=0x7ffc0000 [ 1171.144259][ T29] audit: type=1326 audit(1767602455.735:117704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12229 comm="syz.5.11059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcad6a465e7 code=0x7ffc0000 [ 1171.168166][ T29] audit: type=1326 audit(1767602455.735:117705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12229 comm="syz.5.11059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcad69eb829 code=0x7ffc0000 [ 1171.192116][ T29] audit: type=1326 audit(1767602455.735:117706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12229 comm="syz.5.11059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fcad6a4f749 code=0x7ffc0000 [ 1171.216276][ T29] audit: type=1326 audit(1767602455.745:117707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12229 comm="syz.5.11059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcad6a465e7 code=0x7ffc0000 [ 1171.240245][ T29] audit: type=1326 audit(1767602455.745:117708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12229 comm="syz.5.11059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcad69eb829 code=0x7ffc0000 [ 1171.264099][ T29] audit: type=1326 audit(1767602455.745:117709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12229 comm="syz.5.11059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fcad6a4f749 code=0x7ffc0000 [ 1171.288143][ T29] audit: type=1326 audit(1767602455.755:117710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12229 comm="syz.5.11059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcad6a465e7 code=0x7ffc0000 [ 1171.311937][ T29] audit: type=1326 audit(1767602455.755:117711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12229 comm="syz.5.11059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcad69eb829 code=0x7ffc0000 [ 1171.362989][ T5554] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1171.424653][T12250] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1171.443872][T12250] EXT4-fs (loop0): 1 orphan inode deleted [ 1171.449707][T12250] EXT4-fs (loop0): 1 truncate cleaned up [ 1171.473162][T12250] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1171.531052][ T5554] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1171.571634][T12253] set_capacity_and_notify: 4 callbacks suppressed [ 1171.571744][T12253] loop4: detected capacity change from 0 to 512 [ 1171.713872][T12253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1171.740230][T12260] __nla_validate_parse: 4 callbacks suppressed [ 1171.740248][T12260] netlink: 272 bytes leftover after parsing attributes in process `syz.3.11068'. [ 1171.750604][T12253] ext4 filesystem being mounted at /413/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1171.832227][T12266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11066'. [ 1171.877051][T12266] loop0: detected capacity change from 0 to 1024 [ 1171.946033][T12273] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11071'. [ 1171.984507][T12273] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1172.042418][T12266] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1172.168099][T12281] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1172.272593][ T4696] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1172.601762][T12288] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11075'. [ 1172.663236][T12289] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1172.724420][T12287] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 1172.731165][T12287] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1172.738954][T12287] vhci_hcd vhci_hcd.0: Device attached [ 1172.882357][T12290] vhci_hcd: connection closed [ 1172.882470][ T2827] vhci_hcd vhci_hcd.4: stop threads [ 1172.892571][ T2827] vhci_hcd vhci_hcd.4: release socket [ 1172.898013][ T2827] vhci_hcd vhci_hcd.4: disconnect device [ 1172.916963][T15214] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1173.107084][T12296] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11077'. [ 1173.137213][T12295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11077'. [ 1173.238577][T12300] netlink: 272 bytes leftover after parsing attributes in process `syz.3.11079'. [ 1173.349976][ T5554] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1173.452797][T12304] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1173.566112][T12298] loop2: detected capacity change from 0 to 512 [ 1173.590336][T12313] loop0: detected capacity change from 0 to 128 [ 1173.677178][T12298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1173.713135][T12298] ext4 filesystem being mounted at /428/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1173.727836][T12319] forcing mempool usage for bio_alloc_bioset+0x449/0xa50 [ 1173.756899][T12319] syz.0.11085: attempt to access beyond end of device [ 1173.756899][T12319] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 1173.827029][T12319] syz.0.11085: attempt to access beyond end of device [ 1173.827029][T12319] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1173.864167][T12319] syz.0.11085: attempt to access beyond end of device [ 1173.864167][T12319] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 1173.907937][T12319] syz.0.11085: attempt to access beyond end of device [ 1173.907937][T12319] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 1173.941898][T12319] syz.0.11085: attempt to access beyond end of device [ 1173.941898][T12319] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 1173.973603][ T4145] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1173.979707][T12319] syz.0.11085: attempt to access beyond end of device [ 1173.979707][T12319] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 1174.002171][T12330] netlink: 272 bytes leftover after parsing attributes in process `syz.5.11090'. [ 1174.014229][T12319] syz.0.11085: attempt to access beyond end of device [ 1174.014229][T12319] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 1174.049183][T12319] syz.0.11085: attempt to access beyond end of device [ 1174.049183][T12319] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 1174.111799][T12319] syz.0.11085: attempt to access beyond end of device [ 1174.111799][T12319] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 1174.135754][T12319] syz.0.11085: attempt to access beyond end of device [ 1174.135754][T12319] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 1174.285685][T12339] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1174.307340][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11091'. [ 1174.352589][T12342] loop2: detected capacity change from 0 to 1024 [ 1174.474064][T12342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1174.585593][T12355] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1174.692330][T12356] loop4: detected capacity change from 0 to 512 [ 1174.737445][T12356] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1174.815030][T12356] EXT4-fs (loop4): 1 orphan inode deleted [ 1174.820879][T12356] EXT4-fs (loop4): 1 truncate cleaned up [ 1174.857142][T12356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1174.895874][T12362] loop0: detected capacity change from 0 to 512 [ 1174.935911][T12362] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1174.982655][T12362] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.11101: invalid indirect mapped block 4294967295 (level 1) [ 1175.012395][T12362] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.11101: invalid indirect mapped block 4294967295 (level 1) [ 1175.028157][T12362] EXT4-fs (loop0): 2 truncates cleaned up [ 1175.036879][T12362] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1175.133739][ T4696] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1175.202742][ T5554] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1175.290596][T12388] loop4: detected capacity change from 0 to 512 [ 1175.341696][T12388] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1175.420677][T12388] EXT4-fs (loop4): mount failed [ 1175.502116][T12409] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1175.539203][T12413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11107'. [ 1175.561739][T12388] loop4: detected capacity change from 0 to 8192 [ 1175.588774][T12388] vfat: Unknown parameter '¼ÕYÒó>9x´rxðh¥íö;ÿ*dåé±èù7©[ù5KñƒïDü¤p:nswoc¹V«nçûó­úÖ|swïÞz}y­ºVݬT–—Þ¸ÿzåÒÚúR}"ßúòÇÜÿÆÏÒjÍäGzÛq™:M/ÅIÝŒˆï]E°¸‘·gbÔá‰$ñ|D¼œÝÿ³q#ûm' [ 1175.681409][T12418] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1175.711783][T12415] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(17) [ 1175.718446][T12415] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1175.726184][T12415] vhci_hcd vhci_hcd.0: Device attached [ 1175.777549][T12419] vhci_hcd: connection closed [ 1175.777829][ T2821] vhci_hcd vhci_hcd.0: stop threads [ 1175.787838][ T2821] vhci_hcd vhci_hcd.0: release socket [ 1175.793269][ T2821] vhci_hcd vhci_hcd.0: disconnect device [ 1175.846321][T12423] loop4: detected capacity change from 0 to 512 [ 1175.864682][T12423] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1175.885830][ T4145] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1175.897172][T12423] EXT4-fs (loop4): 1 orphan inode deleted [ 1175.903197][T12423] EXT4-fs (loop4): 1 truncate cleaned up [ 1175.933266][T12423] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1175.967599][ T4696] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1175.993661][T12426] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1176.015467][T12426] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 1176.022154][T12426] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1176.023938][T12428] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1176.029967][T12426] vhci_hcd vhci_hcd.0: Device attached [ 1176.059648][T12428] EXT4-fs (loop5): 1 orphan inode deleted [ 1176.065438][T12428] EXT4-fs (loop5): 1 truncate cleaned up [ 1176.071315][T12431] vhci_hcd: connection closed [ 1176.071528][ T2830] vhci_hcd vhci_hcd.2: stop threads [ 1176.071551][ T29] kauditd_printk_skb: 935 callbacks suppressed [ 1176.071660][ T29] audit: type=1326 audit(1767602460.714:118646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12425 comm="syz.2.11112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2353cdf749 code=0x7ffc0000 [ 1176.076272][ T2830] vhci_hcd vhci_hcd.2: release socket [ 1176.082579][T12428] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1176.087675][ T2830] vhci_hcd vhci_hcd.2: disconnect device [ 1176.134307][ T29] audit: type=1400 audit(1767602460.774:118647): avc: denied { search } for pid=12430 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1176.170918][ T29] audit: type=1400 audit(1767602460.814:118648): avc: denied { mount } for pid=12427 comm="syz.5.11114" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1176.193002][ T29] audit: type=1326 audit(1767602460.814:118649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12427 comm="syz.5.11114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcad6a4df90 code=0x7ffc0000 [ 1176.217058][ T29] audit: type=1326 audit(1767602460.814:118650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12427 comm="syz.5.11114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fcad6a4e497 code=0x7ffc0000 [ 1176.240796][ T29] audit: type=1326 audit(1767602460.814:118651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12427 comm="syz.5.11114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcad6a4df90 code=0x7ffc0000 [ 1176.264692][ T29] audit: type=1326 audit(1767602460.814:118652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12427 comm="syz.5.11114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad6a4f749 code=0x7ffc0000 [ 1176.288684][ T29] audit: type=1326 audit(1767602460.814:118653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12427 comm="syz.5.11114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad6a4f749 code=0x7ffc0000 [ 1176.312530][ T29] audit: type=1326 audit(1767602460.814:118654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12427 comm="syz.5.11114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad6a4f749 code=0x7ffc0000 [ 1176.336656][ T29] audit: type=1326 audit(1767602460.814:118655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12427 comm="syz.5.11114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fcad6a4f749 code=0x7ffc0000 [ 1176.459260][T12437] random: crng reseeded on system resumption [ 1176.471233][ T2160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1176.534189][T12448] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1176.574783][T12468] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1176.598088][T12458] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(14) [ 1176.604759][T12458] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1176.612519][T12458] vhci_hcd vhci_hcd.0: Device attached [ 1176.626863][T12471] vhci_hcd: connection closed [ 1176.627593][ T2830] vhci_hcd vhci_hcd.5: stop threads [ 1176.637734][ T2830] vhci_hcd vhci_hcd.5: release socket [ 1176.643278][ T2830] vhci_hcd vhci_hcd.5: disconnect device [ 1176.908493][T12498] __nla_validate_parse: 7 callbacks suppressed [ 1176.908514][T12498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11125'. [ 1176.974502][T12504] set_capacity_and_notify: 1 callbacks suppressed [ 1176.974517][T12504] loop4: detected capacity change from 0 to 512 [ 1176.993500][T12504] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1177.038944][T12504] EXT4-fs (loop4): 1 orphan inode deleted [ 1177.044768][T12504] EXT4-fs (loop4): 1 truncate cleaned up [ 1177.078437][T12504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1177.161067][ T4696] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1177.645173][T12554] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11134'. [ 1177.900463][T12551] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11135'. [ 1177.911455][T12551] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1177.930436][T12551] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(17) [ 1177.937121][T12551] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1177.944830][T12551] vhci_hcd vhci_hcd.0: Device attached [ 1177.965118][T12564] vhci_hcd: connection closed [ 1177.965446][ T2821] vhci_hcd vhci_hcd.5: stop threads [ 1177.975427][ T2821] vhci_hcd vhci_hcd.5: release socket [ 1177.980916][ T2821] vhci_hcd vhci_hcd.5: disconnect device [ 1177.992706][T12566] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11138'. [ 1178.002692][T12566] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1178.027237][T12566] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 1178.033946][T12566] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1178.041723][T12566] vhci_hcd vhci_hcd.0: Device attached [ 1178.266307][T12567] vhci_hcd: connection closed [ 1178.266650][ T2820] vhci_hcd vhci_hcd.4: stop threads [ 1178.276721][ T2820] vhci_hcd vhci_hcd.4: release socket [ 1178.282202][ T2820] vhci_hcd vhci_hcd.4: disconnect device [ 1178.317947][T15214] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1178.601465][T12578] loop2: detected capacity change from 0 to 512 [ 1178.614096][T12578] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1178.682940][T12578] EXT4-fs (loop2): 1 orphan inode deleted [ 1178.688913][T12578] EXT4-fs (loop2): 1 truncate cleaned up [ 1178.695157][T12578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1178.831467][ T4145] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1178.911873][T12600] loop2: detected capacity change from 0 to 2048 [ 1178.939442][T12603] loop5: detected capacity change from 0 to 2048 [ 1178.996189][T12600] loop2: unable to read partition table [ 1179.029008][T17278] loop5: unable to read partition table [ 1179.035071][T12600] loop2: partition table beyond EOD, truncated [ 1179.041359][T12600] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 1179.060564][T17278] loop5: partition table beyond EOD, truncated [ 1179.150855][T12603] loop5: unable to read partition table [ 1179.151086][ T3004] loop2: unable to read partition table [ 1179.174366][T12620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1179.181144][ T3004] loop2: partition table beyond EOD, truncated [ 1179.198749][T12603] loop5: partition table beyond EOD, truncated [ 1179.204991][T12603] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1179.233140][T12620] bond1: (slave veth13): Enslaving as an active interface with an up link [ 1179.276404][T12627] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1179.289628][T12630] FAULT_INJECTION: forcing a failure. [ 1179.289628][T12630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1179.302850][T12630] CPU: 0 UID: 0 PID: 12630 Comm: syz.2.11153 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1179.302938][T12630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1179.302955][T12630] Call Trace: [ 1179.303015][T12630] [ 1179.303022][T12630] __dump_stack+0x1d/0x30 [ 1179.303046][T12630] dump_stack_lvl+0x95/0xd0 [ 1179.303067][T12630] dump_stack+0x15/0x1b [ 1179.303090][T12630] should_fail_ex+0x265/0x280 [ 1179.303180][T12630] should_fail+0xb/0x20 [ 1179.303199][T12630] should_fail_usercopy+0x1a/0x20 [ 1179.303288][T12630] _copy_from_user+0x1c/0xb0 [ 1179.303322][T12630] __sys_bpf+0x183/0x7c0 [ 1179.303413][T12630] __x64_sys_bpf+0x41/0x50 [ 1179.303451][T12630] x64_sys_call+0x28e1/0x3000 [ 1179.303502][T12630] do_syscall_64+0xca/0x2b0 [ 1179.303544][T12630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.303570][T12630] RIP: 0033:0x7f2353cdf749 [ 1179.303585][T12630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1179.303680][T12630] RSP: 002b:00007f2352747038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1179.303704][T12630] RAX: ffffffffffffffda RBX: 00007f2353f35fa0 RCX: 00007f2353cdf749 [ 1179.303720][T12630] RDX: 0000000000000020 RSI: 0000200000000600 RDI: 0000000000000002 [ 1179.303737][T12630] RBP: 00007f2352747090 R08: 0000000000000000 R09: 0000000000000000 [ 1179.303754][T12630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1179.303770][T12630] R13: 00007f2353f36038 R14: 00007f2353f35fa0 R15: 00007ffd6a0cca28 [ 1179.303805][T12630] [ 1179.386413][T12626] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1179.497606][T12620] bond1 (unregistering): (slave veth13): Releasing backup interface [ 1179.512667][T12620] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 1179.535236][T12620] bond1 (unregistering): Released all slaves [ 1179.573002][ T3004] loop5: unable to read partition table [ 1179.578611][T12639] loop4: detected capacity change from 0 to 512 [ 1179.580740][ T3004] loop5: partition table beyond EOD, truncated [ 1179.614883][T12641] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 1179.654865][T12639] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1179.687970][T12645] random: crng reseeded on system resumption [ 1179.703054][T12647] loop5: detected capacity change from 0 to 512 [ 1179.738367][T12639] ext4 filesystem being mounted at /434/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1179.763954][T12647] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1179.806086][T12647] EXT4-fs (loop5): 1 orphan inode deleted [ 1179.811899][T12647] EXT4-fs (loop5): 1 truncate cleaned up [ 1179.896818][T12647] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1179.910027][ T4696] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1179.924868][T12652] loop2: detected capacity change from 0 to 512 [ 1179.945656][ T2160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1179.959956][T12652] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1179.983569][T12655] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1180.009765][T12652] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.11160: invalid indirect mapped block 4294967295 (level 1) [ 1180.037819][T12652] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.11160: invalid indirect mapped block 4294967295 (level 1) [ 1180.069356][T12652] EXT4-fs (loop2): 2 truncates cleaned up [ 1180.078031][T12652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1180.151085][T12661] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 1180.249512][T12665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11165'. [ 1180.258657][T12674] random: crng reseeded on system resumption [ 1180.436864][T12687] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11172'. [ 1180.456273][T12683] random: crng reseeded on system resumption [ 1180.528820][T12689] loop5: detected capacity change from 0 to 512 [ 1180.562199][T12689] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1180.591755][T12689] EXT4-fs (loop5): mount failed [ 1180.659433][T12695] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1180.739861][T12702] loop4: detected capacity change from 0 to 512 [ 1180.760770][T12702] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1180.776259][T12702] EXT4-fs (loop4): mount failed [ 1180.820617][ T4145] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1180.859676][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11174'. [ 1180.898352][T12706] loop5: detected capacity change from 0 to 8192 [ 1180.971887][T12702] vfat: Unknown parameter '¼ÕYÒó>9x´rxðh¥íö;ÿ*dåé±èù7©[ù5KñƒïDü¤p:nswoc¹V«nçûó­úÖ|swïÞz}y­ºVݬT–—Þ¸ÿzåÒÚúR}"ßúòÇÜÿÆÏÒjÍäGzÛq™:M/ÅIÝŒˆï]E°¸‘·gbÔá‰$ñ|D¼œÝÿ³q#ûm' [ 1181.108581][ T29] kauditd_printk_skb: 788 callbacks suppressed [ 1181.108599][ T29] audit: type=1400 audit(1767602465.742:119442): avc: denied { unmount } for pid=2160 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1182.186855][ T29] audit: type=1326 audit(1767602466.132:119443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12715 comm="syz.4.11181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536094f749 code=0x7ffc0000 [ 1182.210909][ T29] audit: type=1326 audit(1767602466.132:119444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12715 comm="syz.4.11181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536094f749 code=0x7ffc0000 [ 1182.234697][ T29] audit: type=1326 audit(1767602466.132:119445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12715 comm="syz.4.11181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536094f749 code=0x7ffc0000 [ 1182.258563][ T29] audit: type=1326 audit(1767602466.132:119446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12715 comm="syz.4.11181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f536094f749 code=0x7ffc0000 [ 1182.282254][ T29] audit: type=1326 audit(1767602466.132:119447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12715 comm="syz.4.11181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536094f749 code=0x7ffc0000 [ 1182.306059][ T29] audit: type=1326 audit(1767602466.132:119448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12715 comm="syz.4.11181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536094f749 code=0x7ffc0000 [ 1182.329938][ T29] audit: type=1326 audit(1767602466.132:119449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12715 comm="syz.4.11181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536094f749 code=0x7ffc0000 [ 1182.353857][ T29] audit: type=1326 audit(1767602466.132:119450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12715 comm="syz.4.11181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536094f749 code=0x7ffc0000 [ 1182.377613][ T29] audit: type=1326 audit(1767602466.132:119451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12715 comm="syz.4.11181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f536094f749 code=0x7ffc0000 [ 1183.240296][T17275] loop2: unable to read partition table [ 1183.246024][T17275] loop2: partition table beyond EOD, truncated [ 1183.315678][T12720] set_capacity_and_notify: 2 callbacks suppressed [ 1183.315698][T12720] loop4: detected capacity change from 0 to 512 [ 1183.397840][T12720] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1183.514724][T12720] EXT4-fs (loop4): 1 orphan inode deleted [ 1183.520577][T12720] EXT4-fs (loop4): 1 truncate cleaned up [ 1183.544360][T12720] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1183.668884][T12743] loop0: detected capacity change from 0 to 512 [ 1183.717109][T12743] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1183.774312][T12743] ext4 filesystem being mounted at /380/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1183.859994][T12734] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1183.967030][ T4696] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1184.008626][T12758] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1184.060411][ T5554] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1184.145344][T12765] loop2: detected capacity change from 0 to 512 [ 1184.172067][T12765] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1184.211424][T12765] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.11189: invalid indirect mapped block 4294967295 (level 1) [ 1184.260296][T12765] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.11189: invalid indirect mapped block 4294967295 (level 1) [ 1184.297089][T12765] EXT4-fs (loop2): 2 truncates cleaned up [ 1184.304803][T12765] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1184.373888][T12783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1184.393089][T12783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1184.430664][T12785] loop5: detected capacity change from 0 to 512 [ 1184.443437][T12789] loop4: detected capacity change from 0 to 512 [ 1184.456343][T12785] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1184.478424][T12785] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.11190: invalid indirect mapped block 4294967295 (level 1) [ 1184.495207][T12789] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1184.502431][T12785] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.11190: invalid indirect mapped block 4294967295 (level 1) [ 1184.524385][T12789] EXT4-fs (loop4): mount failed [ 1184.533582][T12785] EXT4-fs (loop5): 2 truncates cleaned up [ 1184.540513][T12785] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1184.627070][T12789] loop4: detected capacity change from 0 to 8192 [ 1184.638408][T12789] vfat: Unknown parameter '¼ÕYÒó>9x´rxðh¥íö;ÿ*dåé±èù7©[ù5KñƒïDü¤p:nswoc¹V«nçûó­úÖ|swïÞz}y­ºVݬT–—Þ¸ÿzåÒÚúR}"ßúòÇÜÿÆÏÒjÍäGzÛq™:M/ÅIÝŒˆï]E°¸‘·gbÔá‰$ñ|D¼œÝÿ³q#ûm' [ 1184.952679][T12834] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11197'. [ 1184.954558][ T4145] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1185.004243][T12837] loop0: detected capacity change from 0 to 512 [ 1185.039542][T12837] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1185.077854][T12837] EXT4-fs (loop0): 1 orphan inode deleted [ 1185.083710][T12837] EXT4-fs (loop0): 1 truncate cleaned up [ 1185.099764][T12837] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1185.132660][T12844] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1185.151577][T12846] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 1185.162092][ T5554] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1185.227633][T12848] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1185.302180][ T2160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1185.360846][T12865] loop5: detected capacity change from 0 to 512 [ 1185.367951][T12861] loop4: detected capacity change from 0 to 512 [ 1185.381205][T12865] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1185.397211][T12861] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1185.414383][T12866] loop0: detected capacity change from 0 to 512 [ 1185.430977][T12865] EXT4-fs (loop5): 1 orphan inode deleted [ 1185.436738][T12865] EXT4-fs (loop5): 1 truncate cleaned up [ 1185.446239][T12867] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11211'. [ 1185.457111][T12861] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.11209: invalid indirect mapped block 4294967295 (level 1) [ 1185.473977][T12866] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1185.487799][T12865] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1185.505017][T12866] ext4 filesystem being mounted at /384/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1185.506820][T12861] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.11209: invalid indirect mapped block 4294967295 (level 1) [ 1185.539372][T12861] EXT4-fs (loop4): 2 truncates cleaned up [ 1185.555644][T12861] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1185.571669][ T2160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1185.676655][ T5554] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1185.707592][T12880] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1185.725844][T12882] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1185.880259][T12891] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1185.957019][T12891] EXT4-fs (loop2): 1 orphan inode deleted [ 1185.962881][T12891] EXT4-fs (loop2): 1 truncate cleaned up [ 1185.980224][T12891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1186.168288][ T4145] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1186.375466][ T4696] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1186.759686][T12920] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1186.770279][ T29] kauditd_printk_skb: 667 callbacks suppressed [ 1186.770295][ T29] audit: type=1326 audit(1767602471.391:120118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.5.11229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad6a4f749 code=0x7ffc0000 [ 1186.800417][ T29] audit: type=1326 audit(1767602471.391:120119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.5.11229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcad6a4f749 code=0x7ffc0000 [ 1186.824220][ T29] audit: type=1326 audit(1767602471.391:120120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.5.11229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad6a4f749 code=0x7ffc0000 [ 1186.848373][ T29] audit: type=1326 audit(1767602471.391:120121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.5.11229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcad6a4f749 code=0x7ffc0000 [ 1186.872330][ T29] audit: type=1326 audit(1767602471.391:120122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.5.11229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad6a4f749 code=0x7ffc0000 [ 1186.896187][ T29] audit: type=1326 audit(1767602471.391:120123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.5.11229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fcad6a4f749 code=0x7ffc0000 [ 1186.920098][ T29] audit: type=1326 audit(1767602471.391:120124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.5.11229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad6a4f749 code=0x7ffc0000 [ 1186.943957][ T29] audit: type=1326 audit(1767602471.391:120125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.5.11229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcad6a4f749 code=0x7ffc0000 [ 1186.967816][ T29] audit: type=1326 audit(1767602471.391:120126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.5.11229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad6a4f749 code=0x7ffc0000 [ 1186.991774][ T29] audit: type=1326 audit(1767602471.391:120127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.5.11229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcad6a4f749 code=0x7ffc0000 [ 1187.080373][T12925] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1187.226824][T12942] loop2: unable to read partition table [ 1187.233412][T12942] loop2: partition table beyond EOD, truncated [ 1187.239674][T12942] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 1187.266596][T12952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1187.320862][T12952] ext4 filesystem being mounted at /450/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1187.352335][ T3004] loop2: unable to read partition table [ 1187.364571][ T3004] loop2: partition table beyond EOD, truncated [ 1187.448345][T12958] loop5: unable to read partition table [ 1187.455615][T12958] loop5: partition table beyond EOD, truncated [ 1187.462018][T12958] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1187.505521][ T3004] loop5: unable to read partition table [ 1187.511365][ T3004] loop5: partition table beyond EOD, truncated [ 1187.563367][ T3004] loop5: unable to read partition table [ 1187.569082][ T3004] loop5: partition table beyond EOD, truncated [ 1187.752866][T12974] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1187.903359][ T4696] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1187.978092][T12988] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11247'. [ 1187.997876][T12988] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1188.024683][T12991] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1188.043179][T12991] EXT4-fs (loop4): mount failed [ 1188.120628][T17278] loop4: unable to read partition table [ 1188.126433][T17278] loop4: partition table beyond EOD, truncated [ 1188.160206][T12995] loop4: unable to read partition table [ 1188.166026][T12995] loop4: partition table beyond EOD, truncated [ 1188.172248][T12995] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 1188.186591][T12996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11246'. [ 1188.223462][ T3004] loop4: unable to read partition table [ 1188.236745][ T3004] loop4: partition table beyond EOD, truncated [ 1188.326498][T12998] set_capacity_and_notify: 7 callbacks suppressed [ 1188.326523][T12998] loop4: detected capacity change from 0 to 512 [ 1188.343826][T13000] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1188.359822][T12998] EXT4-fs: Ignoring removed i_version option [ 1188.376261][T12998] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1188.390296][T13000] EXT4-fs (loop2): mount failed [ 1188.478712][T13000] loop2: detected capacity change from 0 to 8192 [ 1188.488739][T13000] vfat: Unknown parameter '¼ÕYÒó>9x´rxðh¥íö;ÿ*dåé±èù7©[ù5KñƒïDü¤p:nswoc¹V«nçûó­úÖ|swïÞz}y­ºVݬT–—Þ¸ÿzåÒÚúR}"ßúòÇÜÿÆÏÒjÍäGzÛq™:M/ÅIÝŒˆï]E°¸‘·gbÔá‰$ñ|D¼œÝÿ³q#ûm' [ 1188.752391][ T4696] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1188.887344][T13018] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11255'. [ 1188.937364][T13018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11255'. [ 1189.456018][T13031] loop5: detected capacity change from 0 to 512 [ 1189.482640][T13031] ext4 filesystem being mounted at /580/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1189.495951][T13033] loop2: detected capacity change from 0 to 512 [ 1189.543257][T13033] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1189.578830][T13033] EXT4-fs (loop2): mount failed [ 1189.645465][T13041] netlink: 272 bytes leftover after parsing attributes in process `syz.4.11266'. [ 1189.731822][T13051] netlink: 272 bytes leftover after parsing attributes in process `syz.2.11270'. [ 1189.824362][T13063] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11273'. [ 1189.842290][T13058] loop2: detected capacity change from 0 to 512 [ 1189.860245][T13058] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1189.862780][T13058] EXT4-fs (loop2): 1 orphan inode deleted [ 1189.862821][T13058] EXT4-fs (loop2): 1 truncate cleaned up [ 1189.892260][T13065] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1189.901625][T13065] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(17) [ 1189.926504][T13065] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1189.934178][T13065] vhci_hcd vhci_hcd.0: Device attached [ 1189.941251][T13067] vhci_hcd: connection closed [ 1189.941598][ T2830] vhci_hcd vhci_hcd.5: stop threads [ 1189.951590][ T2830] vhci_hcd vhci_hcd.5: release socket [ 1189.956998][ T2830] vhci_hcd vhci_hcd.5: disconnect device [ 1190.208292][T13096] loop4: detected capacity change from 0 to 512 [ 1190.236282][T13096] EXT4-fs: Ignoring removed i_version option [ 1191.065826][T13116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.095043][T13116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.779607][ T29] kauditd_printk_skb: 605 callbacks suppressed [ 1191.779622][ T29] audit: type=1326 audit(1767602476.410:120730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13132 comm="syz.0.11292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f753b65e7 code=0x7ffc0000 [ 1191.854485][ T29] audit: type=1326 audit(1767602476.460:120731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13132 comm="syz.0.11292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f7535b829 code=0x7ffc0000 [ 1191.878334][ T29] audit: type=1326 audit(1767602476.460:120732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13132 comm="syz.0.11292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f753b65e7 code=0x7ffc0000 [ 1191.902104][ T29] audit: type=1326 audit(1767602476.460:120733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13132 comm="syz.0.11292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f7535b829 code=0x7ffc0000 [ 1191.925960][ T29] audit: type=1326 audit(1767602476.460:120734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13132 comm="syz.0.11292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f4f753bf749 code=0x7ffc0000 [ 1191.949893][ T29] audit: type=1326 audit(1767602476.460:120735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13132 comm="syz.0.11292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f753b65e7 code=0x7ffc0000 [ 1191.973696][ T29] audit: type=1326 audit(1767602476.460:120736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13132 comm="syz.0.11292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f7535b829 code=0x7ffc0000 [ 1191.997392][ T29] audit: type=1326 audit(1767602476.460:120737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13132 comm="syz.0.11292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f4f753bf749 code=0x7ffc0000 [ 1192.021197][ T29] audit: type=1326 audit(1767602476.470:120738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13132 comm="syz.0.11292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f753b65e7 code=0x7ffc0000 [ 1192.044965][ T29] audit: type=1326 audit(1767602476.470:120739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13132 comm="syz.0.11292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f7535b829 code=0x7ffc0000 [ 1192.358425][T13163] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1192.429390][T13167] loop0: detected capacity change from 0 to 512 [ 1192.457043][T13169] loop5: detected capacity change from 0 to 512 [ 1192.465391][T13167] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1192.504169][T13169] ext4 filesystem being mounted at /589/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1192.532796][T13167] EXT4-fs (loop0): 1 orphan inode deleted [ 1192.538595][T13167] EXT4-fs (loop0): 1 truncate cleaned up [ 1192.643073][T13194] __nla_validate_parse: 1 callbacks suppressed [ 1192.643089][T13194] netlink: 272 bytes leftover after parsing attributes in process `syz.5.11312'. [ 1192.757253][T13205] netlink: 272 bytes leftover after parsing attributes in process `syz.5.11316'. [ 1192.930420][T13230] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11319'. [ 1192.947287][T13220] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1192.960277][T13220] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(17) [ 1192.966966][T13220] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1192.974706][T13220] vhci_hcd vhci_hcd.0: Device attached [ 1192.983275][T13233] vhci_hcd: connection closed [ 1192.984050][T24697] vhci_hcd vhci_hcd.5: stop threads [ 1192.994073][T24697] vhci_hcd vhci_hcd.5: release socket [ 1192.999456][T24697] vhci_hcd vhci_hcd.5: disconnect device [ 1193.115008][T13238] loop2: detected capacity change from 0 to 128 [ 1193.125039][T13238] FAT-fs (loop2): bogus sectors per cluster 0 [ 1193.131367][T13238] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1193.239499][T13245] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11325'. [ 1193.251033][T13245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11325'. [ 1193.393082][T13252] veth0: entered promiscuous mode [ 1193.399209][T13252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11327'. [ 1193.859707][T13275] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1194.047525][T13283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1194.057166][T13283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1194.317400][T13289] loop4: detected capacity change from 0 to 2048 [ 1194.406414][T17278] loop4: unable to read partition table [ 1194.412174][T17278] loop4: partition table beyond EOD, truncated [ 1194.448548][T13289] loop4: unable to read partition table [ 1194.454410][T13289] loop4: partition table beyond EOD, truncated [ 1194.460620][T13289] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 1194.504431][ T3004] loop4: unable to read partition table [ 1194.510183][ T3004] loop4: partition table beyond EOD, truncated [ 1194.566131][T13291] loop4: detected capacity change from 0 to 2048 [ 1194.615359][T13293] loop0: detected capacity change from 0 to 512 [ 1194.635914][T13293] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1194.664716][T17278] loop4: unable to read partition table [ 1194.670730][T13293] EXT4-fs (loop0): mount failed [ 1194.675926][T17278] loop4: partition table beyond EOD, truncated [ 1194.738165][T13291] loop4: unable to read partition table [ 1194.758139][T13291] loop4: partition table beyond EOD, truncated [ 1194.764405][T13291] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 1194.820109][T13302] serio: Serial port ttyS3 [ 1194.823376][ T3004] loop4: unable to read partition table [ 1194.836323][ T3004] loop4: partition table beyond EOD, truncated [ 1194.876204][ T2160] syz_tun (unregistering): left allmulticast mode [ 1195.012257][T13320] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1195.031785][T13316] random: crng reseeded on system resumption [ 1195.101345][ T2821] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.136292][T13338] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1195.163054][T13337] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1195.186118][ T2821] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.225236][T13343] loop0: detected capacity change from 0 to 512 [ 1195.240211][ T2821] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.266192][T13343] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1195.287261][T13343] EXT4-fs (loop0): mount failed [ 1195.308191][ T2821] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.349142][T13343] loop0: detected capacity change from 0 to 8192 [ 1195.356429][T13343] vfat: Unknown parameter '¼ÕYÒó>9x´rxðh¥íö;ÿ*dåé±èù7©[ù5KñƒïDü¤p:nswoc¹V«nçûó­úÖ|swïÞz}y­ºVݬT–—Þ¸ÿzåÒÚúR}"ßúòÇÜÿÆÏÒjÍäGzÛq™:M/ÅIÝŒˆï]E°¸‘·gbÔá‰$ñ|D¼œÝÿ³q#ûm' [ 1195.398963][T13354] loop4: detected capacity change from 0 to 2048 [ 1195.473922][T13358] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1195.537013][ T2821] bridge_slave_1: left allmulticast mode [ 1195.540943][T17275] loop4: unable to read partition table [ 1195.542721][ T2821] bridge_slave_1: left promiscuous mode [ 1195.548595][T17275] loop4: partition table beyond EOD, truncated [ 1195.554484][ T2821] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.570658][ T2821] bridge_slave_0: left allmulticast mode [ 1195.576465][ T2821] bridge_slave_0: left promiscuous mode [ 1195.582327][ T2821] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.619587][T13354] loop4: unable to read partition table [ 1195.625962][T13354] loop4: partition table beyond EOD, truncated [ 1195.632270][T13354] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 1195.646613][T13371] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11367'. [ 1195.666919][T13371] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1195.679458][T13365] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(17) [ 1195.686131][T13365] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1195.693940][T13365] vhci_hcd vhci_hcd.0: Device attached [ 1195.699854][T13374] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11368'. [ 1195.732112][ T2821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1195.742861][ T2821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1195.749007][ T3004] loop4: unable to read partition table [ 1195.757901][ T3004] loop4: partition table beyond EOD, truncated [ 1195.765660][ T2821] bond0 (unregistering): Released all slaves [ 1195.781222][T13305] chnl_net:caif_netlink_parms(): no params data found [ 1195.793511][T13372] vhci_hcd: connection closed [ 1195.794235][ T2830] vhci_hcd vhci_hcd.0: stop threads [ 1195.804242][ T2830] vhci_hcd vhci_hcd.0: release socket [ 1195.809745][ T2830] vhci_hcd vhci_hcd.0: disconnect device [ 1195.835395][ T2821] hsr_slave_0: left promiscuous mode [ 1195.846761][ T2821] veth1_macvtap: left promiscuous mode [ 1195.852294][ T2821] veth0_macvtap: left promiscuous mode [ 1195.860348][ T2821] veth1_vlan: left promiscuous mode [ 1195.865669][ T2821] veth0_vlan: left promiscuous mode [ 1196.029691][ T2821] team0 (unregistering): Port device team_slave_1 removed [ 1196.039625][ T2821] team0 (unregistering): Port device team_slave_0 removed [ 1196.099660][T13387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11373'. [ 1196.122809][T13386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1196.140868][T13386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1196.150063][T13305] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.157216][T13305] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.183966][T13305] bridge_slave_0: entered allmulticast mode [ 1196.190699][T13305] bridge_slave_0: entered promiscuous mode [ 1196.198585][T13305] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.205763][T13305] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.213096][T13305] bridge_slave_1: entered allmulticast mode [ 1196.220098][T13305] bridge_slave_1: entered promiscuous mode [ 1196.251913][T13305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1196.281775][T13305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1196.303130][T13305] team0: Port device team_slave_0 added [ 1196.310696][T13305] team0: Port device team_slave_1 added [ 1196.350329][T13305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1196.357381][T13305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1196.383361][T13305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1196.410343][T13305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1196.417456][T13305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1196.443615][T13305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1196.482945][T13411] random: crng reseeded on system resumption [ 1196.506562][T13305] hsr_slave_0: entered promiscuous mode [ 1196.517563][T13305] hsr_slave_1: entered promiscuous mode [ 1196.524616][T13305] debugfs: 'hsr0' already exists in 'hsr' [ 1196.530410][T13305] Cannot create hsr debugfs directory [ 1197.001248][T13422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1197.029607][T13422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1197.152257][T13386] loop2: detected capacity change from 0 to 32768 [ 1197.188140][ T29] kauditd_printk_skb: 1543 callbacks suppressed [ 1197.188160][ T29] audit: type=1400 audit(1767602481.818:122281): avc: denied { create } for pid=13426 comm="syz.3.11381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1197.297828][T17278] loop2: p1 p3 < > [ 1197.335750][T13386] loop2: p1 p3 < > [ 1197.362553][T13305] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1197.374906][T13305] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1197.493673][T13305] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1197.547452][T13305] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1197.646533][T13305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1197.666014][T13305] 8021q: adding VLAN 0 to HW filter on device team0 [ 1197.677949][ T2827] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.685253][ T2827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1197.710866][T13305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1197.721398][T13305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1197.737342][ T2827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.744450][ T2827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1197.855409][T13305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1198.107256][T13305] veth0_vlan: entered promiscuous mode [ 1198.117893][T13305] veth1_vlan: entered promiscuous mode [ 1198.134461][T13305] veth0_macvtap: entered promiscuous mode [ 1198.142054][T13305] veth1_macvtap: entered promiscuous mode [ 1198.153585][T13305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1198.166162][T13305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1198.180361][ T2827] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.197818][ T2827] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.230031][ T2827] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.273529][ T2827] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.332033][ T29] audit: type=1400 audit(1767602482.098:122282): avc: denied { firmware_load } for pid=13426 comm="syz.3.11381" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1198.357334][ T29] audit: type=1400 audit(1767602482.838:122283): avc: denied { mounton } for pid=13305 comm="syz-executor" path="/root/syzkaller.e1B10d/syz-tmp" dev="sda1" ino=2077 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1198.382075][ T29] audit: type=1400 audit(1767602482.848:122284): avc: denied { mount } for pid=13305 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1198.404463][ T29] audit: type=1400 audit(1767602482.848:122285): avc: denied { mounton } for pid=13305 comm="syz-executor" path="/root/syzkaller.e1B10d/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1198.431500][ T29] audit: type=1400 audit(1767602482.848:122286): avc: denied { mounton } for pid=13305 comm="syz-executor" path="/root/syzkaller.e1B10d/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=161255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1198.459566][ T29] audit: type=1400 audit(1767602482.848:122287): avc: denied { mounton } for pid=13305 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1198.482830][ T29] audit: type=1400 audit(1767602482.848:122288): avc: denied { mount } for pid=13305 comm="syz-executor" name="/" dev="gadgetfs" ino=4643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1198.505888][ T29] audit: type=1326 audit(1767602482.948:122289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13472 comm="syz.5.11383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa946a8f749 code=0x7ffc0000 [ 1198.529723][ T29] audit: type=1326 audit(1767602482.948:122290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13472 comm="syz.5.11383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa946a8f749 code=0x7ffc0000 [ 1198.600876][T13479] loop5: detected capacity change from 0 to 512 [ 1198.608133][T13479] EXT4-fs: Ignoring removed i_version option [ 1198.618531][T13479] EXT4-fs mount: 10 callbacks suppressed [ 1198.618545][T13479] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1198.685053][T13305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1198.935932][T13489] random: crng reseeded on system resumption [ 1198.950801][T13493] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1199.210774][T13503] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11386'. [ 1199.232347][T13503] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1199.245576][T13505] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1199.258987][T13500] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 1199.265672][T13500] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1199.273332][T13500] vhci_hcd vhci_hcd.0: Device attached [ 1199.281034][T13509] vhci_hcd: connection closed [ 1199.281102][ T2827] vhci_hcd vhci_hcd.2: stop threads [ 1199.291311][ T2827] vhci_hcd vhci_hcd.2: release socket [ 1199.296868][ T2827] vhci_hcd vhci_hcd.2: disconnect device [ 1199.343394][T13518] netlink: 'syz.5.11399': attribute type 3 has an invalid length. [ 1199.609822][T13540] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11409'. [ 1200.139110][T13552] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1200.698037][T13566] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11417'. [ 1200.780545][T13571] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1200.834435][T13562] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(17) [ 1200.841142][T13562] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1200.848823][T13562] vhci_hcd vhci_hcd.0: Device attached [ 1200.906764][T13575] loop0: detected capacity change from 0 to 512 [ 1200.931683][T13575] EXT4-fs: Ignoring removed i_version option [ 1200.973077][T13575] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1201.054473][ T3396] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1201.124496][ T3396] usb 9-1: new full-speed USB device number 13 using vhci_hcd [ 1201.149718][ T5554] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1201.296396][T13572] vhci_hcd: connection reset by peer [ 1201.304856][ T2829] vhci_hcd vhci_hcd.4: stop threads [ 1201.310162][ T2829] vhci_hcd vhci_hcd.4: release socket [ 1201.315634][ T2829] vhci_hcd vhci_hcd.4: disconnect device [ 1201.349956][T13586] netlink: 464 bytes leftover after parsing attributes in process `syz.2.11425'. [ 1201.372145][T13590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1201.382514][T13588] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1201.394127][T13586] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1201.402473][T13590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1201.413748][T13585] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(17) [ 1201.420395][T13585] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1201.428075][T13585] vhci_hcd vhci_hcd.0: Device attached [ 1201.504579][T13591] vhci_hcd: connection closed [ 1201.504792][ T2834] vhci_hcd vhci_hcd.2: stop threads [ 1201.514825][ T2834] vhci_hcd vhci_hcd.2: release socket [ 1201.520335][ T2834] vhci_hcd vhci_hcd.2: disconnect device [ 1201.569652][T13594] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1201.890873][T13610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11432'. [ 1201.905280][T13610] loop4: detected capacity change from 0 to 1024 [ 1201.915724][T13611] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11431'. [ 1201.926326][T13610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1201.939982][T13608] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11431'. [ 1201.975763][ T4696] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1202.201316][ T29] kauditd_printk_skb: 709 callbacks suppressed [ 1202.201334][ T29] audit: type=1326 audit(1767602486.827:123000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.5.11436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa946a865e7 code=0x7ffc0000 [ 1202.242779][ T29] audit: type=1326 audit(1767602486.867:123001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.5.11436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa946a2b829 code=0x7ffc0000 [ 1202.266523][ T29] audit: type=1326 audit(1767602486.867:123002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.5.11436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa946a865e7 code=0x7ffc0000 [ 1202.290277][ T29] audit: type=1326 audit(1767602486.867:123003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.5.11436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa946a2b829 code=0x7ffc0000 [ 1202.314043][ T29] audit: type=1326 audit(1767602486.867:123004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.5.11436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fa946a8f749 code=0x7ffc0000 [ 1202.337959][ T29] audit: type=1326 audit(1767602486.867:123005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.5.11436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa946a865e7 code=0x7ffc0000 [ 1202.361803][ T29] audit: type=1326 audit(1767602486.867:123006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.5.11436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa946a2b829 code=0x7ffc0000 [ 1202.385512][ T29] audit: type=1326 audit(1767602486.867:123007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.5.11436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fa946a8f749 code=0x7ffc0000 [ 1202.410312][ T29] audit: type=1326 audit(1767602486.927:123008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.5.11436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa946a865e7 code=0x7ffc0000 [ 1202.434197][ T29] audit: type=1326 audit(1767602486.927:123009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.5.11436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa946a2b829 code=0x7ffc0000 [ 1202.550924][T13634] loop0: detected capacity change from 0 to 128 [ 1202.572732][T13634] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1202.577125][T13637] netlink: 272 bytes leftover after parsing attributes in process `syz.3.11441'. [ 1202.596431][T13634] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11442'. [ 1202.635354][T13642] netlink: 272 bytes leftover after parsing attributes in process `syz.3.11444'. [ 1202.657969][ T2830] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1202.672376][T13644] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1202.986681][T13678] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1203.107944][T13684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1203.115410][T13684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1203.134657][T13684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1203.142290][T13684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1203.811955][T13709] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1204.002597][T13722] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1204.013824][T13722] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(17) [ 1204.020501][T13722] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1204.028223][T13722] vhci_hcd vhci_hcd.0: Device attached [ 1204.035017][T13726] vhci_hcd: connection closed [ 1204.035166][ T2827] vhci_hcd vhci_hcd.2: stop threads [ 1204.045291][ T2827] vhci_hcd vhci_hcd.2: release socket [ 1204.050768][ T2827] vhci_hcd vhci_hcd.2: disconnect device [ 1204.256233][T13738] __nla_validate_parse: 9 callbacks suppressed [ 1204.256247][T13738] netlink: 272 bytes leftover after parsing attributes in process `syz.4.11480'. [ 1204.294269][T13740] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1204.364718][T13742] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11482'. [ 1204.459948][T13745] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11483'. [ 1204.469616][T13745] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1204.479189][T13744] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 1204.485829][T13744] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1204.493749][T13744] vhci_hcd vhci_hcd.0: Device attached [ 1204.502143][T13746] vhci_hcd: connection closed [ 1204.502491][ T2824] vhci_hcd vhci_hcd.4: stop threads [ 1204.512514][ T2824] vhci_hcd vhci_hcd.4: release socket [ 1204.518083][ T2824] vhci_hcd vhci_hcd.4: disconnect device [ 1204.754243][T13755] loop2: detected capacity change from 0 to 512 [ 1204.773394][T13755] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1204.832218][T13755] EXT4-fs (loop2): 1 orphan inode deleted [ 1204.838095][T13755] EXT4-fs (loop2): 1 truncate cleaned up [ 1204.846103][T13755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1204.909816][ T4145] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1204.989045][T13783] netlink: 'syz.5.11493': attribute type 29 has an invalid length. [ 1205.248025][T13818] loop4: detected capacity change from 0 to 512 [ 1205.268983][T13820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1205.279190][T13820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1205.889159][T13830] rdma_op ffff888196b1a180 conn xmit_rdma 0000000000000000 [ 1205.978624][T13818] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1205.993922][T13818] EXT4-fs (loop4): mount failed [ 1206.095960][T13818] loop4: detected capacity change from 0 to 8192 [ 1206.111112][T13818] vfat: Unknown parameter '¼ÕYÒó>9x´rxðh¥íö;ÿ*dåé±èù7©[ù5KñƒïDü¤p:nswoc¹V«nçûó­úÖ|swïÞz}y­ºVݬT–—Þ¸ÿzåÒÚúR}"ßúòÇÜÿÆÏÒjÍäGzÛq™:M/ÅIÝŒˆï]E°¸‘·gbÔá‰$ñ|D¼œÝÿ³q#ûm' [ 1206.136964][T13835] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11506'. [ 1206.209428][T13835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11506'. [ 1206.245945][ T3396] usb 9-1: enqueue for inactive port 0 [ 1206.265827][ T3396] usb 9-1: enqueue for inactive port 0 [ 1206.335604][T13840] random: crng reseeded on system resumption [ 1206.358226][ T3396] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1206.402251][T13845] netlink: 272 bytes leftover after parsing attributes in process `syz.2.11511'. [ 1206.463819][T13848] loop4: detected capacity change from 0 to 512 [ 1206.483942][T13848] EXT4-fs: Ignoring removed i_version option [ 1206.526141][T13848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1206.649737][ T4696] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1207.052299][T13864] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1207.182103][T13869] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11519'. [ 1207.245178][T13870] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11519'. [ 1207.314395][ T29] kauditd_printk_skb: 865 callbacks suppressed [ 1207.314412][ T29] audit: type=1400 audit(1767602491.945:123874): avc: denied { name_bind } for pid=13871 comm="syz.2.11521" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1207.464600][ T29] audit: type=1400 audit(1767602492.095:123875): avc: denied { create } for pid=13873 comm="syz.2.11522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1207.497945][T13874] loop2: detected capacity change from 0 to 2048 [ 1207.511415][ T29] audit: type=1326 audit(1767602492.125:123876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13875 comm="syz.5.11523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa946a8f749 code=0x7ffc0000 [ 1207.535344][ T29] audit: type=1326 audit(1767602492.125:123877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13875 comm="syz.5.11523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa946a8f749 code=0x7ffc0000 [ 1207.559303][ T29] audit: type=1326 audit(1767602492.125:123878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13875 comm="syz.5.11523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fa946a8f749 code=0x7ffc0000 [ 1207.583196][ T29] audit: type=1326 audit(1767602492.125:123879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13875 comm="syz.5.11523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa946a8f749 code=0x7ffc0000 [ 1207.607120][ T29] audit: type=1326 audit(1767602492.125:123880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13875 comm="syz.5.11523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa946a8f749 code=0x7ffc0000 [ 1207.622154][T13876] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1207.704149][T13883] loop4: detected capacity change from 0 to 512 [ 1207.732359][T13874] loop2: unable to read partition table [ 1207.754892][T13887] random: crng reseeded on system resumption [ 1207.761824][T13874] loop2: partition table beyond EOD, truncated [ 1207.768077][T13874] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 1207.787087][T13883] EXT4-fs: Ignoring removed i_version option [ 1207.807193][T13890] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1207.813772][T13890] audit: audit_lost=42 audit_rate_limit=0 audit_backlog_limit=64 [ 1207.821602][T13890] audit: backlog limit exceeded [ 1207.839847][T13883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1207.902353][ T3004] loop2: unable to read partition table [ 1207.908121][ T3004] loop2: partition table beyond EOD, truncated [ 1208.151791][T13910] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11533'. [ 1208.335284][T13910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11533'. [ 1208.348245][T13915] loop2: detected capacity change from 0 to 512 [ 1208.373266][T13893] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1208.392538][T13915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1208.429585][T13915] ext4 filesystem being mounted at /514/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1208.631188][ T4145] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1208.780799][T13931] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1208.812244][ T4696] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1208.959404][T13943] random: crng reseeded on system resumption [ 1209.026887][T13949] loop5: detected capacity change from 0 to 512 [ 1209.111681][T13949] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1209.159641][T13949] EXT4-fs (loop5): mount failed [ 1209.331088][T13957] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1209.558666][T13939] loop2: detected capacity change from 0 to 512 [ 1209.740017][T13939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1209.797820][T13939] ext4 filesystem being mounted at /515/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1210.073631][T13949] loop5: detected capacity change from 0 to 8192 [ 1210.118681][ T4145] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1210.137551][T13949] vfat: Unknown parameter '¼ÕYÒó>9x´rxðh¥íö;ÿ*dåé±èù7©[ù5KñƒïDü¤p:nswoc¹V«nçûó­úÖ|swïÞz}y­ºVݬT–—Þ¸ÿzåÒÚúR}"ßúòÇÜÿÆÏÒjÍäGzÛq™:M/ÅIÝŒˆï]E°¸‘·gbÔá‰$ñ|D¼œÝÿ³q#ûm' [ 1210.195387][T13967] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1210.333320][T13980] loop2: detected capacity change from 0 to 512 [ 1210.366108][T13980] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1210.416591][T13980] EXT4-fs (loop2): 1 orphan inode deleted [ 1210.422418][T13980] EXT4-fs (loop2): 1 truncate cleaned up [ 1210.489341][T13980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1210.587802][ T4145] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1210.622215][T14010] loop5: detected capacity change from 0 to 512 [ 1210.673304][T14010] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1210.763723][T14010] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1210.934912][T14031] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1210.950920][T14031] EXT4-fs (loop2): mount failed [ 1211.170970][T14031] set_capacity_and_notify: 1 callbacks suppressed [ 1211.170987][T14031] loop2: detected capacity change from 0 to 8192 [ 1211.206179][T14031] vfat: Unknown parameter '¼ÕYÒó>9x´rxðh¥íö;ÿ*dåé±èù7©[ù5KñƒïDü¤p:nswoc¹V«nçûó­úÖ|swïÞz}y­ºVݬT–—Þ¸ÿzåÒÚúR}"ßúòÇÜÿÆÏÒjÍäGzÛq™:M/ÅIÝŒˆï]E°¸‘·gbÔá‰$ñ|D¼œÝÿ³q#ûm' [ 1211.358794][T13305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1211.611101][T14065] loop2: detected capacity change from 0 to 512 [ 1211.685500][T14062] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1211.859318][T14065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1211.992503][T14065] ext4 filesystem being mounted at /520/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1212.058163][T14070] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11579'. [ 1212.079105][T14067] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1212.098845][T14067] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(16) [ 1212.105687][T14067] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1212.113592][T14067] vhci_hcd vhci_hcd.0: Device attached [ 1212.198814][ T4145] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1212.238708][T14078] vhci_hcd: connection closed [ 1212.251447][T14081] loop0: detected capacity change from 0 to 512 [ 1212.267704][ T2825] vhci_hcd vhci_hcd.4: stop threads [ 1212.272960][ T2825] vhci_hcd vhci_hcd.4: release socket [ 1212.278517][ T2825] vhci_hcd vhci_hcd.4: disconnect device [ 1212.297214][T14081] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1212.312268][ T7205] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1212.348067][ T29] kauditd_printk_skb: 420 callbacks suppressed [ 1212.348082][ T29] audit: type=1326 audit(1767602496.984:124298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14076 comm="syz.3.11582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff404daf749 code=0x7ffc0000 [ 1212.378688][T14081] EXT4-fs (loop0): mount failed [ 1212.384634][ T29] audit: type=1326 audit(1767602497.014:124299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14076 comm="syz.3.11582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7ff404daf749 code=0x7ffc0000 [ 1212.408606][ T29] audit: type=1326 audit(1767602497.014:124300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14076 comm="syz.3.11582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff404daf749 code=0x7ffc0000 [ 1212.432540][ T29] audit: type=1326 audit(1767602497.014:124301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14076 comm="syz.3.11582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff404daf749 code=0x7ffc0000 [ 1212.456547][ T29] audit: type=1326 audit(1767602497.014:124302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14076 comm="syz.3.11582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff404daf749 code=0x7ffc0000 [ 1212.480416][ T29] audit: type=1326 audit(1767602497.014:124303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14076 comm="syz.3.11582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff404daf749 code=0x7ffc0000 [ 1212.568605][T14081] loop0: detected capacity change from 0 to 8192 [ 1212.575085][ T29] audit: type=1400 audit(1767602497.164:124304): avc: denied { read write } for pid=14087 comm="syz.5.11585" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1212.599723][ T29] audit: type=1400 audit(1767602497.164:124305): avc: denied { open } for pid=14087 comm="syz.5.11585" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1212.625226][ T29] audit: type=1400 audit(1767602497.174:124306): avc: denied { create } for pid=14089 comm="syz.2.11586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1212.645174][ T29] audit: type=1326 audit(1767602497.174:124307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14089 comm="syz.2.11586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2353cdf749 code=0x7ffc0000 [ 1212.675886][T14081] vfat: Unknown parameter '¼ÕYÒó>9x´rxðh¥íö;ÿ*dåé±èù7©[ù5KñƒïDü¤p:nswoc¹V«nçûó­úÖ|swïÞz}y­ºVݬT–—Þ¸ÿzåÒÚúR}"ßúòÇÜÿÆÏÒjÍäGzÛq™:M/ÅIÝŒˆï]E°¸‘·gbÔá‰$ñ|D¼œÝÿ³q#ûm' [ 1212.745076][T14090] loop2: detected capacity change from 0 to 512 [ 1212.779248][T14090] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1212.817068][T14090] EXT4-fs (loop2): 1 orphan inode deleted [ 1212.823234][T14090] EXT4-fs (loop2): 1 truncate cleaned up [ 1212.831722][T14101] loop0: detected capacity change from 0 to 512 [ 1212.839050][T14101] EXT4-fs: Ignoring removed i_version option [ 1212.849771][T14090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1212.882896][T14101] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1212.962496][T14112] random: crng reseeded on system resumption [ 1213.010855][ T4145] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1213.112603][T14128] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11596'. [ 1213.126698][T14128] loop5: detected capacity change from 0 to 1024 [ 1213.143063][ T5554] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1213.143744][T14128] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1213.175933][T13305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1213.262440][T14139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1213.282347][T14139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1213.535479][T14134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11598'. [ 1213.550202][T14134] loop2: detected capacity change from 0 to 1024 [ 1213.569602][T14134] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1213.628324][ T4145] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1213.650607][T14160] netlink: 272 bytes leftover after parsing attributes in process `syz.2.11600'. [ 1213.751853][T14165] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11602'. [ 1213.761894][T14165] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1213.772631][T14164] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(16) [ 1213.779256][T14164] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1213.786941][T14164] vhci_hcd vhci_hcd.0: Device attached [ 1213.793187][T14166] vhci_hcd: connection closed [ 1213.793411][ T2834] vhci_hcd vhci_hcd.2: stop threads [ 1213.803386][ T2834] vhci_hcd vhci_hcd.2: release socket [ 1213.808837][ T2834] vhci_hcd vhci_hcd.2: disconnect device [ 1213.916531][T14173] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1213.998805][T14177] random: crng reseeded on system resumption [ 1214.037501][T14179] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1214.208591][T14186] netlink: 272 bytes leftover after parsing attributes in process `syz.4.11612'. [ 1214.241259][T14171] loop5: detected capacity change from 0 to 512 [ 1214.495097][T14171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1214.636780][T14197] loop4: detected capacity change from 0 to 512 [ 1214.667875][T14171] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1214.703711][T14197] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1214.749554][T14197] EXT4-fs (loop4): 1 orphan inode deleted [ 1214.755362][T14197] EXT4-fs (loop4): 1 truncate cleaned up [ 1214.777754][T14197] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1214.813769][T13305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1214.867752][ T4696] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1214.986423][T14226] random: crng reseeded on system resumption [ 1215.429643][T14238] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1215.476423][T14237] siw: device registration error -23 [ 1215.722340][T14240] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11622'. [ 1215.746023][T14240] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11622'. [ 1215.805035][T14248] netlink: 272 bytes leftover after parsing attributes in process `syz.2.11624'. [ 1216.038002][T14278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11628'. [ 1216.080620][T14282] EXT4-fs: Ignoring removed i_version option [ 1216.104183][T14282] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1216.258895][T13305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1216.443293][T14305] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1217.121096][T14321] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1217.289184][T14333] __nla_validate_parse: 2 callbacks suppressed [ 1217.289203][T14333] netlink: 464 bytes leftover after parsing attributes in process `syz.2.11650'. [ 1217.325070][T14333] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1217.349454][T14327] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(17) [ 1217.356108][T14327] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1217.363810][T14327] vhci_hcd vhci_hcd.0: Device attached [ 1217.371463][ T29] kauditd_printk_skb: 1271 callbacks suppressed [ 1217.371479][ T29] audit: type=1326 audit(1767602502.003:125579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14324 comm="syz.2.11650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2353cde3aa code=0x7ffc0000 [ 1217.391292][T14340] netlink: 272 bytes leftover after parsing attributes in process `syz.5.11656'. [ 1217.403594][T14337] vhci_hcd: connection closed [ 1217.411654][ T2834] vhci_hcd vhci_hcd.2: stop threads [ 1217.421644][ T2834] vhci_hcd vhci_hcd.2: release socket [ 1217.427074][ T2834] vhci_hcd vhci_hcd.2: disconnect device [ 1217.433366][ T29] audit: type=1326 audit(1767602502.033:125580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14324 comm="syz.2.11650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2353cdf749 code=0x7ffc0000 [ 1217.457672][ T29] audit: type=1326 audit(1767602502.033:125581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14324 comm="syz.2.11650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2353cdf749 code=0x7ffc0000 [ 1217.593922][T14323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11649'. [ 1217.613248][ T29] audit: type=1400 audit(1767602502.243:125582): avc: denied { execute } for pid=14346 comm="syz.5.11659" name="file0" dev="tmpfs" ino=314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1217.635887][ T29] audit: type=1400 audit(1767602502.243:125583): avc: denied { execute_no_trans } for pid=14346 comm="syz.5.11659" path="/56/file0" dev="tmpfs" ino=314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1217.665834][T14323] set_capacity_and_notify: 1 callbacks suppressed [ 1217.665855][T14323] loop4: detected capacity change from 0 to 1024 [ 1217.693128][T14323] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1217.767443][ T4696] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1217.896997][ T29] audit: type=1326 audit(1767602502.523:125584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14360 comm="syz.3.11664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff404daf749 code=0x7ffc0000 [ 1217.920972][ T29] audit: type=1326 audit(1767602502.523:125585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14360 comm="syz.3.11664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff404daf749 code=0x7ffc0000 [ 1217.945033][ T29] audit: type=1326 audit(1767602502.523:125586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14360 comm="syz.3.11664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff404daf749 code=0x7ffc0000 [ 1217.968914][ T29] audit: type=1326 audit(1767602502.523:125587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14360 comm="syz.3.11664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff404daf749 code=0x7ffc0000 [ 1217.992967][ T29] audit: type=1326 audit(1767602502.523:125588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14360 comm="syz.3.11664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff404daf749 code=0x7ffc0000 [ 1218.087681][T14369] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11666'. [ 1218.188059][T14380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.206404][T14382] loop0: detected capacity change from 0 to 512 [ 1218.213442][T14380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.222709][T14382] EXT4-fs: Ignoring removed i_version option [ 1218.241633][T14382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1218.288773][ T5554] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1218.326614][T14389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.335624][T14389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.697290][T14395] netlink: 204 bytes leftover after parsing attributes in process `syz.3.11676'. [ 1218.707209][T14395] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1218.754013][T14399] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11679'. [ 1218.772676][T14400] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11678'. [ 1218.782488][T14400] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1218.793227][T14398] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(17) [ 1218.799867][T14398] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1218.807620][T14398] vhci_hcd vhci_hcd.0: Device attached [ 1218.822323][T14401] vhci_hcd: connection closed [ 1218.822873][ T2825] vhci_hcd vhci_hcd.5: stop threads [ 1218.832967][ T2825] vhci_hcd vhci_hcd.5: release socket [ 1218.838367][ T2825] vhci_hcd vhci_hcd.5: disconnect device [ 1218.923233][T14410] loop4: detected capacity change from 0 to 512 [ 1218.934667][T14410] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1218.975017][T14414] loop0: detected capacity change from 0 to 2048 [ 1219.024160][T14410] EXT4-fs (loop4): 1 orphan inode deleted [ 1219.030066][T14410] EXT4-fs (loop4): 1 truncate cleaned up [ 1219.036354][T14410] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1219.070327][T14416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11686'. [ 1219.097838][T17275] loop0: unable to read partition table [ 1219.104961][T17275] loop0: partition table beyond EOD, truncated [ 1219.131309][ T4696] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1219.148511][T14414] loop0: unable to read partition table [ 1219.160803][T14414] loop0: partition table beyond EOD, truncated [ 1219.167213][T14414] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 1219.701785][T14447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11697'. [ 1219.722696][T14447] loop5: detected capacity change from 0 to 1024 [ 1219.752507][T14447] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1219.853509][T13305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1220.019935][T14453] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11698'. [ 1220.250150][T14466] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1220.312438][T14464] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(17) [ 1220.319137][T14464] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1220.326979][T14464] vhci_hcd vhci_hcd.0: Device attached [ 1220.387250][T14468] vhci_hcd: connection closed [ 1220.387433][ T2820] vhci_hcd vhci_hcd.2: stop threads [ 1220.397525][ T2820] vhci_hcd vhci_hcd.2: release socket [ 1220.402967][ T2820] vhci_hcd vhci_hcd.2: disconnect device [ 1221.882104][T14523] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1221.892123][T14517] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(17) [ 1221.898770][T14517] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1221.906472][T14517] vhci_hcd vhci_hcd.0: Device attached [ 1221.915425][T14524] vhci_hcd: connection closed [ 1221.915503][ T2820] vhci_hcd vhci_hcd.2: stop threads [ 1221.925524][ T2820] vhci_hcd vhci_hcd.2: release socket [ 1221.930985][ T2820] vhci_hcd vhci_hcd.2: disconnect device [ 1221.985796][T14532] loop4: detected capacity change from 0 to 512 [ 1222.015772][T14532] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1222.042065][T14535] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1222.064046][T14532] EXT4-fs (loop4): mount failed [ 1222.383267][ T29] kauditd_printk_skb: 584 callbacks suppressed [ 1222.383284][ T29] audit: type=1326 audit(1767602507.011:126172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14502 comm="syz.0.11711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f753b65e7 code=0x7ffc0000 [ 1222.413834][ T29] audit: type=1326 audit(1767602507.041:126173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14502 comm="syz.0.11711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f7535b829 code=0x7ffc0000 [ 1222.437698][ T29] audit: type=1326 audit(1767602507.041:126174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14502 comm="syz.0.11711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f753b65e7 code=0x7ffc0000 [ 1222.461628][ T29] audit: type=1326 audit(1767602507.041:126175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14502 comm="syz.0.11711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f7535b829 code=0x7ffc0000 [ 1222.485432][ T29] audit: type=1326 audit(1767602507.041:126176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14502 comm="syz.0.11711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f4f753bf749 code=0x7ffc0000 [ 1222.510393][ T29] audit: type=1326 audit(1767602507.051:126177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14502 comm="syz.0.11711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f753b65e7 code=0x7ffc0000 [ 1222.534205][ T29] audit: type=1326 audit(1767602507.051:126178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14502 comm="syz.0.11711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f7535b829 code=0x7ffc0000 [ 1222.557919][ T29] audit: type=1326 audit(1767602507.051:126179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14502 comm="syz.0.11711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f4f753bf749 code=0x7ffc0000 [ 1222.581910][ T29] audit: type=1326 audit(1767602507.061:126180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14502 comm="syz.0.11711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f753b65e7 code=0x7ffc0000 [ 1222.605593][ T29] audit: type=1326 audit(1767602507.061:126181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14502 comm="syz.0.11711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f7535b829 code=0x7ffc0000 [ 1222.686890][T14548] loop5: detected capacity change from 0 to 512 [ 1222.819781][T14548] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1222.836787][T14548] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1223.021615][T14572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1223.076034][T14572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1223.201913][T14578] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1223.943842][T14587] __nla_validate_parse: 5 callbacks suppressed [ 1223.943987][T14587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11741'. [ 1224.140740][T13305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1224.294895][T14605] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11748'. [ 1224.325480][T14605] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1224.660727][T14619] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1224.838916][T14632] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11757'. [ 1224.868507][T14629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11757'. [ 1224.904003][T14633] loop0: detected capacity change from 0 to 512 [ 1224.939432][T14633] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1224.965953][T14633] ext4 filesystem being mounted at /475/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1225.125390][T14646] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1225.888830][T14666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11772'. [ 1225.902874][T14666] loop4: detected capacity change from 0 to 1024 [ 1225.922332][T14666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1225.968298][ T4696] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1226.323304][T14681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11776'. [ 1226.342407][ T5554] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1226.887183][T14696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11782'. [ 1226.900927][T14696] loop2: detected capacity change from 0 to 1024 [ 1226.922605][T14696] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1226.980235][ T4145] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1227.292561][T14720] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11790'. [ 1227.354577][T14723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11790'. [ 1227.399520][T14724] loop2: detected capacity change from 0 to 512 [ 1227.420207][T14724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1227.474468][T14724] ext4 filesystem being mounted at /566/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1227.580530][T14722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11792'. [ 1228.101164][ T4145] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1228.129007][ T29] kauditd_printk_skb: 274 callbacks suppressed [ 1228.129020][ T29] audit: type=1326 audit(1767602512.750:126456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14747 comm="syz.5.11801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa946a8f749 code=0x7ffc0000 [ 1228.198417][ T29] audit: type=1326 audit(1767602512.750:126457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14747 comm="syz.5.11801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa946a8f749 code=0x7ffc0000 [ 1228.222369][ T29] audit: type=1326 audit(1767602512.750:126458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14747 comm="syz.5.11801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa946a8f749 code=0x7ffc0000 [ 1228.246159][ T29] audit: type=1326 audit(1767602512.760:126459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14747 comm="syz.5.11801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa946a8f749 code=0x7ffc0000 [ 1228.270280][ T29] audit: type=1326 audit(1767602512.760:126460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14747 comm="syz.5.11801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa946a8f749 code=0x7ffc0000 [ 1228.294259][ T29] audit: type=1326 audit(1767602512.760:126461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14747 comm="syz.5.11801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa946a8f749 code=0x7ffc0000 [ 1228.318068][ T29] audit: type=1326 audit(1767602512.760:126462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14747 comm="syz.5.11801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa946a8f749 code=0x7ffc0000 [ 1228.342025][ T29] audit: type=1326 audit(1767602512.760:126463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14747 comm="syz.5.11801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa946a8f749 code=0x7ffc0000 [ 1228.365806][ T29] audit: type=1326 audit(1767602512.760:126464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14747 comm="syz.5.11801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa946a8f749 code=0x7ffc0000 [ 1228.389585][ T29] audit: type=1326 audit(1767602512.770:126465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14747 comm="syz.5.11801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa946a8f749 code=0x7ffc0000 [ 1228.439511][T14748] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1228.501837][T14752] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(16) [ 1228.508518][T14752] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1228.516173][T14752] vhci_hcd vhci_hcd.0: Device attached [ 1228.535909][T14757] vhci_hcd: connection closed [ 1228.536401][ T2821] vhci_hcd vhci_hcd.5: stop threads [ 1228.546472][ T2821] vhci_hcd vhci_hcd.5: release socket [ 1228.551892][ T2821] vhci_hcd vhci_hcd.5: disconnect device [ 1228.694929][T14767] random: crng reseeded on system resumption [ 1228.776167][T14773] loop0: detected capacity change from 0 to 2048 [ 1228.865462][T14773] loop0: unable to read partition table [ 1228.887819][T14773] loop0: partition table beyond EOD, truncated [ 1228.894234][T14773] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 1229.018525][ T3004] loop0: unable to read partition table [ 1229.032075][ T3004] loop0: partition table beyond EOD, truncated [ 1229.094309][T14779] __nla_validate_parse: 5 callbacks suppressed [ 1229.094327][T14779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11809'. [ 1229.114801][T14779] loop0: detected capacity change from 0 to 1024 [ 1229.142746][T14779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1229.176227][ T5554] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1229.955734][T14798] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1230.237004][ T3004] ================================================================== [ 1230.245159][ T3004] BUG: KCSAN: data-race in avc_policy_seqno / avc_ss_reset [ 1230.252400][ T3004] [ 1230.254750][ T3004] write to 0xffffffff88f01c28 of 4 bytes by task 14807 on cpu 0: [ 1230.262493][ T3004] avc_ss_reset+0x20c/0x240 [ 1230.267140][ T3004] security_set_bools+0x301/0x340 [ 1230.272200][ T3004] sel_commit_bools_write+0x1ea/0x270 [ 1230.277600][ T3004] vfs_writev+0x406/0x8b0 [ 1230.281987][ T3004] do_writev+0xe7/0x210 [ 1230.286190][ T3004] __x64_sys_writev+0x45/0x50 [ 1230.290888][ T3004] x64_sys_call+0x1ba5/0x3000 [ 1230.295596][ T3004] do_syscall_64+0xca/0x2b0 [ 1230.300133][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.306055][ T3004] [ 1230.308399][ T3004] read to 0xffffffff88f01c28 of 4 bytes by task 3004 on cpu 1: [ 1230.315958][ T3004] avc_policy_seqno+0x15/0x30 [ 1230.320826][ T3004] selinux_inode_permission+0x3bc/0x7c0 [ 1230.326398][ T3004] security_inode_permission+0x6d/0xb0 [ 1230.331898][ T3004] inode_permission+0x20e/0x3c0 [ 1230.336775][ T3004] link_path_walk+0x779/0xe30 [ 1230.341476][ T3004] path_lookupat+0x8c/0x500 [ 1230.346025][ T3004] filename_lookup+0x147/0x340 [ 1230.350830][ T3004] do_readlinkat+0x7d/0x320 [ 1230.355368][ T3004] __x64_sys_readlink+0x47/0x60 [ 1230.360248][ T3004] x64_sys_call+0x2af1/0x3000 [ 1230.365128][ T3004] do_syscall_64+0xca/0x2b0 [ 1230.369678][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.375692][ T3004] [ 1230.378039][ T3004] value changed: 0x0000001b -> 0x0000001c [ 1230.383780][ T3004] [ 1230.386123][ T3004] Reported by Kernel Concurrency Sanitizer on: [ 1230.392294][ T3004] CPU: 1 UID: 0 PID: 3004 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 1230.401619][ T3004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1230.411697][ T3004] ================================================================== [ 1230.481869][T14807] loop5: detected capacity change from 0 to 512 [ 1230.486792][T14810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11821'. [ 1230.490451][T14807] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1230.539472][T14807] EXT4-fs (loop5): 1 orphan inode deleted [ 1230.545341][T14807] EXT4-fs (loop5): 1 truncate cleaned up [ 1230.551847][T14807] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1230.636551][T13305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.