last executing test programs: 14m34.788581376s ago: executing program 32 (id=2007): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) 14m32.773512549s ago: executing program 33 (id=2018): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 14m31.889227327s ago: executing program 34 (id=2027): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2eb2b00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048000180080001"], 0x122}, 0x1, 0x0, 0x0, 0x40}, 0x24008854) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$P9_RGETATTR(r4, &(0x7f00000003c0)={0x9c, 0x19, 0x1, {0x2b44683359b9aa55, {0x20, 0x3, 0x5}, 0x60, 0x0, 0x0, 0xe, 0x8, 0xba16, 0x800, 0x5, 0x6, 0x2000000004, 0x4, 0x113, 0x7, 0x7f, 0x5, 0xe46, 0x3, 0x3}}, 0xa0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c44bd8bcc0106eb1aeec4b1220000006a00100028bd7000ffdbdf2500000000000000000400090004000900"], 0x2c}, 0x1, 0x0, 0x0, 0x20040090}, 0x4008004) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x60005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigqueueinfo(0x0, 0x1d, &(0x7f0000000340)={0x3b, 0x3, 0x80}) msgctl$IPC_RMID(0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2003, 0x1}, 0x10) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 14m31.214239622s ago: executing program 35 (id=2029): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 14m8.045465253s ago: executing program 5 (id=2173): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) fchdir(0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="580100001000df4eca3400e3df0000000000fe88000000000014bb00000000000000000000000000000000000000000a0000006400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac141436000000000000000000000000000000000000000000010000000000000000000000000000fdffffffffffffff0000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000000cd000000000000001c0017000000000000000000000000002abd700028bd7000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000"], 0x158}}, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0xe7b, 0x0, 0x1) 14m7.64377884s ago: executing program 5 (id=2174): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigpending(0x0, 0x0) dup(r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) request_key(&(0x7f0000000040)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000700)='\x01\x9cs\x9f\xf8Ss9\x1cX\b\xc6\f\'\xa8\xe3\xdf\xb59T\xe4\x96\xfc\x94\xea\xad\x1b\xbd0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x27, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x48) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0900000001000000e27f000001000000120000", @ANYRES32=0x0, @ANYBLOB], 0x50) 14m7.289560693s ago: executing program 36 (id=2178): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r0, 0x0, 0x68, 0xa4, &(0x7f0000000380)="1e9812998693ecdfc618bf08d63c60113d205b4b24c7261247a2035d8f92f0e501649258a92ba710b6a5b31b248b592d734f1918f27e8fae12bf43c4badc5c685b1129fc4db4852d37f97bea1663f6ef9833bbf847649d9208f41f436f0e10edfb7e1c38aea4b3a3", &(0x7f0000000400)=""/164, 0x80000001, 0x0, 0xce, 0x98, &(0x7f0000000600)="c0112377af5e8b952a4ea26640684161c3aedbcffa10f7b295fa1214523c6a293b3b8f951a23f9aa4f53f77f5b810d5416af3cc1006b578dffdf0d5180151795ba008846b69e9696782ea25d7aaefdaa00396a9fabd7f97aab31e6530b9cb89cf3a83642559aa02bb7e010a0d0aa6007428858fad9822a2f7c66dba68a168c7fa1a3e0e4b5cc289e8402677aaee0f5e86b3524b529ca4fd70e9d436fedc530c0599fb761e64706b0ab5ad38a9197c4747b0dca452a8b7324268fd03f84532c9bb852108a3be3f5c65c89d3076cbf", &(0x7f0000000700)="368d1bd2cf029a9368e85cf65b1980e952dbe428d9e20f5178afa4d126e96d74de7a9f34744c2945c45076760f648e3f983e8454cba785480c47d7e585d4defd36ab1dbbd4837fd88a6b4ed8ade63b7cb1523b36951a0f17de98be3d1c4e947556f598c8e21ce2b5fbb9701f7d4d42be37251da7cff47c8c7a673b3e465fbb6566aefe1e9b9a14400b57b11e8dfc92a9c99a37bac3119b94", 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x80, 0x0}, 0x20000000) sendmsg$kcm(r4, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x1002}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x642, &(0x7f0000000b40)="$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") umount2(&(0x7f00000002c0)='./file0\x00', 0x2) 14m7.286356494s ago: executing program 5 (id=2181): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffed6) syz_open_dev$sg(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000740), 0x0, 0x46c, &(0x7f0000000bc0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000100000008000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) statfs(&(0x7f0000000840)='./file0/file0\x00', &(0x7f0000000880)=""/131) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) socket$packet(0x11, 0xa, 0x300) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) unlinkat(0xffffffffffffffff, 0x0, 0x200) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='smbus_result\x00', r1, 0x0, 0x9}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce8514000400e76a686bac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) 14m7.256343455s ago: executing program 37 (id=2181): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffed6) syz_open_dev$sg(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000740), 0x0, 0x46c, &(0x7f0000000bc0)="$eJzs281rHGUYAPBnJh9t7UdirR+tVaNFCIpJk1btwYuiIKIo6KEeY7ItodtGmii2FpuKeBKkoGfxKPoXeBNB1JPg1ZMnKRTtpa2nyMzOpJttNrFmk4nd3w82+74z7+48T+br3ffdDaBrDWV/kogdEfFbRAw0qksbDDWerl05N3n9yrnJJBYWXv8zydtdvXJusmxavm57URlOI9KPkmIjS82eOXtiol6vnS7qo3Mn3x6dPXP2iXdPThyvHa+dGj9y5PChsaefGn+yI3lmeV3d98HM/r0vvnnxlcmjF9/66Zss3h3F+uY8OmUoS/yvhVzrukc7vbGK7WwqJ70VBsIt6YmIbHf15ef/QPTEjZ03EC98WGlwwLrK7k1b2q+eXwBuY0lUHQFQjfJGn33+LR8b1PXYFC4/2/gAlOV9rXg01vRGWrTpa/l820lDEXF0/u8vskes0zgEAECzTyY/fzl7fv/61y9lfY+BxTVp3JM//57/3VXMoQxGxJ0RsTsi7oqIPRFxd0Te9t6IuG+N8dzc/0kvrfEtV5T1/54p5raW9v/K3l8M9hS1nXn+fcmx6XrtYPE/GY6+LVl9bIVtfPf8r5+2W9fc/8se2fbLvmARx6XelgG6qYm5ibxT2gGXL0Ts610u/2RxJiCJiL0Rse/W3npXWZh+7Kv97Rqtnv8KOjDPtPBllt58lv98tORfSprnJ6dvmp8c3Rr12sHR8qi42c+/fPxau+2vKf8OuFxrPDft/9Ymg0nzfO1sZ7f/H4//tD95I59n7i+WvTcxN3d6LKI/yS9nS5eP33htWS/bZ8f/8IHlz//dxWuy/O+PiOwgfiAiHoyIh4rYH46IRyLiwAo5/vjc6vlHWtH+vxAxtez1b/H4b9n/t17oOfHDt+22/+/2/+G8NFwsya9/q1gunOxy0RrgWv53AAAA8H+R5t+BT9KRxXKajow0vsO/J+5I6zOzc48fm3nn1FTju/KD0ZeWI10DxXhofbpeG0vmi3dsjI+OF2PF5XjpoWLc+LOebXl9ZHKmPlVx7tDttrc5/zN/9FQdHbDOti27dLx/wwMBKtA6j54urZ5/NVwM4Hbl99rQvVY5/9ONigPYeO7/0L2WO//Pt9TNBcDtyf0fupfzH7pU+n3VEQAVcv+HrrSW3/WvY2Hr5gijmsJm3Sl5IaIspJsiHoV1KlR9ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiMfwIAAP//2wzmew==") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000100000008000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) statfs(&(0x7f0000000840)='./file0/file0\x00', &(0x7f0000000880)=""/131) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) socket$packet(0x11, 0xa, 0x300) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) unlinkat(0xffffffffffffffff, 0x0, 0x200) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='smbus_result\x00', r1, 0x0, 0x9}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce8514000400e76a686bac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) 13m33.490516633s ago: executing program 38 (id=2515): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001040)="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", 0x3de}], 0x1}}], 0x2, 0x480e0) 11m37.54769616s ago: executing program 39 (id=4611): r0 = syz_io_uring_setup(0x3b85, &(0x7f00000001c0)={0x0, 0xad84, 0x1, 0x22, 0x339}, &(0x7f0000000180), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, 0x0, 0x0) 11m33.940886907s ago: executing program 8 (id=4667): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x806, 0x0, 0x4, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000052000167"], 0x20}}, 0x20040800) 11m33.867427191s ago: executing program 8 (id=4668): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000006c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000400)={r2, @in={{0x2, 0x4e22, @empty}}}, 0x90) 11m33.835473594s ago: executing program 8 (id=4671): clock_adjtime(0x0, &(0x7f00000004c0)={0x37db, 0x80000000000f423f, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffb, 0x7, 0x2, 0x0, 0xffffffffffffff7f, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x3, 0x40, 0xffffffffffffffff, 0x50000000000, 0x0, 0x0, 0x1, 0x6}) 11m33.769228058s ago: executing program 8 (id=4674): mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) 11m33.752465549s ago: executing program 8 (id=4676): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x24048001}, 0x4000004) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @local}, 0x14) 11m33.58552838s ago: executing program 8 (id=4681): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff362}}, @exit], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 11m33.58527693s ago: executing program 40 (id=4681): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff362}}, @exit], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 11m30.276249857s ago: executing program 1 (id=4727): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x77, 0xfffffffffffffe2b, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11m30.205776642s ago: executing program 1 (id=4729): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(&(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x3, 0xfffffffd, 0x0, 0x40}}, 0x40, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 11m29.290070762s ago: executing program 1 (id=4734): r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040), &(0x7f0000000080)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) read(r1, 0x0, 0x0) poll(&(0x7f0000000000)=[{r0, 0xd010}], 0x1, 0x9) 11m29.161436831s ago: executing program 1 (id=4737): mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) 11m29.122632873s ago: executing program 1 (id=4738): r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000a80)={0x24, 0x33, 0x80015, 0x1a, 0x4, 0x1, 0x1, 0x10a, 0xffffffffffffffff}) 11m28.861187621s ago: executing program 1 (id=4743): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4f21, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfc}}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRES16], 0xff, 0x2e7, &(0x7f0000000280)="$eJzs3M9LG2kcx/Gvml9GNDksu+wuy37ZveyyMGj2XghFaWmgRU2pLRRGnbQh00QygyWlqD31WvpH9CDe6k1oe+jVS2899dKbhxZKqfTXlEwmGjX+oiZa836B5nGe5+vzTGYcPiNk1q48uFXIOUbOdKW7OyzdIguyLpKstkQq1W9dIhKTmi6JSKMF+bfv3cs/xiauXkhnMsOjqiPp8f9Tqjrw55Pbd5f+eub2XV4eWInKavL62tvU69WfV39d+zp+M+9o3tFiyVVTJ0uv3Mikbel03ikYqpc8z3QszRefT4j4/SXXrPbn7NLMTEXN4nR/fKZsOY6axYoWrIpKSKRcUfOGmS+qYRjaHxfsJ7o4Omqm/Wbs0MVTLVgQvtu5HSd+uZw2e0Skd8fY7GK7VgUAAE6OLfk/ptvzv68reK1u+eJ5XmO9n//fPxY5UP5fieyS/4N8X8//tlXL/45Vdg+W/92SutX8HyL/H0J2M//j1Krm/3jw9+u7d21p0G+Q/wEAAAAAAAAAAAAAAAAAAAAA+BGse17C87xE/bX+FQ0+El7/+bjXidbg+He2MQ0aqjER+/5sdjYrYodrGzeOuyWDkpDP/vkQqLVHzmeGB9WXlKf2fFA/P5vt8QvTOcmLLZYMSUKSzeuHavW6tT4s8cb6lCTkp+b1qab1Efnn74Z6QxLyYkpKYsu0f15v1s8NqZ69mNlW3+uPAwAAAADgNDB0Q9P7d8PYrb9Wn86J+PfX+/9/YNv9dUh+Cx3vvgMAAAAA0Cmcyp2CadtWuY2NmIi0fq7q3rV+d3r3HjP3X/vf3pPTSDRsqT9Euu3LCDVOGg1W0aK5fnn46MPR/cIzy79/atb1sS1v3QEuHuHWXZcAAAAAHL3N0L/7GO9NO1cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnad1TxHqCGfZ6sgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQWb4FAAD//9yVIwU=") r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 11m28.852569481s ago: executing program 41 (id=4743): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4f21, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfc}}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRES16], 0xff, 0x2e7, &(0x7f0000000280)="$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") r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 11m27.733316884s ago: executing program 9 (id=4769): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044000) 11m27.658995579s ago: executing program 9 (id=4771): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r4) r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r6, 0x400, 0x1) r7 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r7, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 11m26.706666722s ago: executing program 9 (id=4791): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180200007800000800000000626f00008500000029000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x77, 0xfffffffffffffe2b, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11m26.653665536s ago: executing program 9 (id=4793): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) 11m26.592234759s ago: executing program 9 (id=4796): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) 11m26.413466631s ago: executing program 9 (id=4805): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="8000000011000100279d7000ffdbdf2500000000", @ANYRES32], 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044000) 11m26.413354971s ago: executing program 42 (id=4805): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="8000000011000100279d7000ffdbdf2500000000", @ANYRES32], 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044000) 11m22.968491328s ago: executing program 5 (id=4806): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) 11m22.851529466s ago: executing program 5 (id=4908): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) 11m21.758084687s ago: executing program 5 (id=4952): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/55, 0x37}], 0x1) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 11m21.71725771s ago: executing program 43 (id=4952): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/55, 0x37}], 0x1) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 11m11.379263041s ago: executing program 2 (id=5202): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x1b11, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r0, &(0x7f0000000380)="25d7fe75fa3496bb8e75411fe8ffffffffffffff00000000", 0x18, 0x4000041, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 11m11.378890241s ago: executing program 2 (id=5204): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) chdir(&(0x7f00000001c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 11m11.268519528s ago: executing program 2 (id=5211): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x27) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000f00)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000001c0), 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r3, 0x309, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 11m11.169678524s ago: executing program 2 (id=5218): mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(0x0, 0x2) 11m11.131350577s ago: executing program 2 (id=5220): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008001e"], 0x44}}, 0x0) 11m10.414311604s ago: executing program 2 (id=5243): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}], 0x10) 11m10.353304028s ago: executing program 44 (id=5243): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}], 0x10) 14.499277076s ago: executing program 6 (id=11243): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005000000000000", @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") 13.613476555s ago: executing program 6 (id=11247): r0 = socket$inet6(0x10, 0x3, 0x0) accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000080200000100"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) 9.339734286s ago: executing program 4 (id=11263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x1, 0x0, &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 8.687946328s ago: executing program 0 (id=11266): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0), 0x6, 0x5fd, &(0x7f0000000c00)="$eJzs3c9rHFUcAPDvzCYxaaNpRcQWxYCHFqRpUotVL7b1YA8FC/Yg4qGhSWro9gdNCrYWTMGDgoKIV5Fe/Ae8S+/eRFBvnoUqUlFQ6crszrabZDfdttmdNPP5wGTnvZnd9747eZn3dvJ2Aiit8exHGrEj4taJJGKsZdtoNDaO5/vd/OPKyWxJolZ78/ckkjyvuX+SP27NE8MR8f3hiMcrq8tduHT59HS11vBBxN7FM+f3Lly6vGf+zPSp2VOzZ6f2vbT/wOTLU/un1iXOrfnjkaNvPP3ph+++OPdDdU8SB+P44PszsSKO9TIe43ErD7E1fyAiDmQrbd6Xh80mCKHUKvnv42BEPBljUamnGsZi/pNCKwf0VK0SUQNKKtH+oaSa/YDm2L67cfDxHvdK+ufGocYAaHX8A43PRmK4PjbacjNpGRk1PtvYtg7lZ2X8d2Xnl9kSyz6H+Pv20RlYh3I6WboaEU+1iz+p121bPdIs/nTZWD+JiMmIGMrr99oD1CFpWe/F5zBruZf4W49DGhEH88cs//B9lj++It3v+AEop+uH8hP5Upa6c/7L+h7N/k+06f+Mtjl33Y+iz3+d+3/N8/1wvd+TruiHZX2WY+1fcnBlxi8fH/m8U/mt/b9sycpv9gX74cbViJ0r4v8oCzbv/2TxJ22Of7bLiYPdlfH6j78d6bSt6Phr1yJ2tR3/3OmVZmtrXJ/cOzdfnZ1s/GxbxrffvfN1p/KLjj87/ls6xN9y/NOVz8vek/NdlvHNsWtnOm0bvWv86a9DSWO8OZTnvDe9uHhhKmIoOZrv0pK/b+26NPdpvkYW/+7n2rf/Zb//V5e/zkjzT2YXzr91+manbfdz/FsuJt+qdVmHTrL4Z+5+/Fe1/yzvsy7L+Ovti8902rZW/CMPEhgAAAAAAACUUFq/BpukE7fX03RiojFf9onYklbPLSw+P3fu4tmZiN31/4ccTJtXusca6SRLT+X/D9tM71uRfiEitkfEF5WRenri5LnqTNHBAwAAAAAAAAAAAAAAAAAAwAaxNZ//37xP9Z+Vxvx/oCR6eYM5YGPT/qG86u1/1S2egDJw/ofy0v6hvLR/KC/tH8pL+4fy0v6hvLR/KC/tHwAAAAA2pe3PXv85iYilV0bqS2Yo32ZGEGxug0VXAChMpegKAIW5felfZx9Kp6v+/z/5lwP2vjpAAZJ2mfXOQW3txn+97TMBAAAAAAAAAAAAgB7YtaPz/H9zg2FzM+0PyusB5v/76gB4yPnqfygvY3zgbrP4hzttMP8fAAAAAAAAAAAAAPpmtL4k6UQ+F3g00nRiIuLRiNgWg8ncfHV2MiIei4ifKoOPZOmpoisNAAAAAAAAAAAAAAAAAAAAm8zCpcunp6vV2QutK/+uytncK827oPahrFfjHp8VSf/flpGIKPyg9GxloCUniVjKjvyGqNiFhdgY1aivFPyHCQAAAAAAAAAAAAAAAAAASqhl7nF7O7/qc40AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoP/u3P+/dytFxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPJz+DwAA///LLUAr") ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x8000f) 8.658334811s ago: executing program 6 (id=11267): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000000) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000080200000100"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) 8.381143819s ago: executing program 4 (id=11268): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x7d}, @printk={@ld}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) 7.731192341s ago: executing program 7 (id=11270): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r5}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x3}, 0x0, 0x0, 0x40000, 0x0, 0x21, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.506820826s ago: executing program 4 (id=11271): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r0, 0x8008743f, 0xf0ff1f00000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x7, 0x4, 0x3f8, 0x200, 0x200, 0x200, 0x310, 0x310, 0x310, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x4, 0x2, 0x0, 0x2}}}, {{@arp={@multicast1, @multicast1, 0xff, 0xffffffff, 0x0, 0xb, {@mac=@local, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x6, 0xa8, 0x8, 0x0, 0x5, 0x2a, 'lo\x00', 'wg2\x00', {}, {}, 0x0, 0x194}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @empty, @private=0xa010102, 0xf}}}, {{@arp={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x40}, 0xff, 0xffffff00, 0xc, 0x1, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0x80]}}, 0x4, 0x4d84, 0x8, 0x5, 0x5b, 0x1, 'team_slave_0\x00', 'wg1\x00', {}, {0xff}, 0x0, 0x28}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 7.357808476s ago: executing program 6 (id=11272): kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{}, &(0x7f0000000300), &(0x7f0000000380)}, 0x20) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 6.652166622s ago: executing program 7 (id=11273): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x19, &(0x7f0000000300)=ANY=[], 0x0, 0x5, 0x83, &(0x7f0000000540)=""/131, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000200)=[r4], 0x0, 0x10, 0x8}, 0x94) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}, 0x1c) getdents(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xf, 0x491, 0x3, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 6.613545225s ago: executing program 7 (id=11274): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000007e40)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40, 0x7fff, 0xe3b, 0x80000000, 0x7f, 0x3, 0x7, 0xffffffff, 0x5, 0x5, 0x7fffffff, 0x0, 0x4, 0xfffffffc, 0x0, 0x4, 0x6, 0x5, 0x7fffffff, 0x100, 0x5, 0xd, 0x8, 0x8, 0x7, 0x7, 0x5, 0x80000000, 0x200, 0x10, 0xfffffffc, 0x7, 0x6, 0xc, 0x6, 0x0, 0x6, 0x0, 0x7fff, 0x1, 0x7, 0x4, 0xffffff03, 0x6, 0x6ea409a4, 0x8, 0xfffffff9, 0x9, 0x1000, 0x5, 0x1, 0x7c0, 0x1, 0x6, 0xff, 0x7, 0xc3a, 0x0, 0x6, 0x2, 0x6, 0xc213, 0x8, 0x40, 0x1, 0x546, 0x2, 0x7, 0x9, 0x3, 0x7ff, 0x200, 0x1, 0x0, 0x7, 0x6, 0x9, 0x3, 0x85bd, 0x100, 0x9, 0xfffffff9, 0x526b0e97, 0x101, 0xffff7fff, 0x1, 0x2, 0x2, 0x0, 0x3, 0x20000, 0xbf, 0x0, 0x3, 0x9, 0xe1, 0x5, 0x6, 0xffffffff, 0x7, 0x2, 0x7f, 0x200, 0xd, 0xffffff01, 0x8, 0x75, 0xcfbd, 0x9, 0xac, 0xa3, 0x1, 0x8, 0x1, 0x3, 0x6, 0xd0d, 0xfffffffc, 0x0, 0x9ac, 0x8, 0x4, 0x7, 0x1, 0x8001, 0x1, 0x481f, 0x2, 0x14000, 0xe, 0x6, 0x286, 0xf99, 0x4288974c, 0xe7d9, 0x7, 0x3, 0x0, 0x3, 0xfffff000, 0x0, 0x8, 0x80000001, 0xffff, 0x2, 0x6, 0x5, 0x9, 0xfffffffd, 0x1, 0x3, 0x3ff, 0x9, 0xfffff83b, 0x7, 0xea41, 0x5, 0x1, 0x5, 0x81, 0x4, 0x6, 0x3d, 0x10000, 0x6, 0x3, 0x1, 0x1, 0x5, 0x3, 0x3ff, 0x7, 0x4, 0x6572, 0x1, 0x3, 0x3, 0x7fffffff, 0x0, 0x3, 0x4, 0x8, 0xee, 0x80, 0xea3, 0xd18f, 0x2, 0x8, 0xdd8, 0x8, 0x6, 0x4, 0x2, 0x4, 0x100, 0x10001, 0x7cb, 0xba05, 0x0, 0x1, 0x3, 0x8, 0x8000, 0x5, 0xffffffff, 0x2, 0x7, 0xffffffff, 0x9, 0x8, 0x81, 0x3, 0x2, 0x4, 0x3, 0x5, 0x8, 0x6, 0x7, 0x1ff, 0x1, 0x7, 0x3846, 0x2, 0x6, 0x5, 0x6d0b, 0xffff02af, 0x8, 0x7, 0x8, 0x8, 0xfffffffe, 0x7, 0x8, 0x2, 0x8, 0x6, 0x4, 0x3, 0xe60, 0x1, 0xff7a, 0x9, 0x40, 0x8, 0x4, 0x0, 0x0, 0x9, 0x1, 0xfffff662, 0x5, 0x6, 0x42, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x7c, 0x0, 0x9, 0x8, 0x20000000, 0x5, 0x9, 0x5, 0x8, 0x4, 0x2, 0x1, 0x1faf6368, 0xbe, 0x5, 0x3, 0x1, 0x3, 0x1, 0x5, 0x4, 0x6, 0x6, 0x3ff, 0x4, 0x240b, 0x5, 0xc574, 0x35, 0x1, 0x5, 0x9, 0x5, 0x3, 0x7f, 0x1fc00, 0x808, 0x800, 0x8, 0x8001, 0x9, 0x8000001, 0x1, 0x10000, 0xfff, 0x6, 0xfffffff8, 0xc9, 0x3, 0x7, 0xd, 0x3, 0x0, 0x65, 0x7f, 0x0, 0x40, 0xff, 0xffffffd6, 0x7, 0xd331, 0x3, 0x7fffffff, 0x4, 0xffffffff, 0x7, 0x2, 0x8, 0x6, 0x2, 0x6, 0xffff1b87, 0x800, 0x5, 0xb72a, 0x6, 0xfffffff9, 0x2, 0x37fe1412, 0x3, 0x7, 0x4, 0x5, 0xffff, 0xbe6, 0x6, 0x736ba5e8, 0x8, 0x2, 0x5, 0x5, 0xff, 0x2d10, 0xfb, 0xffff0000, 0x10000, 0x3, 0x6, 0x7, 0x5, 0x8000, 0xffffffff, 0xc, 0x40aca, 0x6, 0xa271, 0x4b4, 0xc1, 0x101, 0x0, 0x9, 0xdd0, 0x8, 0xc6da, 0x8, 0x200, 0x7, 0x5, 0x6, 0x3, 0x8000, 0x8ce, 0xfe000000, 0x2, 0x0, 0x8, 0x5, 0xffff, 0x2, 0x9, 0x7fffffff, 0x0, 0x8, 0x2, 0x6ee3, 0xfffffff7, 0x1, 0x1, 0x2, 0xff, 0xb40c, 0x4, 0xffff, 0x80, 0x80000001, 0x96, 0x1, 0x3, 0xe3, 0xcf95, 0x52, 0xfe1e, 0x3, 0xa1c, 0xc, 0x8, 0x8, 0x5, 0x6df0c64b, 0x8, 0x0, 0x5, 0x6, 0xf7ea, 0xe, 0xb10, 0x400, 0xff, 0x3, 0x4, 0xfffffff8, 0x8, 0x49c7, 0x3, 0x1993, 0x1, 0x8, 0x206, 0x9, 0x0, 0x9, 0xd, 0x0, 0x3, 0x3, 0x0, 0x5, 0x1, 0x7, 0x8, 0x6, 0xc300, 0x81, 0x6, 0xb0, 0x9, 0x80, 0x9, 0x2, 0xbc73, 0x7, 0x6, 0x10001, 0x80000001, 0x7, 0x8, 0x6, 0x1, 0x0, 0x94, 0x4f4, 0x7, 0x5, 0x8, 0x6, 0xe51, 0x6, 0x2, 0x7, 0x4, 0x7, 0x8, 0xfffffff5, 0x6, 0xff, 0x401, 0x0, 0x1, 0x0, 0x1, 0x1, 0x6, 0x10, 0x0, 0x7f, 0xd, 0x101, 0xe93, 0x10001, 0x0, 0x7, 0x9, 0x4c, 0x0, 0x9f3, 0x2, 0xcda, 0xc, 0x1ff, 0x9, 0xfff, 0x3, 0x400, 0x300000, 0x472a]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x200, 0x6, 0xffffff8a, 0x5, 0x81, {0x1, 0x2, 0x5, 0x6, 0x31, 0x8}, {0x2, 0x0, 0x9a2a, 0xef, 0xac, 0xfffffffa}, 0x987, 0x101, 0x80000000}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 6.460894925s ago: executing program 6 (id=11275): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x18) pivot_root(&(0x7f0000000080)='./file0\x00', 0x0) 6.430899847s ago: executing program 4 (id=11276): openat$rtc(0xffffffffffffff9c, 0x0, 0x100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = getpid() sched_setscheduler(r0, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000040)={0x0, 0xffff, 0xd, 0x2, 0x3}) 6.365534732s ago: executing program 6 (id=11277): r0 = socket$inet6(0x10, 0x3, 0x0) accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000080200000100"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) 5.793396779s ago: executing program 0 (id=11279): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x5, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0xffffffffffffffff}) 5.723511794s ago: executing program 7 (id=11281): prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() syz_clone3(0x0, 0x0) capget(0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) syz_clone(0xd024100, 0x0, 0x0, 0x0, 0x0, 0x0) 5.549994805s ago: executing program 0 (id=11282): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000037710850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0), 0x6, 0x5fd, &(0x7f0000000c00)="$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") r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, 0x0, 0x24000050) 5.494702839s ago: executing program 7 (id=11284): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) uname(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newnexthop={0x30, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x4}, {0x0, 0xfe}]}, @NHA_FDB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 3.665197159s ago: executing program 3 (id=11286): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005000000000000", @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") 3.542464287s ago: executing program 0 (id=11287): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000500000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000a4a200000000000007020000f8ffff00b803000008000000b7cfee0000000000850000000300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_type(r1, &(0x7f0000000280), 0x9) 3.521565518s ago: executing program 3 (id=11288): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000200001002cbd7000fddbdf250220102d0000000403000000080010000000000008000200e000000208000200ac1e01"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) utimes(0x0, 0x0) 3.466543412s ago: executing program 3 (id=11289): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 3.34404871s ago: executing program 0 (id=11290): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0), 0x6, 0x5fd, &(0x7f0000000c00)="$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") ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x8000f) 3.333626801s ago: executing program 4 (id=11291): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() socketpair$unix(0x1, 0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005000000000000", @ANYBLOB], 0x50) ptrace$ARCH_SET_GS(0x1e, r1, &(0x7f0000000080), 0x1001) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000040000800400000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r5, &(0x7f0000000480), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") open(0x0, 0x143142, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.201848646s ago: executing program 3 (id=11292): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc2481, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) 247.405004ms ago: executing program 3 (id=11293): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 164.15526ms ago: executing program 0 (id=11294): syz_usb_connect(0x4, 0x90, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf94d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) getuid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e21, @remote}}) 92.199084ms ago: executing program 3 (id=11295): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x19, &(0x7f0000000300)=ANY=[], 0x0, 0x5, 0x83, &(0x7f0000000540)=""/131, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000200)=[r4], 0x0, 0x10, 0x8}, 0x94) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}, 0x1c) getdents(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xf, 0x491, 0x3, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 27.243259ms ago: executing program 4 (id=11296): r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x28, r6, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getpid() socket$inet_udp(0x2, 0x2, 0x0) setns(0xffffffffffffffff, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 0s ago: executing program 7 (id=11297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r5, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x77359400}}, 0x0) kernel console output (not intermixed with test programs): enamed from vlan1 [ 1054.910201][ T4069] netlink: 'syz.3.10455': attribute type 16 has an invalid length. [ 1054.925367][ T4069] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1054.983486][ T4071] loop3: detected capacity change from 0 to 4096 [ 1054.992713][ T4071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1055.544945][ T4082] loop0: detected capacity change from 0 to 512 [ 1055.551827][ T4082] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1055.613464][ T4088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10462'. [ 1055.883604][ T4095] xt_socket: unknown flags 0x50 [ 1055.905204][T28393] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.124613][ T4105] loop0: detected capacity change from 0 to 512 [ 1056.131560][ T4105] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1056.144258][ T4105] EXT4-fs (loop0): 1 truncate cleaned up [ 1056.150481][ T4105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1056.172092][ T4104] netlink: 'syz.7.10468': attribute type 16 has an invalid length. [ 1056.194577][ T4104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.208597][ T4104] 8021q: adding VLAN 0 to HW filter on device team0 [ 1056.220631][ T4104] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1056.482093][ T4113] loop6: detected capacity change from 0 to 256 [ 1056.503666][ T4113] vfat: Unknown parameter 'u' [ 1057.824612][ T3943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1057.838023][ T4123] loop6: detected capacity change from 0 to 512 [ 1057.862772][ T4123] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1057.875382][ T4123] ext4 filesystem being mounted at /421/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1057.920081][ T4129] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 1058.761335][ T4144] loop0: detected capacity change from 0 to 512 [ 1058.788711][ T4144] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1058.818831][ T4144] EXT4-fs (loop0): 1 truncate cleaned up [ 1058.824927][ T4144] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1059.071340][ T3943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1059.714914][ T4161] loop7: detected capacity change from 0 to 128 [ 1060.663065][T31391] kworker/u8:10: attempt to access beyond end of device [ 1060.663065][T31391] loop7: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1060.888472][T30085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1060.979493][ T4181] hub 9-0:1.0: USB hub found [ 1060.996436][ T4181] hub 9-0:1.0: 8 ports detected [ 1061.033168][ T4182] loop6: detected capacity change from 0 to 512 [ 1061.062996][ T4182] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1061.078196][ T4182] ext4 filesystem being mounted at /423/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1061.244171][ T4187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10491'. [ 1061.458045][ T4190] cgroup: Unknown subsys name 'cpuset' [ 1061.693382][ T4194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1061.809915][T30085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1062.237977][ T4202] loop0: detected capacity change from 0 to 512 [ 1062.250801][ T4202] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1062.263455][ T4202] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1062.274733][ T4202] netlink: 'syz.0.10496': attribute type 16 has an invalid length. [ 1062.301413][ T4202] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1062.331797][ T3943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1062.466010][ T4210] netlink: 'syz.0.10497': attribute type 13 has an invalid length. [ 1062.476752][ T4210] gretap0: refused to change device tx_queue_len [ 1062.484030][ T4210] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1063.933938][ T4230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.976483][ T4230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.677507][ T4237] loop7: detected capacity change from 0 to 512 [ 1066.270343][ T4239] loop6: detected capacity change from 0 to 512 [ 1067.053667][ T4239] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1067.064602][ T4237] EXT4-fs warning (device loop7): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop7. [ 1067.077266][ T4239] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 1067.085842][ T4239] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1067.093793][ T4239] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.10503: bg 0: block 361: padding at end of block bitmap is not set [ 1067.108568][ T4239] EXT4-fs (loop6): Remounting filesystem read-only [ 1067.115433][ T4239] EXT4-fs (loop6): 1 truncate cleaned up [ 1067.121637][ T4239] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1067.256325][ T4251] cgroup: Unknown subsys name 'cpuset' [ 1067.323660][ T4252] loop0: detected capacity change from 0 to 512 [ 1067.406522][ T4252] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1067.504610][ T4252] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1067.576276][ T4252] netlink: 'syz.0.10508': attribute type 16 has an invalid length. [ 1067.738530][ T4252] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1068.202492][T30085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1068.237756][ T4264] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10511'. [ 1068.412875][ T4268] netlink: 'syz.6.10512': attribute type 13 has an invalid length. [ 1068.453360][ T4268] gretap0: refused to change device tx_queue_len [ 1068.460283][ T4268] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1070.340049][ T4300] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1070.375721][ T4302] cgroup: Unknown subsys name 'cpuset' [ 1070.838711][ T3943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1071.179419][ T4314] netlink: 'syz.0.10522': attribute type 16 has an invalid length. [ 1071.301381][ T4314] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1071.699326][ T4322] netlink: 'syz.6.10526': attribute type 13 has an invalid length. [ 1071.710034][ T4322] gretap0: refused to change device tx_queue_len [ 1071.716618][ T4322] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1072.154485][ T4327] loop7: detected capacity change from 0 to 512 [ 1072.310326][ T4327] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1072.420215][ T4327] ext4 filesystem being mounted at /441/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1072.928893][T29635] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1073.390188][ T4343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1073.414846][ T4343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1073.643645][ T4345] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1073.654828][ T4345] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10532'. [ 1073.677978][ T4345] loop6: detected capacity change from 0 to 512 [ 1073.687429][ T4345] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1073.711612][ T4345] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 1073.719832][ T4345] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1073.747001][ T4345] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.10532: bg 0: block 361: padding at end of block bitmap is not set [ 1073.764567][ T4345] EXT4-fs (loop6): Remounting filesystem read-only [ 1073.773063][ T4345] EXT4-fs (loop6): 1 truncate cleaned up [ 1073.779412][ T4345] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1074.163831][ T4348] loop7: detected capacity change from 0 to 256 [ 1075.047653][ T4355] cgroup: Unknown subsys name 'cpuset' [ 1075.105559][ T4356] loop7: detected capacity change from 0 to 512 [ 1075.192397][ T4356] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1075.393393][ T4356] ext4 filesystem being mounted at /444/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1076.121442][ T4368] veth0_vlan: entered allmulticast mode [ 1076.191394][ T4368] ÿÿÿÿÿÿ: renamed from vlan1 [ 1076.546970][T30085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1077.140754][T29635] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1077.166650][ T4387] xt_socket: unknown flags 0x50 [ 1077.292364][ T4393] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1077.700111][ T4397] cgroup: Unknown subsys name 'cpuset' [ 1077.731792][ T4398] loop7: detected capacity change from 0 to 512 [ 1077.753423][ T4398] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1077.827424][ T4398] EXT4-fs (loop7): 1 truncate cleaned up [ 1077.839033][ T4398] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1078.058387][ T4407] netlink: 'syz.0.10550': attribute type 13 has an invalid length. [ 1078.068642][ T4407] gretap0: refused to change device tx_queue_len [ 1078.075871][ T4407] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1079.613777][ T4418] loop6: detected capacity change from 0 to 128 [ 1080.114573][ T4415] loop0: detected capacity change from 0 to 512 [ 1080.136399][ T4415] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1080.165172][ T4415] EXT4-fs (loop0): 1 truncate cleaned up [ 1080.171410][ T4415] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1080.508402][ T3943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1080.611912][ T4435] loop0: detected capacity change from 0 to 128 [ 1080.811445][ T4441] syz.0.10558: attempt to access beyond end of device [ 1080.811445][ T4441] loop0: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 1081.124393][ T4448] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1081.800436][ T4456] netlink: 'syz.4.10565': attribute type 13 has an invalid length. [ 1081.823017][ T4453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.830384][ T4453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.898970][ T4453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1081.909048][ T4453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1081.946268][ T4456] gretap0: refused to change device tx_queue_len [ 1081.952842][ T4456] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1081.970297][ T1380] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.979331][ T1380] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.992469][ T1380] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.018093][ T1380] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.044436][ T4463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.053082][ T4463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.064686][T29635] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1083.287051][ T4471] loop6: detected capacity change from 0 to 128 [ 1083.645497][ T4472] loop0: detected capacity change from 0 to 512 [ 1083.701533][ T4472] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1083.719142][ T4472] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 1083.727760][ T4472] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1083.736253][ T4472] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.10568: bg 0: block 361: padding at end of block bitmap is not set [ 1084.073350][ T4472] EXT4-fs (loop0): Remounting filesystem read-only [ 1084.080484][ T4472] EXT4-fs (loop0): 1 truncate cleaned up [ 1084.087922][ T4472] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1084.426388][ T4485] tipc: Started in network mode [ 1084.431380][ T4485] tipc: Node identity 02a597d9cce6, cluster identity 4711 [ 1084.438742][ T4485] tipc: Enabled bearer , priority 0 [ 1085.065402][ T4485] syzkaller0: entered promiscuous mode [ 1085.070956][ T4485] syzkaller0: entered allmulticast mode [ 1085.437946][ T3412] tipc: Node number set to 3460536281 [ 1085.500551][ T4485] tipc: Resetting bearer [ 1085.508980][ T4482] tipc: Resetting bearer [ 1085.517254][ T4482] tipc: Disabling bearer [ 1085.890183][ T3943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1086.112336][ T4506] netlink: 'syz.7.10578': attribute type 13 has an invalid length. [ 1086.123417][ T4506] gretap0: refused to change device tx_queue_len [ 1086.130084][ T4506] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1087.008543][ T4508] loop0: detected capacity change from 0 to 512 [ 1087.054649][ T4508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1087.067388][ T4508] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1087.240762][ T4508] netlink: 'syz.0.10579': attribute type 16 has an invalid length. [ 1087.262454][ T4508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1087.270340][ T4508] 8021q: adding VLAN 0 to HW filter on device team0 [ 1087.280236][ T4508] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1089.132613][ T3943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.151196][ T4526] loop7: detected capacity change from 0 to 128 [ 1089.186982][ T4530] loop0: detected capacity change from 0 to 128 [ 1090.509237][ T4538] loop0: detected capacity change from 0 to 256 [ 1091.474810][ T4554] loop0: detected capacity change from 0 to 512 [ 1091.542766][ T4552] syz.7.10583: attempt to access beyond end of device [ 1091.542766][ T4552] loop7: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 1091.669675][ T4554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1091.683002][ T4554] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1092.422250][ T3943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1092.473785][ T4573] loop0: detected capacity change from 0 to 128 [ 1092.579945][ T4576] loop6: detected capacity change from 0 to 512 [ 1092.620653][ T4576] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1092.633255][ T4576] ext4 filesystem being mounted at /447/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1092.647869][ T4576] netlink: 'syz.6.10595': attribute type 16 has an invalid length. [ 1092.675332][ T4576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1092.684368][ T4576] 8021q: adding VLAN 0 to HW filter on device team0 [ 1092.701508][ T4576] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1093.508516][ T4585] loop7: detected capacity change from 0 to 256 [ 1093.515151][ T4585] vfat: Unknown parameter 'u' [ 1093.532633][ T4587] netlink: 'syz.4.10600': attribute type 16 has an invalid length. [ 1093.603106][ T4587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1094.255268][ T4602] hub 9-0:1.0: USB hub found [ 1094.260081][ T4602] hub 9-0:1.0: 8 ports detected [ 1094.490630][T30085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1094.562414][ T4605] loop0: detected capacity change from 0 to 512 [ 1094.592939][ T4605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1094.613566][ T4605] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1095.442630][ T3943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1095.479203][ T4619] loop6: detected capacity change from 0 to 256 [ 1095.808249][ T4628] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1096.702107][ T4637] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10616'. [ 1096.711983][ T4637] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10616'. [ 1096.796929][ T4637] loop0: detected capacity change from 0 to 2048 [ 1096.842328][ T4637] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1096.860759][ T29] audit: type=1400 audit(1759881456.316:9174): avc: denied { map } for pid=4636 comm="syz.0.10616" path="/42/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1096.883392][ T29] audit: type=1400 audit(1759881456.316:9175): avc: denied { execute } for pid=4636 comm="syz.0.10616" path="/42/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1096.971112][ T4650] netlink: 'syz.4.10618': attribute type 16 has an invalid length. [ 1097.064869][ T4650] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1097.192152][ T4655] loop6: detected capacity change from 0 to 1024 [ 1097.760770][ T3943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1098.202074][ T4671] loop0: detected capacity change from 0 to 512 [ 1098.240279][ T4671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1098.361477][ T4671] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1098.999028][ T4688] netlink: 'syz.7.10629': attribute type 16 has an invalid length. [ 1099.119083][ T4688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1099.127811][ T4688] 8021q: adding VLAN 0 to HW filter on device team0 [ 1099.135011][ T3943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1099.147346][ T4688] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1099.174579][ T4691] hub 9-0:1.0: USB hub found [ 1099.179480][ T4691] hub 9-0:1.0: 8 ports detected [ 1100.102105][ T4707] loop0: detected capacity change from 0 to 128 [ 1100.398012][ T4713] xt_socket: unknown flags 0x50 [ 1101.361827][ T407] kworker/u8:5: attempt to access beyond end of device [ 1101.361827][ T407] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1102.008298][ T4722] loop0: detected capacity change from 0 to 512 [ 1102.104812][ T4722] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1102.149853][ T4722] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1102.184104][ T4737] netlink: 'syz.4.10644': attribute type 13 has an invalid length. [ 1102.193217][ T4737] gretap0: refused to change device tx_queue_len [ 1102.200161][ T4737] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1105.349264][ T4770] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1105.378338][ T3943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1105.978421][ T4775] hub 9-0:1.0: USB hub found [ 1105.983281][ T4775] hub 9-0:1.0: 8 ports detected [ 1106.635220][ T4788] netlink: 76 bytes leftover after parsing attributes in process `syz.6.10659'. [ 1106.799527][ T4791] loop7: detected capacity change from 0 to 512 [ 1106.821933][ T4791] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1106.864245][ T4791] EXT4-fs (loop7): 1 truncate cleaned up [ 1106.873205][ T4791] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1107.246412][ T4804] loop6: detected capacity change from 0 to 512 [ 1107.259899][ T4804] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1107.272602][ T4804] ext4 filesystem being mounted at /459/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1108.045495][T30085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1108.682948][T29635] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1108.702470][ T4819] loop7: detected capacity change from 0 to 256 [ 1108.910342][ T4828] loop0: detected capacity change from 0 to 256 [ 1108.917352][ T4828] vfat: Unknown parameter 'u' [ 1109.157287][ T4833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1109.188582][ T4833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1109.512251][ T4837] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1109.523354][ T4837] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10671'. [ 1109.546513][ T4837] loop6: detected capacity change from 0 to 512 [ 1109.554890][ T4837] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1109.570345][ T4837] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 1109.578449][ T4837] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1109.585796][ T4837] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.10671: bg 0: block 361: padding at end of block bitmap is not set [ 1109.648064][ T4837] EXT4-fs (loop6): Remounting filesystem read-only [ 1109.655577][ T4837] EXT4-fs (loop6): 1 truncate cleaned up [ 1109.662102][ T4837] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1111.724381][ T4848] loop0: detected capacity change from 0 to 512 [ 1111.765251][ T4848] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1112.557665][ T4852] loop7: detected capacity change from 0 to 1024 [ 1112.564704][ T4852] EXT4-fs: Ignoring removed orlov option [ 1112.582244][ T4848] EXT4-fs (loop0): 1 truncate cleaned up [ 1112.588456][ T4848] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1112.610162][ T4852] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1112.962126][ T3943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1113.238885][T30085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1113.967695][T29635] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1114.226120][ T4872] hub 9-0:1.0: USB hub found [ 1114.239313][ T4872] hub 9-0:1.0: 8 ports detected [ 1115.071450][ T4885] sch_fq: defrate 4294967295 ignored. [ 1115.183056][ T4894] loop6: detected capacity change from 0 to 256 [ 1115.341144][ T4902] tipc: Enabled bearer , priority 0 [ 1115.348178][ T4902] syzkaller0: entered promiscuous mode [ 1115.353720][ T4902] syzkaller0: entered allmulticast mode [ 1115.361422][ T4902] tipc: Resetting bearer [ 1115.368110][ T4901] tipc: Resetting bearer [ 1115.378622][ T4901] tipc: Disabling bearer [ 1115.770818][ T4907] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10691'. [ 1116.322504][ T4914] loop6: detected capacity change from 0 to 512 [ 1116.341010][ T4914] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1116.368414][ T4914] ext4 filesystem being mounted at /467/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1117.028233][ T4925] loop0: detected capacity change from 0 to 1024 [ 1117.045159][ T4925] EXT4-fs: test_dummy_encryption option not supported [ 1117.365954][ T4927] loop7: detected capacity change from 0 to 512 [ 1117.399144][ T4927] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1117.523727][ T4927] EXT4-fs (loop7): 1 truncate cleaned up [ 1117.592541][ T4927] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1118.001868][T29635] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1118.134238][ T4955] netlink: 'syz.4.10703': attribute type 16 has an invalid length. [ 1118.147863][ T4955] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1118.956646][ T4962] loop0: detected capacity change from 0 to 1024 [ 1118.963808][ T4962] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1118.995647][ T4962] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.10704: Invalid block bitmap block 0 in block_group 0 [ 1119.009462][ T4962] Quota error (device loop0): write_blk: dquota write failed [ 1119.016891][ T4962] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1119.026975][ T4962] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.10704: Failed to acquire dquot type 0 [ 1119.038719][ T4962] EXT4-fs error (device loop0): ext4_free_blocks:6706: comm syz.0.10704: Freeing blocks not in datazone - block = 0, count = 4096 [ 1119.052633][ T4962] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.10704: Invalid inode bitmap blk 0 in block_group 0 [ 1119.065498][ T4962] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 1119.074165][ T407] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 1119.083185][ T407] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 1119.094889][ T4962] EXT4-fs (loop0): 1 orphan inode deleted [ 1119.101101][ T4962] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1119.116831][T30085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1119.229697][ T4973] hub 9-0:1.0: USB hub found [ 1119.248106][ T4974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1119.255929][ T4974] 8021q: adding VLAN 0 to HW filter on device team0 [ 1119.269820][ T4973] hub 9-0:1.0: 8 ports detected [ 1119.289275][ T4974] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1119.401300][ T4977] netlink: 'syz.6.10710': attribute type 13 has an invalid length. [ 1119.460138][ T4977] gretap0: refused to change device tx_queue_len [ 1119.494701][ T4977] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1119.744970][ T3943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1120.643388][ T4990] loop6: detected capacity change from 0 to 512 [ 1120.667032][ T4990] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1120.890235][ T4990] EXT4-fs (loop6): 1 truncate cleaned up [ 1120.896950][ T4990] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1121.210435][T30085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1121.956186][ T5004] loop7: detected capacity change from 0 to 256 [ 1121.962813][ T5004] vfat: Unknown parameter 'u' [ 1122.361974][ T5019] netlink: 'syz.7.10721': attribute type 16 has an invalid length. [ 1122.376047][ T5019] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1122.883946][ T5028] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1123.202323][ T5025] loop6: detected capacity change from 0 to 512 [ 1123.334640][ T5033] loop6: detected capacity change from 0 to 1024 [ 1123.441211][ T5035] loop0: detected capacity change from 0 to 512 [ 1123.462038][ T5035] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1123.538807][ T5035] EXT4-fs (loop0): 1 truncate cleaned up [ 1123.552577][ T5035] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1123.644210][ T5047] loop7: detected capacity change from 0 to 256 [ 1123.682398][ T5050] loop7: detected capacity change from 0 to 256 [ 1123.689227][ T5050] vfat: Unknown parameter 'u' [ 1123.899035][ T3943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.115483][ T5058] loop7: detected capacity change from 0 to 512 [ 1124.122426][ T5058] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1124.139101][ T5058] EXT4-fs (loop7): 1 truncate cleaned up [ 1124.145188][ T5058] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1124.203655][T29635] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1125.111096][ T5084] netlink: 'syz.6.10742': attribute type 16 has an invalid length. [ 1125.129881][ T5084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1125.138153][ T5084] 8021q: adding VLAN 0 to HW filter on device team0 [ 1125.219141][ T5084] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1125.249959][ T5087] 9pnet_fd: Insufficient options for proto=fd [ 1125.662557][ T5102] loop7: detected capacity change from 0 to 1024 [ 1126.261955][ T5117] loop0: detected capacity change from 0 to 512 [ 1126.396806][ T5117] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1126.418409][ T5117] EXT4-fs (loop0): 1 truncate cleaned up [ 1126.424559][ T5117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1128.214567][ T5140] loop6: detected capacity change from 0 to 512 [ 1128.436204][ T5140] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1128.481889][ T5140] ext4 filesystem being mounted at /481/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1128.695959][ T5152] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10763'. [ 1128.918057][ T29] audit: type=1326 audit(1759881488.366:9176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5155 comm="syz.4.10765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f274273eec9 code=0x7ffc0000 [ 1128.941624][ T29] audit: type=1326 audit(1759881488.366:9177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5155 comm="syz.4.10765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f274273eec9 code=0x7ffc0000 [ 1128.965153][ T29] audit: type=1326 audit(1759881488.366:9178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5155 comm="syz.4.10765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f274273eec9 code=0x7ffc0000 [ 1129.380897][ T5163] loop7: detected capacity change from 0 to 1024 [ 1129.426314][ T5163] EXT4-fs: inline encryption not supported [ 1129.629233][ T5163] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1129.906494][ T5171] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10767'. [ 1129.919552][ T5171] bridge0: port 3(syz_tun) entered blocking state [ 1129.926029][ T5171] bridge0: port 3(syz_tun) entered disabled state [ 1129.932694][ T5171] syz_tun: entered allmulticast mode [ 1129.939874][ T5171] syz_tun: entered promiscuous mode [ 1130.665266][T29635] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1131.668300][ T5179] bridge0: port 3(syz_tun) entered blocking state [ 1131.674852][ T5179] bridge0: port 3(syz_tun) entered forwarding state [ 1131.685965][ T5179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1131.708194][ T5179] 8021q: adding VLAN 0 to HW filter on device team0 [ 1131.734693][ T5179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1132.498536][ T1389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1132.507988][ T1389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1132.517220][ T1389] bond0 (unregistering): Released all slaves [ 1132.534765][ T3943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1132.557771][ T1389] tipc: Left network mode [ 1132.580548][ T1389] hsr_slave_0: left promiscuous mode [ 1132.586361][ T1389] hsr_slave_1: left promiscuous mode [ 1132.598968][ T1389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.606622][ T1389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1132.716136][ T1389] team0 (unregistering): Port device team_slave_1 removed [ 1132.734942][ T1389] team0 (unregistering): Port device team_slave_0 removed [ 1132.922153][ T5188] chnl_net:caif_netlink_parms(): no params data found [ 1133.003645][ T5208] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10778'. [ 1133.041015][ T5188] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.048150][ T5188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.067746][ T5188] bridge_slave_0: entered allmulticast mode [ 1133.080614][ T5188] bridge_slave_0: entered promiscuous mode [ 1133.102439][ T5188] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.109687][ T5188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.132511][ T5188] bridge_slave_1: entered allmulticast mode [ 1133.146645][ T5188] bridge_slave_1: entered promiscuous mode [ 1133.184814][ T5188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1133.203485][T30085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1133.214478][ T5188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1133.221387][ T5210] loop7: detected capacity change from 0 to 512 [ 1133.232243][ T5210] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1133.263662][ T5210] EXT4-fs (loop7): 1 truncate cleaned up [ 1133.265981][ T5188] team0: Port device team_slave_0 added [ 1133.269965][ T5210] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1133.290540][ T5188] team0: Port device team_slave_1 added [ 1133.310771][ T5188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1133.317834][ T5188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1133.343854][ T5188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1133.393392][ T5188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1133.400518][ T5188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1133.426458][ T5188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1133.526569][ T5188] hsr_slave_0: entered promiscuous mode [ 1133.533179][ T5188] hsr_slave_1: entered promiscuous mode [ 1133.541561][ T5188] debugfs: 'hsr0' already exists in 'hsr' [ 1133.547329][ T5188] Cannot create hsr debugfs directory [ 1133.962707][T29635] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1134.018542][ T5225] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1134.273466][ T5231] loop7: detected capacity change from 0 to 512 [ 1134.280413][ T5231] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1134.306442][ T5188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1134.315979][ T5188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1134.325596][ T5188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1134.334982][ T5188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1134.458854][ T5231] EXT4-fs (loop7): 1 truncate cleaned up [ 1134.465010][ T5231] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1134.627307][ T5188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1134.638585][T29635] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1134.641988][ T5188] 8021q: adding VLAN 0 to HW filter on device team0 [ 1134.659609][ T1367] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.666725][ T1367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1134.666921][ T5245] loop6: detected capacity change from 0 to 512 [ 1134.690589][ T5247] loop7: detected capacity change from 0 to 256 [ 1134.697244][ T5247] vfat: Unknown parameter 'u' [ 1134.703691][ T1367] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.709344][ T5245] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1134.710784][ T1367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1134.731234][ T5245] ext4 filesystem being mounted at /484/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1134.965367][ T5188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1135.043668][ T5188] veth0_vlan: entered promiscuous mode [ 1135.051710][ T5188] veth1_vlan: entered promiscuous mode [ 1135.075569][ T5188] veth0_macvtap: entered promiscuous mode [ 1135.083576][ T5188] veth1_macvtap: entered promiscuous mode [ 1135.099417][ T5188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1135.110488][ T5188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1135.121624][ T1380] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.130648][ T1380] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.139664][ T1380] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.248236][ T1380] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.493619][T30085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1135.688795][ T5280] netlink: 76 bytes leftover after parsing attributes in process `syz.6.10791'. [ 1135.857142][ T5285] loop0: detected capacity change from 0 to 1024 [ 1135.866593][ T5285] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1135.917668][ T5285] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.10792: Invalid block bitmap block 0 in block_group 0 [ 1135.931965][ T5285] Quota error (device loop0): write_blk: dquota write failed [ 1135.939478][ T5285] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1135.949647][ T5285] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.10792: Failed to acquire dquot type 0 [ 1135.964944][ T5285] EXT4-fs error (device loop0): ext4_free_blocks:6706: comm syz.0.10792: Freeing blocks not in datazone - block = 0, count = 4096 [ 1135.986304][ T5285] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.10792: Invalid inode bitmap blk 0 in block_group 0 [ 1135.999740][ T1380] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 1136.008728][ T1380] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:16: Failed to release dquot type 0 [ 1136.020866][ T5285] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 1136.030753][ T5285] EXT4-fs (loop0): 1 orphan inode deleted [ 1136.036889][ T5285] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1136.330239][ T5291] loop7: detected capacity change from 0 to 1024 [ 1137.949801][ T5307] loop7: detected capacity change from 0 to 128 [ 1138.538392][ T5316] loop6: detected capacity change from 0 to 512 [ 1138.545612][ T5316] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1138.557709][ T5316] EXT4-fs (loop6): 1 truncate cleaned up [ 1138.563900][ T5316] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1138.845578][ T5319] syz.7.10801: attempt to access beyond end of device [ 1138.845578][ T5319] loop7: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 1139.002627][ T5324] netlink: 'syz.3.10803': attribute type 16 has an invalid length. [ 1139.095321][ T5324] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1139.116264][ T3943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1139.268556][ T5326] loop7: detected capacity change from 0 to 128 [ 1140.097838][ T5332] hub 9-0:1.0: USB hub found [ 1140.102867][ T5332] hub 9-0:1.0: 8 ports detected [ 1140.239469][ T1380] kworker/u8:16: attempt to access beyond end of device [ 1140.239469][ T1380] loop7: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1140.640686][ T5342] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10808'. [ 1141.513399][T30085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1141.611279][ T5358] netlink: 'syz.3.10812': attribute type 13 has an invalid length. [ 1141.622148][ T5358] gretap0: refused to change device tx_queue_len [ 1141.629197][ T5358] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1142.220878][ T5360] loop6: detected capacity change from 0 to 256 [ 1142.266984][ T5364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1142.275636][ T5364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1142.399581][ T5370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10818'. [ 1143.626612][ T5389] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10823'. [ 1143.979134][ T5401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1143.989502][ T5403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10829'. [ 1144.011290][ T5401] 8021q: adding VLAN 0 to HW filter on device team0 [ 1144.043890][ T5401] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1144.231720][ T5407] loop6: detected capacity change from 0 to 512 [ 1144.250139][ T5407] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1144.262740][ T5407] ext4 filesystem being mounted at /493/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1145.148027][ T5431] netlink: 'syz.4.10836': attribute type 16 has an invalid length. [ 1145.341650][ T5431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1145.387813][ T5431] 8021q: adding VLAN 0 to HW filter on device team0 [ 1145.468054][ T5431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1146.161510][ T5440] loop0: detected capacity change from 0 to 512 [ 1146.342991][ T5443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10840'. [ 1146.356842][ T5440] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1146.396566][ T5440] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1146.550799][ T5452] tipc: Started in network mode [ 1146.555760][ T5452] tipc: Node identity aa34afee7bf5, cluster identity 4711 [ 1146.563020][ T5452] tipc: Enabled bearer , priority 0 [ 1146.610778][ T5452] syzkaller0: entered promiscuous mode [ 1146.616300][ T5452] syzkaller0: entered allmulticast mode [ 1146.829046][ T5451] tipc: Resetting bearer [ 1146.878493][ T5451] tipc: Disabling bearer [ 1147.025671][ T3943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1147.331320][ T5472] loop7: detected capacity change from 0 to 512 [ 1147.367907][ T5472] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1147.457983][ T5472] EXT4-fs (loop7): 1 truncate cleaned up [ 1147.478374][ T5472] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1148.143054][ T5479] netlink: 'syz.3.10850': attribute type 13 has an invalid length. [ 1148.178084][ T5479] gretap0: refused to change device tx_queue_len [ 1148.185439][ T5479] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1148.300473][T30085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1148.327940][ T29] audit: type=1326 audit(1759881507.776:9179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5483 comm="syz.6.10852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc46b9eec9 code=0x7ffc0000 [ 1148.560300][ T5488] SELinux: policydb magic number 0x6d656d6b does not match expected magic number 0xf97cff8c [ 1148.623892][ T5488] SELinux: failed to load policy [ 1148.790624][ T29] audit: type=1326 audit(1759881507.816:9180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5483 comm="syz.6.10852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fdc46b9eec9 code=0x7ffc0000 [ 1148.814184][ T29] audit: type=1326 audit(1759881507.816:9181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5483 comm="syz.6.10852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc46b9eec9 code=0x7ffc0000 [ 1148.837803][ T29] audit: type=1326 audit(1759881507.816:9182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5483 comm="syz.6.10852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fdc46b9eec9 code=0x7ffc0000 [ 1148.861342][ T29] audit: type=1326 audit(1759881507.816:9183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5483 comm="syz.6.10852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc46b9eec9 code=0x7ffc0000 [ 1148.884846][ T29] audit: type=1326 audit(1759881507.816:9184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5483 comm="syz.6.10852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fdc46b9eec9 code=0x7ffc0000 [ 1148.908362][ T29] audit: type=1326 audit(1759881507.816:9185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5483 comm="syz.6.10852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc46b9eec9 code=0x7ffc0000 [ 1148.931879][ T29] audit: type=1326 audit(1759881507.816:9186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5483 comm="syz.6.10852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fdc46b9eec9 code=0x7ffc0000 [ 1148.955406][ T29] audit: type=1326 audit(1759881507.816:9187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5483 comm="syz.6.10852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc46b9eec9 code=0x7ffc0000 [ 1148.978910][ T29] audit: type=1326 audit(1759881507.816:9188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5483 comm="syz.6.10852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdc46b9eec9 code=0x7ffc0000 [ 1149.301470][ T5495] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10856'. [ 1149.817347][ T5504] tipc: Started in network mode [ 1149.822412][ T5504] tipc: Node identity fa2f71d669dc, cluster identity 4711 [ 1149.829667][ T5504] tipc: Enabled bearer , priority 0 [ 1149.836789][ T5504] syzkaller0: entered promiscuous mode [ 1149.842363][ T5504] syzkaller0: entered allmulticast mode [ 1149.850872][ T5503] tipc: Resetting bearer [ 1149.907329][ T5503] tipc: Disabling bearer [ 1150.162198][ T5514] hub 9-0:1.0: USB hub found [ 1150.172236][ T5514] hub 9-0:1.0: 8 ports detected [ 1150.964423][T29635] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1151.093320][ T5528] netlink: 'syz.6.10866': attribute type 13 has an invalid length. [ 1151.190265][ T5528] gretap0: refused to change device tx_queue_len [ 1151.197399][ T5528] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1151.850008][ T5537] loop7: detected capacity change from 0 to 256 [ 1152.003013][ T5545] loop6: detected capacity change from 0 to 512 [ 1152.004400][ T5547] loop0: detected capacity change from 0 to 512 [ 1152.034460][ T5547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1152.047528][ T5547] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1152.047666][ T5544] xt_socket: unknown flags 0x50 [ 1152.073635][ T5545] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1152.179884][ T5545] ext4 filesystem being mounted at /501/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1152.192801][ T5545] netlink: 'syz.6.10870': attribute type 16 has an invalid length. [ 1152.208801][ T5545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1152.681802][ T5556] tipc: Enabling of bearer rejected, failed to enable media [ 1152.889488][ T3943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1153.646888][ T5577] loop0: detected capacity change from 0 to 512 [ 1153.694560][ T5577] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1153.858449][ T5577] EXT4-fs (loop0): 1 truncate cleaned up [ 1153.972242][ T5577] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1154.246831][ T5584] loop7: detected capacity change from 0 to 8192 [ 1154.256900][ T5585] netlink: 'syz.3.10881': attribute type 13 has an invalid length. [ 1154.329239][ T5585] gretap0: refused to change device tx_queue_len [ 1154.398391][ T5585] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1154.558144][ T5584] loop7: p2 p3 p4 [ 1154.562097][ T5584] loop7: p2 start 2936012800 is beyond EOD, truncated [ 1154.568974][ T5584] loop7: p3 start 1912602624 is beyond EOD, truncated [ 1154.575770][ T5584] loop7: p4 size 656640 extends beyond EOD, truncated [ 1154.950337][ T5601] tipc: Enabled bearer , priority 0 [ 1154.978090][ T5601] syzkaller0: entered promiscuous mode [ 1154.983627][ T5601] syzkaller0: entered allmulticast mode [ 1154.994401][ T5600] tipc: Resetting bearer [ 1155.003435][ T5600] tipc: Disabling bearer [ 1155.360409][ T1380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1155.378762][ T1380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1155.398210][ T1380] bond0 (unregistering): Released all slaves [ 1155.413615][ T5590] chnl_net:caif_netlink_parms(): no params data found [ 1155.466102][ T1380] hsr_slave_0: left promiscuous mode [ 1155.474927][ T1380] hsr_slave_1: left promiscuous mode [ 1155.480668][ T1380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1155.517946][ T1380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1155.594589][ T1380] team0 (unregistering): Port device team_slave_1 removed [ 1155.753447][ T1380] team0 (unregistering): Port device team_slave_0 removed [ 1155.868992][ T5611] loop7: detected capacity change from 0 to 512 [ 1155.875906][ T5611] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1155.892875][ T5611] EXT4-fs (loop7): 1 truncate cleaned up [ 1155.899175][ T5611] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1155.899568][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.918931][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.973485][T29635] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1156.002939][ T5590] bridge_slave_0: entered allmulticast mode [ 1156.013709][ T5590] bridge_slave_0: entered promiscuous mode [ 1156.020724][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.027829][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.035021][ T5590] bridge_slave_1: entered allmulticast mode [ 1156.071929][ T5590] bridge_slave_1: entered promiscuous mode [ 1156.127310][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1156.160543][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1156.206021][ T5590] team0: Port device team_slave_0 added [ 1156.219265][ T5590] team0: Port device team_slave_1 added [ 1156.267778][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1156.274867][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1156.300833][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1156.362374][ T5620] hub 9-0:1.0: USB hub found [ 1156.377076][ T5620] hub 9-0:1.0: 8 ports detected [ 1156.406943][T30085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1156.453704][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1156.460854][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1156.486828][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1157.217838][ T5627] loop6: detected capacity change from 0 to 512 [ 1157.396704][ T5627] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1157.557387][ T5627] ext4 filesystem being mounted at /502/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1157.958007][ T5590] hsr_slave_0: entered promiscuous mode [ 1157.964175][ T5590] hsr_slave_1: entered promiscuous mode [ 1157.970182][ T5590] debugfs: 'hsr0' already exists in 'hsr' [ 1157.971793][ T3943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1157.975925][ T5590] Cannot create hsr debugfs directory [ 1158.203329][ T5637] loop0: detected capacity change from 0 to 1024 [ 1158.224745][ T5634] hub 9-0:1.0: USB hub found [ 1158.230701][ T5634] hub 9-0:1.0: 8 ports detected [ 1158.501604][ T5590] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1158.528313][ T5590] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1158.542543][ T5590] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1158.559281][ T5590] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1158.679618][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1158.694556][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 1158.704901][ T1389] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.712059][ T1389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1158.733066][ T5590] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1158.743590][ T5590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1158.757707][ T1389] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.764879][ T1389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1158.829088][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1159.004242][ T5590] veth0_vlan: entered promiscuous mode [ 1159.015082][ T5590] veth1_vlan: entered promiscuous mode [ 1159.102213][ T5670] loop7: detected capacity change from 0 to 512 [ 1159.125668][ T5590] veth0_macvtap: entered promiscuous mode [ 1159.156235][ T5590] veth1_macvtap: entered promiscuous mode [ 1159.167522][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1159.179652][ T5670] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1159.181613][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1159.212863][ T1372] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.241324][ T5670] ext4 filesystem being mounted at /516/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1159.252287][ T1372] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.261197][ T1372] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.268409][ T5678] loop0: detected capacity change from 0 to 1024 [ 1159.271872][ T1372] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.279374][ T5678] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1159.352546][ T5678] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1159.372473][ T5678] EXT4-fs error (device loop0): ext4_get_journal_inode:5808: inode #32: comm syz.0.10898: iget: special inode unallocated [ 1159.406937][ T5678] EXT4-fs (loop0): Remounting filesystem read-only [ 1159.423743][ T5678] EXT4-fs (loop0): no journal found [ 1159.429117][ T5678] EXT4-fs (loop0): can't get journal size [ 1159.468448][ T5678] EXT4-fs (loop0): filesystem is read-only [ 1159.498484][ T5684] loop4: detected capacity change from 0 to 1024 [ 1159.510719][ T5684] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1159.530088][ T5684] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.10883: Invalid block bitmap block 0 in block_group 0 [ 1159.544156][ T5684] __quota_error: 15 callbacks suppressed [ 1159.544176][ T5684] Quota error (device loop4): write_blk: dquota write failed [ 1159.557322][ T5684] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1159.567373][ T5684] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.10883: Failed to acquire dquot type 0 [ 1159.581174][ T5684] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.10883: Freeing blocks not in datazone - block = 0, count = 4096 [ 1159.595478][ T5684] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.10883: Invalid inode bitmap blk 0 in block_group 0 [ 1159.609056][ T5684] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 1159.618056][ T1389] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8 [ 1159.627060][ T1389] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:18: Failed to release dquot type 0 [ 1159.639863][ T5684] EXT4-fs (loop4): 1 orphan inode deleted [ 1159.646497][ T5684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1159.675463][ T5678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1159.833780][ T3943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1160.040321][T29635] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1160.961860][ T5699] tipc: Enabled bearer , priority 0 [ 1161.035952][ T5700] xt_socket: unknown flags 0x50 [ 1161.394560][ T5699] syzkaller0: entered promiscuous mode [ 1161.400075][ T5699] syzkaller0: entered allmulticast mode [ 1161.456635][ T5698] tipc: Resetting bearer [ 1161.476457][ T5698] tipc: Disabling bearer [ 1161.988346][ T5590] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1162.694718][T30085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1162.744563][ T5716] netlink: 76 bytes leftover after parsing attributes in process `syz.7.10907'. [ 1162.814469][ T5718] loop4: detected capacity change from 0 to 512 [ 1162.821478][ T5718] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1162.833681][ T5718] EXT4-fs (loop4): 1 truncate cleaned up [ 1162.839833][ T5718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1162.903203][ T5590] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1162.976664][ T5725] netlink: 'syz.4.10909': attribute type 13 has an invalid length. [ 1162.996892][ T5725] gretap0: refused to change device tx_queue_len [ 1163.003897][ T5725] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1163.666798][ T5736] tipc: Enabled bearer , priority 0 [ 1163.675383][ T5736] tipc: Resetting bearer [ 1163.682631][ T5735] tipc: Disabling bearer [ 1163.741473][ T29] audit: type=1326 audit(1760405811.334:9204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.6.10914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc46b9eec9 code=0x7ffc0000 [ 1163.765212][ T29] audit: type=1326 audit(1760405811.334:9205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.6.10914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc46b9eec9 code=0x7ffc0000 [ 1163.794730][ T29] audit: type=1326 audit(1760405811.334:9206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.6.10914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc46b9eec9 code=0x7ffc0000 [ 1163.818494][ T29] audit: type=1326 audit(1760405811.334:9207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.6.10914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc46b9eec9 code=0x7ffc0000 [ 1163.842158][ T29] audit: type=1326 audit(1760405811.334:9208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.6.10914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc46b9eec9 code=0x7ffc0000 [ 1163.865861][ T29] audit: type=1326 audit(1760405811.334:9209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.6.10914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc46b9eec9 code=0x7ffc0000 [ 1163.889558][ T29] audit: type=1326 audit(1760405811.334:9210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.6.10914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc46b9eec9 code=0x7ffc0000 [ 1164.203605][ T5746] xt_socket: unknown flags 0x50 [ 1164.404230][ T5749] hub 9-0:1.0: USB hub found [ 1164.425077][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 1164.425095][ T29] audit: type=1326 audit(1760405812.029:9348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.6.10914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdc46b95d67 code=0x7ffc0000 [ 1164.449806][ T5749] hub 9-0:1.0: 8 ports detected [ 1164.465437][ T29] audit: type=1326 audit(1760405812.070:9349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.6.10914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdc46b3af79 code=0x7ffc0000 [ 1164.489076][ T29] audit: type=1326 audit(1760405812.070:9350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.6.10914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdc46b95d67 code=0x7ffc0000 [ 1164.512550][ T29] audit: type=1326 audit(1760405812.070:9351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.6.10914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdc46b3af79 code=0x7ffc0000 [ 1164.536285][ T29] audit: type=1326 audit(1760405812.070:9352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.6.10914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc46b9eec9 code=0x7ffc0000 [ 1164.577075][ T29] audit: type=1326 audit(1760405812.070:9353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.6.10914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdc46b95d67 code=0x7ffc0000 [ 1164.600819][ T29] audit: type=1326 audit(1760405812.070:9354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.6.10914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdc46b3af79 code=0x7ffc0000 [ 1164.624335][ T29] audit: type=1326 audit(1760405812.070:9355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.6.10914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc46b9eec9 code=0x7ffc0000 [ 1164.648024][ T29] audit: type=1326 audit(1760405812.080:9356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.6.10914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdc46b95d67 code=0x7ffc0000 [ 1164.671457][ T29] audit: type=1326 audit(1760405812.080:9357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.6.10914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdc46b3af79 code=0x7ffc0000 [ 1164.982525][ T5767] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10922'. [ 1165.058433][ T5771] netlink: 'syz.4.10925': attribute type 13 has an invalid length. [ 1165.076494][ T5771] gretap0: refused to change device tx_queue_len [ 1165.083430][ T5771] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1165.270886][ T5775] tipc: Enabled bearer , priority 0 [ 1165.288764][ T5775] tipc: Resetting bearer [ 1165.296673][ T5774] tipc: Disabling bearer [ 1167.549973][ T5797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1168.033825][ T5806] xt_socket: unknown flags 0x50 [ 1168.369099][ T5808] loop0: detected capacity change from 0 to 512 [ 1168.389177][ T5808] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1168.429633][ T5808] EXT4-fs (loop0): 1 truncate cleaned up [ 1168.435850][ T5808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1168.691026][ T5816] veth0_vlan: entered allmulticast mode [ 1168.962281][ T5823] netlink: 76 bytes leftover after parsing attributes in process `syz.4.10940'. [ 1168.986637][ T5824] netlink: 'syz.3.10939': attribute type 16 has an invalid length. [ 1169.012320][ T5824] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1169.631023][ T3943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.344080][ T5844] loop7: detected capacity change from 0 to 512 [ 1170.351051][ T5844] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1170.361369][ T5844] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e01c, mo2=0102] [ 1170.369445][ T5844] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1170.376394][ T5844] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.10946: bg 0: block 361: padding at end of block bitmap is not set [ 1170.391009][ T5844] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 1170.400336][ T5844] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #11: comm syz.7.10946: attempt to clear invalid blocks 33619980 len 1 [ 1170.414614][ T5844] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.10946: invalid indirect mapped block 1811939328 (level 0) [ 1170.428897][ T5844] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.10946: invalid indirect mapped block 2185560079 (level 1) [ 1170.444107][ T5844] EXT4-fs (loop7): 1 truncate cleaned up [ 1170.451126][ T5844] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1170.478990][ T5844] vhci_hcd: invalid port number 0 [ 1170.709816][ T5849] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1171.680000][ T5853] syzkaller0: entered promiscuous mode [ 1171.685545][ T5853] syzkaller0: entered allmulticast mode [ 1171.934469][ T5861] loop6: detected capacity change from 0 to 256 [ 1172.152758][T29635] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1172.512917][ T5873] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10955'. [ 1172.851639][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 1172.851699][ T29] audit: type=1400 audit(1760405820.605:9387): avc: denied { watch watch_reads } for pid=5879 comm="syz.6.10958" path="/516/file0" dev="tmpfs" ino=2759 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1173.138589][ T5888] loop6: detected capacity change from 0 to 512 [ 1173.145617][ T5888] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1173.162711][ T5888] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1173.176069][ T5888] ext4 filesystem being mounted at /519/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1173.424326][ T5888] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 1173.439116][ T5888] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2048 with error 28 [ 1173.451753][ T5888] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1173.451753][ T5888] [ 1173.461423][ T5888] EXT4-fs (loop6): Total free blocks count 0 [ 1173.467416][ T5888] EXT4-fs (loop6): Free/Dirty block details [ 1173.473354][ T5888] EXT4-fs (loop6): free_blocks=39626 [ 1173.478670][ T5888] EXT4-fs (loop6): dirty_blocks=4096 [ 1173.483949][ T5888] EXT4-fs (loop6): Block reservation details [ 1173.489945][ T5888] EXT4-fs (loop6): i_reserved_data_blocks=4096 [ 1173.531805][ T1389] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2046 with error 28 [ 1173.927715][ T5909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1173.936444][ T5909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1174.097084][ T5910] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1174.108951][ T5910] loop6: detected capacity change from 0 to 512 [ 1174.115877][ T5910] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1174.126419][ T5910] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 1174.134458][ T5910] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1174.141345][ T5910] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.10967: bg 0: block 361: padding at end of block bitmap is not set [ 1174.156540][ T5910] EXT4-fs (loop6): Remounting filesystem read-only [ 1174.163575][ T5910] EXT4-fs (loop6): 1 truncate cleaned up [ 1174.169674][ T5910] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1174.274609][ T5915] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1174.320107][ T5917] loop0: detected capacity change from 0 to 1024 [ 1174.642344][ T5923] loop4: detected capacity change from 0 to 512 [ 1174.649192][ T5923] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1174.660947][ T5923] EXT4-fs (loop4): 1 truncate cleaned up [ 1174.667020][ T5923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1174.757624][ T5928] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10973'. [ 1175.206183][ T5934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1175.214796][ T5934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1175.360547][ T5590] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1175.423120][ T5935] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1175.432731][ T5935] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10976'. [ 1175.449450][ T5935] loop7: detected capacity change from 0 to 512 [ 1175.456658][ T5935] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1175.467217][ T5935] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 1175.475529][ T5935] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1175.482686][ T5935] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.10976: bg 0: block 361: padding at end of block bitmap is not set [ 1175.491677][ T5944] netlink: 'syz.4.10978': attribute type 16 has an invalid length. [ 1175.498478][ T5935] EXT4-fs (loop7): Remounting filesystem read-only [ 1175.514089][ T5935] EXT4-fs (loop7): 1 truncate cleaned up [ 1175.520231][ T5935] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1175.579155][ T5944] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1176.942313][T30085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1177.107462][ T5961] loop0: detected capacity change from 0 to 1024 [ 1177.132001][ T5963] loop6: detected capacity change from 0 to 1024 [ 1177.145452][ T5963] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1177.170142][ T5963] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.10984: Invalid block bitmap block 0 in block_group 0 [ 1177.187547][ T5963] Quota error (device loop6): write_blk: dquota write failed [ 1177.195048][ T5963] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1177.205047][ T5963] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.10984: Failed to acquire dquot type 0 [ 1177.218479][ T5963] EXT4-fs error (device loop6): ext4_free_blocks:6706: comm syz.6.10984: Freeing blocks not in datazone - block = 0, count = 4096 [ 1177.232620][ T5963] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.10984: Invalid inode bitmap blk 0 in block_group 0 [ 1177.245635][ T5963] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 1177.254397][ T1367] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-8 [ 1177.263497][ T1367] EXT4-fs error (device loop6): ext4_release_dquot:6981: comm kworker/u8:12: Failed to release dquot type 0 [ 1177.279285][ T5963] EXT4-fs (loop6): 1 orphan inode deleted [ 1177.286127][ T5963] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1178.392376][T29635] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1178.538403][ T5976] loop4: detected capacity change from 0 to 512 [ 1178.600741][ T5976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1178.649900][ T5976] ext4 filesystem being mounted at /17/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1178.837267][ T5590] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1178.846800][T30085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1179.068787][ T5987] netlink: 76 bytes leftover after parsing attributes in process `syz.4.10990'. [ 1179.259038][ T5993] cgroup: Unknown subsys name 'cpuset' [ 1179.385370][ T5985] loop6: detected capacity change from 0 to 512 [ 1179.407526][ T5985] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1179.444680][ T5985] EXT4-fs (loop6): 1 truncate cleaned up [ 1179.466117][ T5985] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1180.115287][ T6002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1180.179607][ T6002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1180.471930][ T6004] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1180.484464][ T6004] loop7: detected capacity change from 0 to 512 [ 1180.491424][ T6004] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1180.501844][ T6004] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 1180.509975][ T6004] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1180.516948][ T6004] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.10995: bg 0: block 361: padding at end of block bitmap is not set [ 1180.544154][ T6004] EXT4-fs (loop7): Remounting filesystem read-only [ 1180.551031][ T6004] EXT4-fs (loop7): 1 truncate cleaned up [ 1180.557296][ T6004] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1181.291613][ T29] audit: type=1400 audit(1760405829.121:9388): avc: denied { setattr } for pid=6010 comm="syz.0.10998" name="/" dev="configfs" ino=2094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1181.691456][ T6016] hub 9-0:1.0: USB hub found [ 1181.696255][ T6016] hub 9-0:1.0: 8 ports detected [ 1181.797798][T30085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1182.682520][ T6028] loop6: detected capacity change from 0 to 1024 [ 1182.956483][ T6037] loop4: detected capacity change from 0 to 512 [ 1182.988716][ T6037] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1183.002005][ T6037] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1183.127959][T29635] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1183.340905][ T6044] loop7: detected capacity change from 0 to 512 [ 1183.383808][ T6044] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1183.396451][ T6044] ext4 filesystem being mounted at /535/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1183.482753][T29635] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1184.470873][ T6070] loop0: detected capacity change from 0 to 512 [ 1184.503971][ T6070] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1184.676362][ T6070] EXT4-fs (loop0): 1 truncate cleaned up [ 1184.698525][ T6070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1184.863749][ T6081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1184.886585][ T6081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1185.064526][ T6082] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1185.076792][ T6082] loop7: detected capacity change from 0 to 512 [ 1185.083857][ T6082] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1185.097734][ T6082] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 1185.105916][ T6082] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1185.112828][ T6082] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.11016: bg 0: block 361: padding at end of block bitmap is not set [ 1185.127566][ T6082] EXT4-fs (loop7): Remounting filesystem read-only [ 1185.135332][ T6082] EXT4-fs (loop7): 1 truncate cleaned up [ 1185.141646][ T6082] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1185.214769][ T6086] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1185.847709][ T5590] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1185.997064][ T6096] bridge0: port 2(bridge_slave_1) entered disabled state [ 1186.004359][ T6096] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.107039][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1186.117259][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1186.183945][ T6102] loop6: detected capacity change from 0 to 512 [ 1186.191747][ T6102] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1186.205759][ T6102] EXT4-fs (loop6): 1 truncate cleaned up [ 1186.212390][ T6102] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1187.073121][ T1389] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.082095][ T1389] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.091240][ T1389] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.101417][ T1389] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.458337][ T3943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1187.603381][T30085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1187.670124][ T6127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1187.678688][ T6127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1187.776194][ T6130] netlink: 'syz.6.11031': attribute type 16 has an invalid length. [ 1187.794924][ T6130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1187.841940][ T6129] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1187.895839][ T6129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11032'. [ 1187.907935][ T6131] loop0: detected capacity change from 0 to 512 [ 1187.924377][T29635] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1187.935827][ T6131] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1187.950030][ T6131] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 1187.958137][ T6131] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1187.969841][ T6131] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.11032: bg 0: block 361: padding at end of block bitmap is not set [ 1188.033837][ T6131] EXT4-fs (loop0): Remounting filesystem read-only [ 1188.040764][ T6131] EXT4-fs (loop0): 1 truncate cleaned up [ 1188.046965][ T6131] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1188.344866][ T6140] netlink: 76 bytes leftover after parsing attributes in process `syz.7.11033'. [ 1189.103939][ T6144] loop4: detected capacity change from 0 to 1024 [ 1189.116608][ T6144] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1189.139519][ T6144] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.11036: Invalid block bitmap block 0 in block_group 0 [ 1189.153446][ T6144] Quota error (device loop4): write_blk: dquota write failed [ 1189.160931][ T6144] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1189.171029][ T6144] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.11036: Failed to acquire dquot type 0 [ 1189.183090][ T6144] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.11036: Freeing blocks not in datazone - block = 0, count = 4096 [ 1189.197057][ T6144] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.11036: Invalid inode bitmap blk 0 in block_group 0 [ 1189.210186][ T6144] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 1189.223008][ T6144] EXT4-fs (loop4): 1 orphan inode deleted [ 1189.229758][ T6144] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1189.250619][ T1369] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8 [ 1189.259642][ T1369] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:13: Failed to release dquot type 0 [ 1190.124922][ T6159] loop6: detected capacity change from 0 to 512 [ 1190.136450][ T6159] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1190.164379][ T6159] EXT4-fs (loop6): 1 truncate cleaned up [ 1190.180500][ T6159] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1190.438703][T30085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1190.703741][ T5590] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1190.763312][ T3943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1190.809868][ T6173] loop4: detected capacity change from 0 to 512 [ 1190.831873][ T6173] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1190.850053][ T6173] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1190.918238][ T6179] veth0_vlan: entered allmulticast mode [ 1191.590849][ T5590] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1191.742082][ T6206] xt_socket: unknown flags 0x50 [ 1191.850296][ T6207] loop4: detected capacity change from 0 to 1024 [ 1191.866494][ T6207] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1191.899360][ T6207] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.11056: Invalid block bitmap block 0 in block_group 0 [ 1191.913737][ T6207] Quota error (device loop4): write_blk: dquota write failed [ 1191.921299][ T6207] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1191.933039][ T6207] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.11056: Failed to acquire dquot type 0 [ 1192.007685][ T6207] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.11056: Freeing blocks not in datazone - block = 0, count = 4096 [ 1192.034228][ T6207] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.11056: Invalid inode bitmap blk 0 in block_group 0 [ 1192.050497][ T1369] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8 [ 1192.059545][ T1369] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:13: Failed to release dquot type 0 [ 1192.073860][ T6207] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 1192.085677][ T6207] EXT4-fs (loop4): 1 orphan inode deleted [ 1192.093823][ T6207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1193.199843][ T6229] loop7: detected capacity change from 0 to 256 [ 1193.749069][ T6229] FAT-fs (loop7): codepage cp852 not found [ 1193.788216][ T6227] netlink: 48 bytes leftover after parsing attributes in process `syz.7.11062'. [ 1194.139090][ T6232] loop0: detected capacity change from 0 to 512 [ 1194.156825][ T6232] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1194.178179][ T6240] bridge0: port 3(syz_tun) entered disabled state [ 1194.299207][ T6232] EXT4-fs (loop0): 1 truncate cleaned up [ 1194.335341][ T6232] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1194.427393][ T5590] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1195.984356][ T6270] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11075'. [ 1196.221774][ T6264] loop7: detected capacity change from 0 to 512 [ 1196.239566][ T6264] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1196.324684][ T6264] EXT4-fs (loop7): 1 truncate cleaned up [ 1196.348868][ T6264] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1196.822657][T29635] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1196.982232][ T6281] loop4: detected capacity change from 0 to 512 [ 1197.095787][ T6281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1197.109122][ T6281] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1197.820738][ T5590] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1198.093846][ T29] audit: type=1326 audit(1760405846.014:9389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.4.11086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6e3deec9 code=0x7ffc0000 [ 1198.117498][ T29] audit: type=1326 audit(1760405846.014:9390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.4.11086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6e3deec9 code=0x7ffc0000 [ 1198.141093][ T29] audit: type=1326 audit(1760405846.014:9391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.4.11086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d6e3deec9 code=0x7ffc0000 [ 1198.164698][ T29] audit: type=1326 audit(1760405846.014:9392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.4.11086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6e3deec9 code=0x7ffc0000 [ 1198.188259][ T29] audit: type=1326 audit(1760405846.014:9393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.4.11086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6e3deec9 code=0x7ffc0000 [ 1198.211784][ T29] audit: type=1326 audit(1760405846.014:9394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.4.11086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d6e3deec9 code=0x7ffc0000 [ 1198.235630][ T29] audit: type=1326 audit(1760405846.014:9395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.4.11086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6e3deec9 code=0x7ffc0000 [ 1198.259443][ T29] audit: type=1326 audit(1760405846.014:9396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.4.11086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f2d6e3deec9 code=0x7ffc0000 [ 1198.282985][ T29] audit: type=1326 audit(1760405846.014:9397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.4.11086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6e3deec9 code=0x7ffc0000 [ 1198.359582][ T29] audit: type=1326 audit(1760405846.044:9398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.4.11086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6e3deec9 code=0x7ffc0000 [ 1198.385251][ T3943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1198.459356][ T6316] loop6: detected capacity change from 0 to 512 [ 1198.484496][ T6316] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1198.497240][ T6308] loop4: detected capacity change from 0 to 512 [ 1198.498138][ T6316] ext4 filesystem being mounted at /545/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1198.504461][ T6308] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1198.541730][ T6308] EXT4-fs (loop4): 1 truncate cleaned up [ 1198.547893][ T6308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1199.150777][ T5590] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1199.250446][ T6331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1199.258811][ T6331] 8021q: adding VLAN 0 to HW filter on device team0 [ 1199.287465][ T6331] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1199.309039][T30085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1199.466399][ T6346] loop0: detected capacity change from 0 to 256 [ 1200.387586][ T6365] ÿÿÿÿÿÿ: renamed from vlan1 [ 1200.408411][ T6367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1200.439358][ T6367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1200.507652][ T6370] loop4: detected capacity change from 0 to 512 [ 1200.520363][ T6370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1200.533207][ T6370] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1200.850170][ T6378] loop7: detected capacity change from 0 to 256 [ 1200.857436][ T6378] vfat: Unknown parameter 'u' [ 1202.194638][ T5590] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1202.679258][ T6412] hub 9-0:1.0: USB hub found [ 1202.707606][ T6412] hub 9-0:1.0: 8 ports detected [ 1203.130894][ T6426] loop4: detected capacity change from 0 to 256 [ 1203.183939][ T6430] loop0: detected capacity change from 0 to 512 [ 1203.203307][ T6430] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1203.216173][ T6430] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1203.245809][ T29] audit: type=1326 audit(1760405851.187:9399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6434 comm="syz.4.11126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6e3deec9 code=0x7ffc0000 [ 1203.269594][ T29] audit: type=1326 audit(1760405851.187:9400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6434 comm="syz.4.11126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6e3deec9 code=0x7ffc0000 [ 1203.293273][ T29] audit: type=1326 audit(1760405851.187:9401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6434 comm="syz.4.11126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d6e3deec9 code=0x7ffc0000 [ 1203.316785][ T29] audit: type=1326 audit(1760405851.187:9402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6434 comm="syz.4.11126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6e3deec9 code=0x7ffc0000 [ 1203.340321][ T29] audit: type=1326 audit(1760405851.187:9403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6434 comm="syz.4.11126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f2d6e3deec9 code=0x7ffc0000 [ 1203.352627][ T6439] loop4: detected capacity change from 0 to 512 [ 1203.363990][ T29] audit: type=1326 audit(1760405851.187:9404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6434 comm="syz.4.11126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6e3deec9 code=0x7ffc0000 [ 1203.371132][ T6439] EXT4-fs: Ignoring removed mblk_io_submit option [ 1203.400175][ T6439] EXT4-fs: inline encryption not supported [ 1203.429917][ T6439] EXT4-fs: test_dummy_encryption option not supported [ 1204.458909][ T3943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1204.708951][ T6458] netlink: 'syz.6.11133': attribute type 13 has an invalid length. [ 1204.723141][ T6458] gretap0: refused to change device tx_queue_len [ 1204.729884][ T6458] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1205.515240][ T6478] loop0: detected capacity change from 0 to 512 [ 1205.527517][ T6478] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1205.540494][ T6478] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1206.266782][ T6499] netlink: 'syz.6.11146': attribute type 13 has an invalid length. [ 1206.276474][ T6499] gretap0: refused to change device tx_queue_len [ 1206.283086][ T6499] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1206.350954][ T29] audit: type=1326 audit(1760405854.293:9405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6500 comm="syz.6.11147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc46b9eec9 code=0x7ffc0000 [ 1206.374556][ T29] audit: type=1326 audit(1760405854.293:9406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6500 comm="syz.6.11147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc46b9eec9 code=0x7ffc0000 [ 1206.573600][ T29] audit: type=1326 audit(1760405854.344:9407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6500 comm="syz.6.11147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc46b9eec9 code=0x7ffc0000 [ 1206.597350][ T29] audit: type=1326 audit(1760405854.344:9408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6500 comm="syz.6.11147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc46b9eec9 code=0x7ffc0000 [ 1206.621302][ T3943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1206.724616][ T6511] netlink: 96 bytes leftover after parsing attributes in process `syz.0.11151'. [ 1206.761570][ T6519] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 1206.786145][ T6522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1206.794685][ T6522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1206.807154][ T6524] netlink: 'syz.3.11157': attribute type 13 has an invalid length. [ 1206.911966][ T6524] gretap0: refused to change device tx_queue_len [ 1206.919255][ T6524] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1207.113739][ T6527] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1207.126171][ T6527] loop0: detected capacity change from 0 to 512 [ 1207.134473][ T6527] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1207.288759][ T6527] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 1207.296878][ T6527] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1207.602756][ T6527] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.11156: bg 0: block 361: padding at end of block bitmap is not set [ 1207.618464][ T6527] EXT4-fs (loop0): Remounting filesystem read-only [ 1207.626039][ T6527] EXT4-fs (loop0): 1 truncate cleaned up [ 1207.632150][ T6527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1208.043508][ T6546] loop6: detected capacity change from 0 to 512 [ 1208.062336][ T6546] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1208.248770][ T6546] EXT4-fs (loop6): 1 truncate cleaned up [ 1208.262903][ T6546] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1208.587061][T30085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1208.606527][ T6562] netlink: 'syz.4.11168': attribute type 16 has an invalid length. [ 1208.781804][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 1208.781845][ T29] audit: type=1326 audit(1760405856.738:9541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.6.11170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc46b9eec9 code=0x7ffc0000 [ 1208.821106][ T6562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1208.830490][ T6562] 8021q: adding VLAN 0 to HW filter on device team0 [ 1208.846330][ T6562] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1208.863835][ T29] audit: type=1326 audit(1760405856.768:9542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.6.11170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc46b9eec9 code=0x7ffc0000 [ 1208.887602][ T29] audit: type=1326 audit(1760405856.768:9543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.6.11170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc46b9eec9 code=0x7ffc0000 [ 1208.911262][ T29] audit: type=1326 audit(1760405856.768:9544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.6.11170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc46b9eec9 code=0x7ffc0000 [ 1208.934810][ T29] audit: type=1326 audit(1760405856.768:9545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.6.11170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc46b9eec9 code=0x7ffc0000 [ 1208.958399][ T29] audit: type=1326 audit(1760405856.778:9546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.6.11170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc46b9eec9 code=0x7ffc0000 [ 1208.982023][ T29] audit: type=1326 audit(1760405856.778:9547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.6.11170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc46b9eec9 code=0x7ffc0000 [ 1209.005767][ T29] audit: type=1326 audit(1760405856.778:9548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.6.11170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc46b9eec9 code=0x7ffc0000 [ 1209.029463][ T29] audit: type=1326 audit(1760405856.778:9549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.6.11170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc46b9eec9 code=0x7ffc0000 [ 1209.053085][ T29] audit: type=1326 audit(1760405856.778:9550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.6.11170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc46b9eec9 code=0x7ffc0000 [ 1209.862273][ T6575] loop6: detected capacity change from 0 to 256 [ 1210.034109][ T3943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1210.068025][ T6575] FAT-fs (loop6): IO charset iso8859-14 not found [ 1210.094342][ T6575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1210.102620][ T6575] 8021q: adding VLAN 0 to HW filter on device team0 [ 1210.112462][ T6575] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1210.498268][ T6584] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11174'. [ 1210.832401][ T6594] xt_socket: unknown flags 0x50 [ 1211.546619][ T6602] loop7: detected capacity change from 0 to 1024 [ 1211.616274][ T6602] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1211.653022][ T6602] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.11181: Invalid block bitmap block 0 in block_group 0 [ 1211.700810][ T6602] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.11181: Failed to acquire dquot type 0 [ 1211.744287][ T6602] EXT4-fs error (device loop7): ext4_free_blocks:6706: comm syz.7.11181: Freeing blocks not in datazone - block = 0, count = 4096 [ 1211.795662][ T6602] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.11181: Invalid inode bitmap blk 0 in block_group 0 [ 1211.823858][ T407] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 1211.831775][ T6602] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 1211.894977][ T6602] EXT4-fs (loop7): 1 orphan inode deleted [ 1211.928651][ T6602] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1213.211298][T29635] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1213.404348][ T6623] hub 9-0:1.0: USB hub found [ 1213.409445][ T6623] hub 9-0:1.0: 8 ports detected [ 1213.564236][ T6627] netlink: 76 bytes leftover after parsing attributes in process `syz.4.11188'. [ 1213.576299][ T6613] netlink: 'syz.3.11183': attribute type 16 has an invalid length. [ 1213.596531][ T6613] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1215.447439][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 1215.447458][ T29] audit: type=1400 audit(1760405863.408:9744): avc: denied { read } for pid=6651 comm="syz.4.11195" name="file0" dev="tmpfs" ino=328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1215.476111][ T29] audit: type=1400 audit(1760405863.408:9745): avc: denied { open } for pid=6651 comm="syz.4.11195" path="/58/file0" dev="tmpfs" ino=328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1217.120505][ T6668] netlink: 'syz.7.11199': attribute type 13 has an invalid length. [ 1217.156788][ T6668] gretap0: refused to change device tx_queue_len [ 1217.177496][ T6668] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1217.783825][ T6677] netlink: 'syz.3.11202': attribute type 16 has an invalid length. [ 1217.802883][ T6677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1218.518224][ T6686] loop7: detected capacity change from 0 to 512 [ 1218.757312][ T6686] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1218.770015][ T6686] ext4 filesystem being mounted at /576/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1219.663131][ T6694] loop0: detected capacity change from 0 to 256 [ 1219.709448][ T6694] FAT-fs (loop0): codepage cp949 not found [ 1219.900365][ T6682] loop6: detected capacity change from 0 to 512 [ 1219.908617][ T6682] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1220.132681][T29635] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1220.227251][ T6682] EXT4-fs (loop6): 1 truncate cleaned up [ 1220.261942][ T6682] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1220.780381][T30085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1223.223525][ T6749] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11222'. [ 1223.870597][ T6756] loop6: detected capacity change from 0 to 512 [ 1223.877470][ T6756] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1223.900799][ T6756] EXT4-fs (loop6): 1 truncate cleaned up [ 1223.906925][ T6756] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1224.632645][T30085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1224.875089][ T6770] loop6: detected capacity change from 0 to 512 [ 1224.882675][ T6770] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1224.966242][ T6770] EXT4-fs (loop6): 1 truncate cleaned up [ 1224.972578][ T6770] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1225.090114][ T6774] loop0: detected capacity change from 0 to 512 [ 1225.159536][ T6774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1225.274850][ T6774] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1225.869106][ T3943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1226.402443][ T6787] loop0: detected capacity change from 0 to 512 [ 1226.424701][ T6787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1226.437243][ T6787] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1226.490988][ T3943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1226.501290][T30085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1226.656459][ T29] audit: type=1326 audit(1760405874.620:9746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6798 comm="syz.0.11232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee85aeec9 code=0x7ffc0000 [ 1226.717763][ T6802] netlink: 'syz.0.11237': attribute type 13 has an invalid length. [ 1226.743755][ T29] audit: type=1326 audit(1760405874.660:9747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6798 comm="syz.0.11232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdee85aeec9 code=0x7ffc0000 [ 1226.767341][ T29] audit: type=1326 audit(1760405874.660:9748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6798 comm="syz.0.11232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee85aeec9 code=0x7ffc0000 [ 1226.767374][ T29] audit: type=1326 audit(1760405874.660:9749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6798 comm="syz.0.11232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdee85aeec9 code=0x7ffc0000 [ 1226.767409][ T29] audit: type=1326 audit(1760405874.660:9750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6798 comm="syz.0.11232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee85aeec9 code=0x7ffc0000 [ 1226.767495][ T29] audit: type=1326 audit(1760405874.660:9751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6798 comm="syz.0.11232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fdee85aeec9 code=0x7ffc0000 [ 1226.767525][ T29] audit: type=1326 audit(1760405874.660:9752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6798 comm="syz.0.11232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee85aeec9 code=0x7ffc0000 [ 1226.767945][ T6802] gretap0: refused to change device tx_queue_len [ 1226.768169][ T6802] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1228.625116][ T6828] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11242'. [ 1228.749979][ T6831] loop6: detected capacity change from 0 to 512 [ 1228.785602][ T6831] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1228.866189][ T6831] ext4 filesystem being mounted at /576/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1229.457010][ T6842] hub 9-0:1.0: USB hub found [ 1229.461792][ T6842] hub 9-0:1.0: 8 ports detected [ 1229.568585][T30085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1229.683256][ T6848] loop0: detected capacity change from 0 to 1024 [ 1229.698233][ T6848] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1229.720556][ T6848] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.11246: Invalid block bitmap block 0 in block_group 0 [ 1229.734435][ T6848] Quota error (device loop0): write_blk: dquota write failed [ 1229.741998][ T6848] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1229.752117][ T6848] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.11246: Failed to acquire dquot type 0 [ 1229.768917][ T6848] EXT4-fs error (device loop0): ext4_free_blocks:6706: comm syz.0.11246: Freeing blocks not in datazone - block = 0, count = 4096 [ 1229.786942][ T6848] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.11246: Invalid inode bitmap blk 0 in block_group 0 [ 1229.800905][ T6848] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 1229.867439][ T6848] EXT4-fs (loop0): 1 orphan inode deleted [ 1229.873863][ T6848] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1229.901943][ T1367] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 1229.911034][ T1367] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:12: Failed to release dquot type 0 [ 1229.922279][ T6851] loop7: detected capacity change from 0 to 512 [ 1229.929800][ T6851] EXT4-fs: Ignoring removed nobh option [ 1229.935704][ T6851] EXT4-fs: Ignoring removed mblk_io_submit option [ 1229.947320][ T6851] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 1229.956638][ T6851] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.11248: invalid indirect mapped block 256 (level 1) [ 1229.970565][ T6851] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.11248: invalid indirect mapped block 2683928664 (level 1) [ 1229.986052][ T6851] EXT4-fs (loop7): 1 truncate cleaned up [ 1229.992393][ T6851] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1230.996901][T29635] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1232.242226][ T3943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1232.542344][ T6887] xt_socket: unknown flags 0x50 [ 1232.832340][ T6888] netlink: 'syz.3.11258': attribute type 16 has an invalid length. [ 1232.852317][ T6888] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1233.953092][ T6903] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1233.993406][ T6905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1234.019394][ T6905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1234.476970][ T6908] hub 9-0:1.0: USB hub found [ 1234.481677][ T6908] hub 9-0:1.0: 8 ports detected [ 1234.614344][ T6914] loop0: detected capacity change from 0 to 1024 [ 1234.622295][ T6914] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1234.638323][ T6914] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.11266: Invalid block bitmap block 0 in block_group 0 [ 1234.652279][ T6914] Quota error (device loop0): write_blk: dquota write failed [ 1234.659699][ T6914] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1234.669738][ T6914] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.11266: Failed to acquire dquot type 0 [ 1234.681974][ T6914] EXT4-fs error (device loop0): ext4_free_blocks:6706: comm syz.0.11266: Freeing blocks not in datazone - block = 0, count = 4096 [ 1234.695606][ T6914] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.11266: Invalid inode bitmap blk 0 in block_group 0 [ 1234.718038][ T6914] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 1234.726768][ T6914] EXT4-fs (loop0): 1 orphan inode deleted [ 1234.733790][ T6914] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1234.749615][ T1369] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 1234.758608][ T1369] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:13: Failed to release dquot type 0 [ 1234.863151][ T6920] tipc: Enabling of bearer rejected, failed to enable media [ 1235.688824][ T6934] x_tables: duplicate underflow at hook 1 [ 1236.039464][ T6938] xt_socket: unknown flags 0x50 [ 1237.390022][ T3943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1237.433763][ T6958] tipc: Enabling of bearer rejected, failed to enable media [ 1237.746740][ T6976] loop0: detected capacity change from 0 to 1024 [ 1237.754632][ T6976] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1237.830783][ T6976] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.11282: Invalid block bitmap block 0 in block_group 0 [ 1237.844826][ T6976] Quota error (device loop0): write_blk: dquota write failed [ 1237.852312][ T6976] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1237.862329][ T6976] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.11282: Failed to acquire dquot type 0 [ 1237.874916][ T6976] EXT4-fs error (device loop0): ext4_free_blocks:6706: comm syz.0.11282: Freeing blocks not in datazone - block = 0, count = 4096 [ 1237.889079][ T6976] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.11282: Invalid inode bitmap blk 0 in block_group 0 [ 1237.902108][ T1372] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 1237.911177][ T1372] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:14: Failed to release dquot type 0 [ 1237.922878][ T6976] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 1237.931650][ T6976] EXT4-fs (loop0): 1 orphan inode deleted [ 1237.938040][ T6976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1239.628128][ T3943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1239.679408][ T29] audit: type=1326 audit(1760405887.660:9753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.3.11288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6655eeeec9 code=0x7ffc0000 [ 1239.817652][ T29] audit: type=1326 audit(1760405887.680:9754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.3.11288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6655eeeec9 code=0x7ffc0000 [ 1239.841287][ T29] audit: type=1326 audit(1760405887.680:9755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.3.11288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6655eeeec9 code=0x7ffc0000 [ 1239.865106][ T29] audit: type=1326 audit(1760405887.680:9756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.3.11288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6655eeeec9 code=0x7ffc0000 [ 1239.888748][ T29] audit: type=1326 audit(1760405887.680:9757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.3.11288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6655eeeec9 code=0x7ffc0000 [ 1239.912403][ T29] audit: type=1326 audit(1760405887.680:9758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.3.11288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f6655eeeec9 code=0x7ffc0000 [ 1239.934225][ T6998] hub 9-0:1.0: USB hub found [ 1239.935904][ T29] audit: type=1326 audit(1760405887.680:9759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.3.11288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6655eeeec9 code=0x7ffc0000 [ 1239.940547][ T6998] hub 9-0:1.0: 8 ports detected [ 1239.976498][ T7001] loop0: detected capacity change from 0 to 1024 [ 1240.049908][ T7001] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1240.170106][ T7001] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.11290: Invalid block bitmap block 0 in block_group 0 [ 1240.184562][ T7001] Quota error (device loop0): write_blk: dquota write failed [ 1240.192021][ T7001] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1240.202034][ T7001] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.11290: Failed to acquire dquot type 0 [ 1240.213876][ T7001] EXT4-fs error (device loop0): ext4_free_blocks:6706: comm syz.0.11290: Freeing blocks not in datazone - block = 0, count = 4096 [ 1240.228137][ T7001] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.11290: Invalid inode bitmap blk 0 in block_group 0 [ 1240.847374][T11961] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 1240.856442][T11961] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:8: Failed to release dquot type 0 [ 1240.917230][ T7001] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 1241.027080][ T7001] EXT4-fs (loop0): 1 orphan inode deleted [ 1241.033593][ T7001] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1241.711699][ T7005] loop4: detected capacity change from 0 to 512 [ 1242.900826][ T7009] tipc: Enabling of bearer rejected, failed to enable media [ 1242.921051][ T7005] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1242.933757][ T7005] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1242.951129][ T7004] netlink: 'syz.4.11291': attribute type 16 has an invalid length. [ 1242.997024][ T7004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1243.017892][ T3943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1243.153747][ T5590] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1243.153837][ T7021] ================================================================== [ 1243.153873][ T7021] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 1243.153919][ T7021] [ 1243.153927][ T7021] write to 0xffffffff868814e0 of 8 bytes by task 5590 on cpu 1: [ 1243.153949][ T7021] data_alloc+0x274/0x2e0 [ 1243.153988][ T7021] prb_reserve+0x807/0xaf0 [ 1243.154004][ T7021] vprintk_store+0x56d/0x860 [ 1243.154026][ T7021] vprintk_emit+0x10d/0x580 [ 1243.154052][ T7021] vprintk_default+0x26/0x30 [ 1243.154079][ T7021] vprintk+0x1d/0x30 [ 1243.154112][ T7021] _printk+0x79/0xa0 [ 1243.154153][ T7021] __ext4_msg+0x18f/0x1a0 [ 1243.154176][ T7021] ext4_put_super+0x90/0x7d0 [ 1243.154195][ T7021] generic_shutdown_super+0xe6/0x210 [ 1243.154228][ T7021] kill_block_super+0x2a/0x70 [ 1243.154249][ T7021] ext4_kill_sb+0x42/0x80 [ 1243.154287][ T7021] deactivate_locked_super+0x75/0x1c0 [ 1243.154329][ T7021] deactivate_super+0x97/0xa0 [ 1243.154378][ T7021] cleanup_mnt+0x269/0x2e0 [ 1243.154411][ T7021] __cleanup_mnt+0x19/0x20 [ 1243.154442][ T7021] task_work_run+0x131/0x1a0 [ 1243.154471][ T7021] exit_to_user_mode_loop+0xed/0x110 [ 1243.154494][ T7021] do_syscall_64+0x1d6/0x200 [ 1243.154514][ T7021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.154534][ T7021] [ 1243.154541][ T7021] read to 0xffffffff868814e0 of 16 bytes by task 7021 on cpu 0: [ 1243.154563][ T7021] _prb_read_valid+0x1bc/0x920 [ 1243.154586][ T7021] prb_read_valid+0x3c/0x60 [ 1243.154608][ T7021] printk_get_next_message+0xc8/0x510 [ 1243.154639][ T7021] console_flush_all+0x290/0x6a0 [ 1243.154666][ T7021] console_unlock+0xa1/0x2e0 [ 1243.154692][ T7021] con_install+0x26b/0x2a0 [ 1243.154720][ T7021] tty_init_dev+0x7c/0x330 [ 1243.154742][ T7021] tty_open+0x6c7/0xaf0 [ 1243.154764][ T7021] chrdev_open+0x2eb/0x3a0 [ 1243.154786][ T7021] do_dentry_open+0x646/0xa20 [ 1243.154822][ T7021] vfs_open+0x37/0x1e0 [ 1243.154858][ T7021] path_openat+0x1c5e/0x2170 [ 1243.154879][ T7021] do_filp_open+0x109/0x230 [ 1243.154894][ T7021] do_sys_openat2+0xa6/0x110 [ 1243.154927][ T7021] __x64_sys_openat+0xf2/0x120 [ 1243.154967][ T7021] x64_sys_call+0x2eab/0x3000 [ 1243.154989][ T7021] do_syscall_64+0xd2/0x200 [ 1243.155012][ T7021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.155033][ T7021] [ 1243.155037][ T7021] Reported by Kernel Concurrency Sanitizer on: [ 1243.155053][ T7021] CPU: 0 UID: 0 PID: 7021 Comm: syz.3.11295 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1243.155091][ T7021] Tainted: [W]=WARN [ 1243.155101][ T7021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1243.155118][ T7021] ================================================================== [ 1243.361134][ T7029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.361268][ T7029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1243.715515][ T7029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1243.724242][ T7029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1243.856455][ T407] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.856576][ T407] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.856755][ T407] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.856798][ T407] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0