last executing test programs: 6m8.627522254s ago: executing program 2 (id=136): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 6m8.475023097s ago: executing program 2 (id=137): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x2000007d, 0x0, 0x4, 0x101, 0x0}) 6m8.247895811s ago: executing program 2 (id=139): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m8.064475155s ago: executing program 2 (id=140): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2004000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 6m6.522120916s ago: executing program 2 (id=145): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 6m4.567189554s ago: executing program 2 (id=152): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r5, 0x4b4a, 0xffffffff7ffffff6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 6m3.998745345s ago: executing program 32 (id=152): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r5, 0x4b4a, 0xffffffff7ffffff6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 4m43.246565964s ago: executing program 3 (id=280): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) 4m41.762721253s ago: executing program 4 (id=282): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x8000006, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r12, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) 4m39.504380658s ago: executing program 3 (id=286): r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x400) r2 = dup(r0) inotify_rm_watch(r2, r1) 4m38.148518514s ago: executing program 3 (id=287): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x70bd26, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0x2}}}, 0xf8}}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r1, 0x2000009) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$eJzs3EFrE08Yx/Hn37RNmtImfxBBQX3Qi16WNr4ADdKCGFBqU9SDsLUbDVmTshsiEbG5iFdfR/HoTVDfQC/ixbu3IgheehBXupttk5rWbU2a2H4/UGa2M7/OLN2WZwud9TuvHpcKrlEwqzKUUBkSaciGSHqz1/Rfsx3y+6PSqiGXxr9/PnP77r0b2VxuZk51Njt/OaOqk+fePXn2+vyH6vjCm8m3cVlL31//lvmydnLt1PrP+UdFV4uulitVNXWxUqmai7alS0W3ZKjesi3TtbRYdi2nbbxgV5aX62qWlyaSy47lumqW61qy6lqtaNWpq/nQLJbVMAydSMrxNhxhTn51bs7M7jrsxbq6I3RfvP1yrNMcx8k2Og/mV3u1LwAAMLj2rv+DWn/3+j+3ELRdrv9FqP97pNF29Yf6H0eC42TNZPPntx31PwAAAAAAAAAAAAAAAAAAAAAA/4INz0t5npcK2/AjLiIJEQmv+71P9MYBv/9X+rRddFnLP+4lROyXtXwtH7TBeLYgRbHFkilJyQ//eWgK+rPXczNT6htpfsnN/EotH/PPJvDzoXSn/Nn/p4O8yvvNXK2ZH5Fk6/oZScmJzutntvPhcQgrtfyoXLzQkjckJR8fSEVsWfKf6+3882nVazdzO9Yf8+ftJsrpGgAAAAAADApDt6Tb33+Dsx8Nf0JCfh8P8vv4+8CO9+thOc1LNAAAAAAAh8KtPy2Ztm05B+jEReQv4ke1E5OB2MaOzlUROfRFRaTRn1tOiEjwGT1I/OtWPFLKizBnWEQG4kmI2On3byYAAAAA3bZd9O8j9OlFD3cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDxE/U8sHB+yVuRtvPtwoE94i3LxQ79BgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAB8isAAP//0KwZYw==") r2 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() setrlimit(0x8, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$PTP_PIN_GETFUNC2(r4, 0xc0603d0f, &(0x7f0000000380)={'\x00', 0x8, 0x3, 0x7}) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) r8 = open(0x0, 0x0, 0x0) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x3, 0x1, 0x5, 0xa, 0x3, 0x1, {0x5, 0x17d, 0x8, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x20000000, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080)=0x2, 0x7f03) 4m36.683178013s ago: executing program 3 (id=290): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x4040844) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000880)={'#! ', '', [], 0xa, "dc375becdc92c43152e8f0d429"}, 0x11) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) 4m36.223424743s ago: executing program 4 (id=292): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 4m35.449463958s ago: executing program 3 (id=295): r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x400) r2 = dup(r0) inotify_rm_watch(r2, r1) 4m34.299519581s ago: executing program 3 (id=297): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x6, 0x4002) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@ptr, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x2000, [{0x0, 0x1}]}]}}, &(0x7f0000000100)=""/226, 0x3e, 0xe2, 0x1}, 0x20) 4m34.152920924s ago: executing program 4 (id=298): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) fcntl$dupfd(r4, 0x0, r1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="170000000000000003000000ff00000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x6, 0x5fe, &(0x7f0000000600)="$eJzs3c9rHFUcAPDvzCYxaaNpRcQWxYCHFqRpUotVL7b1YA8FC/Yg4qGhSWro9gdNCrYWTMGDgoKIV5Fe/Ae8S+/eRFBvnoUqUlFQ6crszqbbZDfdttmdNPP5wGbnvZnd97778jJvZvJ2Aiit8exHGrEj4taJJGKsZd1oNFaO59vd/OPKyeyRRK325u9JJHlec/skf96aJ4Yj4vvDEY9XVpe7cOny6elqreGDiL2LZ87vXbh0ec/8melTs6dmz07te2n/gcmXp/ZPrUucW/PnI0ffePrTD999ce6H6p4kDsbxwfdnYkUc62U8xuNWHmJr/kBEHMgW2nwuD5tNEEKpVfLfx8GIeDLGolJPNYzF/CeFVg7oqVologaUVKL/Q0k1xwHNY/vujoOP93hU0j83DjUOgFbHP9A4NxLD9WOjLTeTliOjxrmNbetQflbGf1d2fpk94o7zEH8vt87AOpTTydLViHiqXfxJvW7b6pFm8aeRtrwuiYjJiBjK6/faA9QhaVnuxXmYtdxL/K3tkH0WB/PnLP/wfZY/viLd7/gBKKfrh/Id+VKWur3/y8YezfFPtBn/jLbZd92Povd/ncd/zf39cP0cebpiHJaNWY61f8vBlRm/fHzk807lt47/skdWfnMs2A83rkbsXBH/R/WBXrLc/kmb9s82OXGwuzJe//G3I53WFR1/7VrErrbHP7dHpdnSGtcn987NV2cnGz/blvHtd+983an8ouPP2n9Lh/hb2j9d+brsMznfZRnfHLt2ptO60bvGn/46lDSON4fynPemFxcvTEUMJUfzTVry961dl+Y2zffI4t/9XPv+f8fv/9U732ek+SezC+ffOn2z07r7af+Wi8m3al3WoZMs/pm7t/+q/p/lfdZlGX+9ffGZTuvWin/kQQIDAAAAAACAEkrr12CTdGJ5OU0nJhrzZZ+ILWn13MLi83PnLp6didhd/3/IwbR5pXuskU6y9FT+/7DN9L4V6RciYntEfFEZqacnTp6rzhQdPAAAAAAAAAAAAAAAAAAAAGwQW/P5/837VP9Zacz/B0qilzeYAzY2/R/Kq97/V93iCSgD+38oL/0fykv/h/LS/6G89H8oL/0fykv/h/LS/wEAAABgU9r+7PWfk4hYemWk/sgM5evMCILNbbDoCgCFqRRdAaAwy5f+DfahdLoa//+Tfzlg76sDFCBpl1kfHNTW7vzX274SAAAAAAAAAAAAAOiBXTs6z/83Nxg2N9P+oLweYP6/rw6Ah5yv/ofycowP3G0W/3CnFeb/AwAAAAAAAAAAAEDfjNYfSTqRzwUejTSdmIh4NCK2xWAyN1+dnYyIxyLip8rgI1l6quhKAwAAAAAAAAAAAAAAAAAAwCazcOny6elqdfZC68K/q3I290LzLqh9KOvVuMdXRdL/j2UkIgpvlJ4tDLTkJBFLWctviIpdWIiNUY36QsF/mAAAAAAAAAAAAAAAAAAAoIRa5h63t/OrPtcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrv9v3/e7dQdIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMPp/wAAAP//4OFAKg==") 4m29.885682968s ago: executing program 4 (id=302): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x10) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 4m26.779226649s ago: executing program 4 (id=307): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x240000, &(0x7f0000000a80)={[{@minixdf}, {@grpid}, {@journal_path={'journal_path', 0x3d, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/'}}, {@data_journal}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@journal_async_commit}, {@data_writeback}, {@jqfmt_vfsv0}, {@noload}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@obj_type={'obj_type', 0x3d, 'PQ]\'\xfa7\x87\xc3W\xe7\xf6\xcc0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000600)={'syztnl0\x00', r6, 0x29, 0x4, 0x9, 0x0, 0x1e, @private2, @loopback, 0x20, 0x8000, 0x6, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x2f, 0xf, 0x4, 0x7, 0x4, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x7800, 0x7, 0x7}}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000780)={0x0, @multicast1, @initdev}, &(0x7f00000007c0)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={r1, 0x58, &(0x7f0000000800)}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000980)={@dev}, &(0x7f00000009c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c80)={'erspan0\x00', &(0x7f0000000a00)={'ip_vti0\x00', 0x0, 0x20, 0x700, 0x6, 0x0, {{0xb, 0x4, 0x0, 0x5, 0x2c, 0x64, 0x0, 0x80, 0x4, 0x0, @remote, @private=0xa010100, {[@ra={0x94, 0x4}, @generic={0x88, 0x2}, @lsrr={0x83, 0xf, 0xbd, [@dev={0xac, 0x14, 0x14, 0x42}, @loopback, @loopback]}, @end]}}}}}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x81) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c16ad803f1f805000600200000000a00060000000000ff0000009061ca2b00001fffff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r5, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x0) socket$inet(0xa, 0x1, 0x0) getsockopt$netlink(r0, 0x10e, 0x8, 0x0, &(0x7f00000001c0)) 4m25.456834586s ago: executing program 4 (id=309): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() waitid(0x1, r1, &(0x7f0000000180), 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x6, 0x7a, 0x0, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_wait(r2, &(0x7f0000000140)=[{}], 0x1, 0x410) 4m13.907096334s ago: executing program 33 (id=297): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x6, 0x4002) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@ptr, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x2000, [{0x0, 0x1}]}]}}, &(0x7f0000000100)=""/226, 0x3e, 0xe2, 0x1}, 0x20) 4m9.936869863s ago: executing program 34 (id=309): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() waitid(0x1, r1, &(0x7f0000000180), 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x6, 0x7a, 0x0, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_wait(r2, &(0x7f0000000140)=[{}], 0x1, 0x410) 2m30.218613427s ago: executing program 6 (id=483): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x400c0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x8, 0x3, 0x650, 0x0, 0xa, 0x148, 0x0, 0x10, 0x5b8, 0x2a8, 0x2a8, 0x5b8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2=0xe000000b, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00', {}, {}, 0x0, 0x1}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x7a, 0x8000000, 0x0, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x64, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_bond\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x6b0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4e0, &(0x7f00000012c0)="$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") 2m25.628411178s ago: executing program 0 (id=490): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) geteuid() setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x4b]}}) 2m25.415264722s ago: executing program 6 (id=491): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) userfaultfd(0x1) 2m24.327481623s ago: executing program 0 (id=492): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x11}, 0x18) 2m24.155345867s ago: executing program 6 (id=494): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x5, 0x1, 0xdc, 0x2, 0x6, 0x6, {0x4, 0x638, 0xfffffffffffffff8, 0x6, 0x0, 0x79, 0x412, 0x9, 0x10000, 0x1000, 0x5, r2, r3, 0x2, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 2m22.514883689s ago: executing program 6 (id=499): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0x42}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000785ceb2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000009500000000000000f84ec6"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$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") r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00') read$FUSE(r4, &(0x7f0000006180)={0x2020}, 0x2020) 2m22.49308139s ago: executing program 0 (id=500): bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ptrace(0x4207, r0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 2m19.731361704s ago: executing program 0 (id=502): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r3, 0x0, 0x0, 0x5405, 0x0, 0x0) 2m17.263351603s ago: executing program 0 (id=505): r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000fcffff0318110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) waitid(0x2, r0, &(0x7f0000000080), 0x40000000, &(0x7f0000000280)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = syz_pidfd_open(0x0, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 2m16.809237272s ago: executing program 6 (id=507): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x5, 0x1, 0xdc, 0x2, 0x6, 0x6, {0x4, 0x638, 0xfffffffffffffff8, 0x6, 0x0, 0x79, 0x412, 0x9, 0x10000, 0x1000, 0x5, r2, r3, 0x2, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 2m15.559432737s ago: executing program 0 (id=509): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) unshare(0x42000000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, 0x0, 0x4000884) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @local}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r2) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x2a) 2m14.629124455s ago: executing program 6 (id=510): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r3, &(0x7f00000000c0)=""/169, 0xa9, 0x4fd9) write$P9_RGETLOCK(r3, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 2m0.328428758s ago: executing program 35 (id=509): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) unshare(0x42000000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, 0x0, 0x4000884) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @local}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r2) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x2a) 1m58.769308769s ago: executing program 36 (id=510): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r3, &(0x7f00000000c0)=""/169, 0xa9, 0x4fd9) write$P9_RGETLOCK(r3, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 1m0.904260824s ago: executing program 1 (id=616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143202, 0xf0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) syz_emit_ethernet(0x2a4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 59.723542328s ago: executing program 1 (id=620): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) close(r2) 59.438813013s ago: executing program 1 (id=623): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ptrace$ARCH_GET_FS(0x1e, r0, 0x0, 0x1003) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313d, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, &(0x7f0000000180)) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000080)="441f0803000000e8c94ef56491ee54be0e1c2074ed", 0x15) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0x38, 0x3a, 0xff, @private2, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "f20700", 0x0, 0x6c, 0x0, @private2, @private1, [@routing={0x16, 0x0, 0x2, 0xe9}]}}}}}}}, 0x0) 57.459837763s ago: executing program 1 (id=626): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0x42}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000785ceb2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000009500000000000000f84ec6"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$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") r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00') read$FUSE(r5, &(0x7f0000006180)={0x2020}, 0x2020) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r6, 0x10e, 0xa, &(0x7f0000000040)=0x200000, 0x4) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@getchain={0x24, 0x66, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0x10}, {0x3, 0x8}, {0x5, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x10) 54.416466553s ago: executing program 7 (id=627): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x144, 0x10, 0x713, 0x0, 0x25dfdbbb, {{@in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e22, 0x200, 0x4e21, 0xa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in=@multicast2, 0xfe, 0x32}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x0, 0x0, 0x0, 0x8, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x1, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}, @extra_flags={0x8, 0x18, 0xe}]}, 0x144}, 0x1, 0x0, 0x0, 0x880}, 0x2000) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0xee01) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x26) socket$pppl2tp(0x18, 0x1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x20000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 53.226852616s ago: executing program 7 (id=628): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) mknod$loop(0x0, 0x2000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 52.859279664s ago: executing program 7 (id=629): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143202, 0xf0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) syz_emit_ethernet(0x2a4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 51.879884133s ago: executing program 7 (id=630): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040)=0x200000, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x10) 51.772559265s ago: executing program 7 (id=631): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r6 = dup(0xffffffffffffffff) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="e6293e94408b143054af9912b2cea173b6ea48cdc9e3ed3b23ab44f3abc02100efe39a66d49476e80e77af234f3bf3feae4f90d055076d410cbbcb2812fb68f2f92ac4d3670f0de8b00c54c25874c85e39f4ea082f3c0e3678a011618b2e6ee3b97ccdb9e077157e540100000044237fbad970281c7c3e974be4e34b87e4761af296c40fe1eda9", @ANYRESHEX=r6, @ANYBLOB=',\x00']) io_uring_register$IORING_UNREGISTER_FILES(r6, 0x3, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000d70400f07203f8add9b67de97fbd8705", @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/20], 0x48) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r7, 0x1) connect$bt_rfcomm(r7, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) close(r7) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00102b00fc020000000000000000000000000000fe8000000000000000000000000000089078"], 0x0) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000000)={0xffffffff, 0x4, 0x5, 0xaeff, 0x7, 0x7}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, 0x0, &(0x7f00000000c0)=""/71}, 0x20) syz_clone(0x60100100, 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000480)) 48.581486768s ago: executing program 1 (id=632): r0 = socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001580)={0x1c, 0x453, 0x4, 0x70bd2b, 0x25dfdbfb, "6e80681b83d8150de741"}, 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) 47.432297601s ago: executing program 7 (id=636): unshare(0x42000000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @local}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r2) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x2a) 44.354876642s ago: executing program 1 (id=640): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000351000/0x2000)=nil) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f00000001c0)={0x1, 0x1, 0x10000000000000a, 0x10000}) fcntl$lock(r5, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x182800, 0x0) ioctl$RTC_AIE_ON(r7, 0x7001) ioctl$RTC_UIE_ON(r7, 0x7003) ioctl$RTC_AIE_OFF(r7, 0x7002) mincore(&(0x7f0000352000/0x1000)=nil, 0x1000, &(0x7f0000000340)=""/207) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv4_newrule={0x38, 0x20, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2, 0x10, 0x0, 0x6, 0x4, 0x0, 0x0, 0x8, 0x10012}, [@FRA_DST={0x8, 0x1, @broadcast}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x9}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0xa}]}, 0x38}}, 0x0) 32.35358613s ago: executing program 37 (id=636): unshare(0x42000000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @local}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r2) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x2a) 28.749977681s ago: executing program 38 (id=640): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000351000/0x2000)=nil) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f00000001c0)={0x1, 0x1, 0x10000000000000a, 0x10000}) fcntl$lock(r5, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x182800, 0x0) ioctl$RTC_AIE_ON(r7, 0x7001) ioctl$RTC_UIE_ON(r7, 0x7003) ioctl$RTC_AIE_OFF(r7, 0x7002) mincore(&(0x7f0000352000/0x1000)=nil, 0x1000, &(0x7f0000000340)=""/207) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv4_newrule={0x38, 0x20, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2, 0x10, 0x0, 0x6, 0x4, 0x0, 0x0, 0x8, 0x10012}, [@FRA_DST={0x8, 0x1, @broadcast}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x9}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0xa}]}, 0x38}}, 0x0) 9.775929716s ago: executing program 5 (id=684): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x46b4, 0x1, 0x80004, 0x200}, &(0x7f0000000180), &(0x7f0000000500)) syz_io_uring_setup(0x7674, &(0x7f0000000e40)={0x0, 0x17a1, 0x800, 0x0, 0x26c, 0x0, r6}, 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x7974, 0x10, 0x0, 0x4}, &(0x7f00000005c0), &(0x7f00000000c0)) io_uring_enter(r6, 0x82, 0xbc7b, 0x1, 0x0, 0xfffffffffffffe60) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)={0x28, 0x14, 0x211, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "4ac2411e47060aefadfa617ab9"}]}, 0x28}}, 0x0) mkdir(0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x4, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40fd) fsopen(0x0, 0x0) 8.58651229s ago: executing program 5 (id=685): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGKBMETA(r1, 0x4b52, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$session_to_parent(0x12) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40c80) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSCTTY(r5, 0x540e, 0xd60) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x12, r6, 0xce5d1000) syz_clone3(&(0x7f0000000dc0)={0x8100080, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 7.279298925s ago: executing program 8 (id=688): r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000fcffff0318110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 7.05351391s ago: executing program 8 (id=689): socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGKBMETA(r0, 0x4b52, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$session_to_parent(0x12) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40c80) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSCTTY(r4, 0x540e, 0xd60) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x12, r5, 0xce5d1000) syz_clone3(&(0x7f0000000dc0)={0x8100080, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 5.816370174s ago: executing program 8 (id=690): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x240000, &(0x7f0000000a80)={[{@minixdf}, {@grpid}, {@journal_path={'journal_path', 0x3d, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/'}}, {@data_journal}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@journal_async_commit}, {@data_writeback}, {@jqfmt_vfsv0}, {@noload}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@obj_type={'obj_type', 0x3d, 'PQ]\'\xfa7\x87\xc3W\xe7\xf6\xcc0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000600)={'syztnl0\x00', r5, 0x29, 0x4, 0x9, 0x0, 0x1e, @private2, @loopback, 0x20, 0x8000, 0x6, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x2f, 0xf, 0x4, 0x7, 0x4, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x7800, 0x7, 0x7}}) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000780)={0x0, @multicast1, @initdev}, &(0x7f00000007c0)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={r1, 0x58, &(0x7f0000000800)}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000940)={'ip_vti0\x00', &(0x7f00000008c0)={'gre0\x00', 0x0, 0x1, 0x80, 0x0, 0x2, {{0x9, 0x4, 0x1, 0x2a, 0x24, 0x65, 0x0, 0x28, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x9c, [@private=0xa010100, @broadcast]}, @noop]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000980)={@dev}, &(0x7f00000009c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c80)={'erspan0\x00', &(0x7f0000000a00)={'ip_vti0\x00', 0x0, 0x20, 0x700, 0x6, 0x0, {{0xb, 0x4, 0x0, 0x5, 0x2c, 0x64, 0x0, 0x80, 0x4, 0x0, @remote, @private=0xa010100, {[@ra={0x94, 0x4}, @generic={0x88, 0x2}, @lsrr={0x83, 0xf, 0xbd, [@dev={0xac, 0x14, 0x14, 0x42}, @loopback, @loopback]}, @end]}}}}}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x81) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c16ad803f1f805000600200000000a00060000000000ff0000009061ca2b00001fffff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x0) socket$inet(0xa, 0x1, 0x0) getsockopt$netlink(r0, 0x10e, 0x8, 0x0, &(0x7f00000001c0)) 5.815026255s ago: executing program 5 (id=691): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4f0c3000) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000000c5, 0x400) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f00000022c0)='./bus\x00', 0x810094, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES32=0x0, @ANYRESHEX], 0x6, 0x2de, &(0x7f0000000480)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'gre0\x00'}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x8, r4}, 0x10) 4.824380164s ago: executing program 8 (id=692): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) recvmmsg(r0, &(0x7f0000005400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}], 0x2}}], 0x3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x1, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x5}, 0x4}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x20000000}, 0xa}], 0x1, 0x4c005) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x2000007d, 0x0, 0x4, 0x101, 0x0}) 3.375121103s ago: executing program 8 (id=693): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x2c, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}}}, 0x24}}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000200), &(0x7f0000000240)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r8}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r9}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 832.400413ms ago: executing program 5 (id=694): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x400) r3 = dup(r1) inotify_rm_watch(r3, r2) 699.335736ms ago: executing program 8 (id=695): bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYBLOB="5d8e895548cfee3c7f9b757b213b793094491bfa66b133661d31289d6af259e6343c892d1cf89c9f16e0863be3bd7f6a142c272ccffa0acc584fcf5721d135b1cfbbebea1d53689f40ac4b4c4fdcef8bb3c50276d7776c656b3616565b1d7d1099cb70bca60fc21094493a39eeba876a4e74cbf78c5171505255e0", @ANYRESDEC, @ANYRESOCT], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x6, 0x5fe, &(0x7f0000000600)="$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") 399.539382ms ago: executing program 5 (id=696): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0x5e, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 5 (id=697): r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): 374][ T7215] loop3: detected capacity change from 0 to 1024 [ 270.044204][ T7215] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 270.159242][ T7215] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.274: bg 0: block 10: padding at end of block bitmap is not set [ 270.184489][ T7215] Quota error (device loop3): write_blk: dquota write failed [ 270.192157][ T7215] Quota error (device loop3): find_free_dqentry: Can't write quota data block 2 [ 270.203053][ T7215] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 270.213540][ T7215] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.274: Failed to acquire dquot type 0 [ 270.238824][ T7215] Quota error (device loop3): write_blk: dquota write failed [ 270.246670][ T7215] Quota error (device loop3): find_free_dqentry: Can't write quota data block 2 [ 270.257003][ T7215] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 270.267389][ T7215] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.274: Failed to acquire dquot type 0 [ 270.286209][ T7215] EXT4-fs error (device loop3): ext4_free_blocks:6676: comm syz.3.274: Freeing blocks not in datazone - block = 0, count = 4096 [ 270.314506][ T7215] Quota error (device loop3): write_blk: dquota write failed [ 270.322374][ T7215] Quota error (device loop3): find_free_dqentry: Can't write quota data block 2 [ 270.332679][ T7215] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 270.344395][ T7215] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.274: Failed to acquire dquot type 0 [ 270.370515][ T7215] EXT4-fs (loop3): 1 orphan inode deleted [ 270.385122][ T7215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.876051][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.905724][ T7230] loop1: detected capacity change from 0 to 1024 [ 273.145298][ T5799] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 275.887519][ T7248] loop3: detected capacity change from 0 to 128 [ 276.637926][ T7262] loop0: detected capacity change from 0 to 512 [ 276.646299][ T7262] EXT4-fs: Ignoring removed oldalloc option [ 276.685319][ T7262] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.700263][ T7262] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.024185][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.207755][ T7276] loop3: detected capacity change from 0 to 128 [ 278.257582][ T7276] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 278.351379][ T7276] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 279.437416][ T3048] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 280.087433][ T7297] syz.3.290[7297] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 280.088262][ T7297] syz.3.290[7297] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 280.149448][ T7297] loop3: detected capacity change from 0 to 128 [ 282.914805][ T7327] loop1: detected capacity change from 0 to 512 [ 283.133584][ T7327] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.296: casefold flag without casefold feature [ 283.174768][ T7327] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.296: couldn't read orphan inode 15 (err -117) [ 283.226899][ T7327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.681955][ T7341] loop4: detected capacity change from 0 to 1024 [ 283.821790][ T7341] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 283.924127][ T7341] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.298: bg 0: block 10: padding at end of block bitmap is not set [ 283.943583][ T7341] Quota error (device loop4): write_blk: dquota write failed [ 283.951216][ T7341] Quota error (device loop4): find_free_dqentry: Can't write quota data block 2 [ 283.963177][ T7341] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 283.973850][ T7341] EXT4-fs error (device loop4): ext4_acquire_dquot:6940: comm syz.4.298: Failed to acquire dquot type 0 [ 283.989445][ T7341] Quota error (device loop4): write_blk: dquota write failed [ 283.997063][ T7341] Quota error (device loop4): find_free_dqentry: Can't write quota data block 2 [ 284.007362][ T7341] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 284.017633][ T7341] EXT4-fs error (device loop4): ext4_acquire_dquot:6940: comm syz.4.298: Failed to acquire dquot type 0 [ 284.052875][ T7341] EXT4-fs error (device loop4): ext4_free_blocks:6676: comm syz.4.298: Freeing blocks not in datazone - block = 0, count = 4096 [ 284.080367][ T7341] Quota error (device loop4): write_blk: dquota write failed [ 284.087937][ T7341] Quota error (device loop4): find_free_dqentry: Can't write quota data block 2 [ 284.098550][ T7341] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 284.108856][ T7341] EXT4-fs error (device loop4): ext4_acquire_dquot:6940: comm syz.4.298: Failed to acquire dquot type 0 [ 284.130121][ T7341] EXT4-fs (loop4): 1 orphan inode deleted [ 284.144438][ T7341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.865212][ T7341] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.197664][ T7341] syz.4.298 (7341) used greatest stack depth: 19944 bytes left [ 285.219075][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.675160][ T28] audit: type=1326 audit(1758850034.069:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7346 comm="syz.1.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c92d8eec9 code=0x7ffc0000 [ 286.697010][ T7365] loop0: detected capacity change from 0 to 512 [ 286.704791][ T7365] EXT4-fs: Ignoring removed oldalloc option [ 286.771931][ T7365] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.784986][ T7365] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.878392][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.527562][ T7389] loop4: detected capacity change from 0 to 1024 [ 289.841248][ T7393] loop0: detected capacity change from 0 to 1024 [ 290.468964][ T7393] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.815106][ T7393] EXT4-fs (loop0): shut down requested (2) [ 291.103037][ T7409] loop1: detected capacity change from 0 to 1024 [ 291.110602][ T7409] EXT4-fs: Ignoring removed i_version option [ 291.126063][ T7409] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 291.255256][ T7409] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.310: Invalid block bitmap block 0 in block_group 0 [ 291.274287][ T7409] __quota_error: 11 callbacks suppressed [ 291.274332][ T7409] Quota error (device loop1): write_blk: dquota write failed [ 291.288272][ T7409] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 291.299112][ T7409] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.310: Failed to acquire dquot type 0 [ 291.318907][ T7409] EXT4-fs error (device loop1): ext4_free_blocks:6676: comm syz.1.310: Freeing blocks not in datazone - block = 0, count = 4096 [ 291.342650][ T7409] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.310: Invalid inode bitmap blk 0 in block_group 0 [ 291.356701][ T7409] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem [ 291.366862][ T7409] EXT4-fs (loop1): 1 orphan inode deleted [ 291.379053][ T7409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.436109][ T7409] netlink: 72 bytes leftover after parsing attributes in process `syz.1.310'. [ 291.464706][ T6221] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 291.636508][ T6221] EXT4-fs error (device loop1): ext4_release_dquot:6976: comm kworker/u4:16: Failed to release dquot type 0 [ 292.863290][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.522587][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.194510][ T7440] binder_alloc: binder_alloc_mmap_handler: 7431 200000ffd000-200000fff000 already mapped failed -16 [ 295.798961][ T7451] loop0: detected capacity change from 0 to 256 [ 302.527236][ T7456] loop1: detected capacity change from 0 to 1024 [ 302.864495][ T6077] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 304.370596][ T7472] syz.1.319[7472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.371449][ T7472] syz.1.319[7472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.418582][ T7472] loop1: detected capacity change from 0 to 128 [ 305.283342][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 305.293490][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 305.309321][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 305.318097][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 305.326358][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 305.334315][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 306.836829][ T6233] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.372372][ T50] Bluetooth: hci0: command tx timeout [ 307.836874][ T6233] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.879100][ T5790] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 307.898165][ T5790] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 307.907628][ T5790] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 307.934368][ T5790] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 307.950310][ T5790] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 307.957911][ T5790] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 307.979830][ T7496] loop0: detected capacity change from 0 to 1024 [ 308.014994][ T7496] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 308.073493][ T7496] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 308.098805][ T6233] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.110141][ T7496] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.323: Failed to acquire dquot type 0 [ 308.165687][ T7496] EXT4-fs error (device loop0): mb_free_blocks:1938: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 308.199615][ T7496] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #13: comm syz.0.323: corrupted inode contents [ 308.256926][ T7496] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #13: comm syz.0.323: mark_inode_dirty error [ 308.294270][ T7496] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #13: comm syz.0.323: corrupted inode contents [ 308.338454][ T7496] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #13: comm syz.0.323: mark_inode_dirty error [ 308.352725][ T6233] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.376430][ T7496] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #13: comm syz.0.323: corrupted inode contents [ 308.398196][ T7496] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 308.407590][ T7491] xt_NFQUEUE: number of total queues is 0 [ 308.422871][ T7496] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #13: comm syz.0.323: corrupted inode contents [ 308.449624][ T7496] EXT4-fs error (device loop0): ext4_truncate:4288: inode #13: comm syz.0.323: mark_inode_dirty error [ 308.475154][ T7496] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 308.501924][ T7496] EXT4-fs (loop0): 1 truncate cleaned up [ 308.509585][ T7496] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.799249][ T50] Bluetooth: hci0: command tx timeout [ 309.851379][ T7504] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 309.861028][ T7504] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 309.872180][ T7504] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 309.895638][ T28] audit: type=1800 audit(1758850058.299:177): pid=7504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.323" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 310.000219][ T50] Bluetooth: hci4: command tx timeout [ 310.017793][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.058650][ T6233] tipc: Left network mode [ 311.494167][ T7524] loop0: detected capacity change from 0 to 128 [ 311.706615][ T7524] EXT4-fs (loop0): Test dummy encryption mode enabled [ 311.831544][ T7524] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 311.844536][ T50] Bluetooth: hci0: command tx timeout [ 311.855516][ T7524] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 312.080156][ T50] Bluetooth: hci4: command tx timeout [ 312.629804][ T7531] loop1: detected capacity change from 0 to 16 [ 312.723419][ T7475] chnl_net:caif_netlink_parms(): no params data found [ 312.768572][ T7531] erofs: (device loop1): mounted with root inode @ nid 36. [ 313.345507][ T7495] chnl_net:caif_netlink_parms(): no params data found [ 313.920262][ T50] Bluetooth: hci0: command tx timeout [ 313.993804][ T5787] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 314.160136][ T50] Bluetooth: hci4: command tx timeout [ 314.185998][ T7475] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.221646][ T7475] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.229209][ T7475] bridge_slave_0: entered allmulticast mode [ 314.243710][ T7475] bridge_slave_0: entered promiscuous mode [ 314.411075][ T7475] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.418373][ T7475] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.426357][ T7475] bridge_slave_1: entered allmulticast mode [ 314.435297][ T7475] bridge_slave_1: entered promiscuous mode [ 314.485645][ T7548] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 314.505768][ T7495] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.527990][ T7495] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.537489][ T7495] bridge_slave_0: entered allmulticast mode [ 314.558752][ T7495] bridge_slave_0: entered promiscuous mode [ 314.579596][ T7548] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -46 in[60, 4036] out[1851] [ 314.605856][ T7495] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.620883][ T7495] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.639021][ T7548] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 314.671728][ T7495] bridge_slave_1: entered allmulticast mode [ 314.686750][ T7495] bridge_slave_1: entered promiscuous mode [ 314.906326][ T7475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.997548][ T7495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.034876][ T7495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.063320][ T7475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.245609][ T7475] team0: Port device team_slave_0 added [ 315.272843][ T6233] hsr_slave_0: left promiscuous mode [ 315.289607][ T6233] hsr_slave_1: left promiscuous mode [ 315.302119][ T6233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.319835][ T6233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.338600][ T6233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.357164][ T6233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.381225][ T6233] bridge_slave_1: left allmulticast mode [ 315.390056][ T6233] bridge_slave_1: left promiscuous mode [ 315.408360][ T6233] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.431327][ T6233] bridge_slave_0: left allmulticast mode [ 315.437059][ T6233] bridge_slave_0: left promiscuous mode [ 315.450415][ T6233] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.526793][ T6233] veth1_macvtap: left promiscuous mode [ 315.540566][ T6233] veth0_macvtap: left promiscuous mode [ 315.550317][ T6233] veth1_vlan: left promiscuous mode [ 315.555873][ T6233] veth0_vlan: left promiscuous mode [ 316.240086][ T50] Bluetooth: hci4: command tx timeout [ 316.268182][ T7571] binder_alloc: binder_alloc_mmap_handler: 7568 200000ffd000-200000fff000 already mapped failed -16 [ 316.702586][ T6233] team0 (unregistering): Port device team_slave_1 removed [ 316.763893][ T6233] team0 (unregistering): Port device team_slave_0 removed [ 316.828901][ T6233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.953732][ T6233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.767476][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.774182][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.393221][ T6233] bond0 (unregistering): Released all slaves [ 318.508412][ T7475] team0: Port device team_slave_1 added [ 318.573093][ T7495] team0: Port device team_slave_0 added [ 318.689147][ T7475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.709766][ T7475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.745488][ T7475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.779043][ T7475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.801897][ T7475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.936161][ T7475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.972354][ T7495] team0: Port device team_slave_1 added [ 319.132608][ T7495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.139634][ T7495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.171728][ T7495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.202630][ T7587] loop0: detected capacity change from 0 to 1024 [ 319.211495][ T7587] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 319.279612][ T7587] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.335: bg 0: block 10: padding at end of block bitmap is not set [ 319.296763][ T7587] Quota error (device loop0): write_blk: dquota write failed [ 319.304629][ T7587] Quota error (device loop0): find_free_dqentry: Can't write quota data block 2 [ 319.314188][ T7587] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 319.325988][ T7587] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.335: Failed to acquire dquot type 0 [ 319.341496][ T7587] Quota error (device loop0): write_blk: dquota write failed [ 319.345749][ T7495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.350359][ T7587] Quota error (device loop0): find_free_dqentry: Can't write quota data block 2 [ 319.350677][ T7587] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 319.350732][ T7587] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.335: Failed to acquire dquot type 0 [ 319.386236][ T7495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.429277][ T7587] EXT4-fs error (device loop0): ext4_free_blocks:6676: comm syz.0.335: Freeing blocks not in datazone - block = 0, count = 4096 [ 319.446101][ T7587] Quota error (device loop0): write_blk: dquota write failed [ 319.453703][ T7587] Quota error (device loop0): find_free_dqentry: Can't write quota data block 2 [ 319.463106][ T7587] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 319.473607][ T7587] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.335: Failed to acquire dquot type 0 [ 319.485445][ T7587] EXT4-fs (loop0): 1 orphan inode deleted [ 319.493692][ T7587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.509332][ T7495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.785356][ T7495] hsr_slave_0: entered promiscuous mode [ 319.800121][ T7495] hsr_slave_1: entered promiscuous mode [ 319.817304][ T7495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.837324][ T7495] Cannot create hsr debugfs directory [ 319.867415][ T7475] hsr_slave_0: entered promiscuous mode [ 319.890807][ T7475] hsr_slave_1: entered promiscuous mode [ 319.901988][ T7475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.909629][ T7475] Cannot create hsr debugfs directory [ 320.397574][ T6233] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.588989][ T6233] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.757829][ T6233] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.894821][ T6233] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.033247][ T7475] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 321.070544][ T7475] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 321.091496][ T7475] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 321.121681][ T7475] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 321.566071][ T7618] binder_alloc: binder_alloc_mmap_handler: 7609 200000ffd000-200000fff000 already mapped failed -16 [ 321.739862][ T7495] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 321.806455][ T7495] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 321.954335][ T7495] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 321.971562][ T7495] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 322.752363][ T7475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.827866][ T7495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.078097][ T7495] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.143943][ T7475] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.283424][ T1322] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.290700][ T1322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.643620][ T1322] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.650953][ T1322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.207371][ T6239] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.214652][ T6239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.375694][ T6239] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.383117][ T6239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.580155][ T7654] loop1: detected capacity change from 0 to 4096 [ 324.603102][ T7654] EXT4-fs (loop1): Test dummy encryption mode enabled [ 324.666139][ T7654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.719147][ T6233] hsr_slave_0: left promiscuous mode [ 324.723847][ T28] audit: type=1326 audit(1758850073.169:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.1.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c92d8eec9 code=0x7ffc0000 [ 324.749306][ T28] audit: type=1326 audit(1758850073.169:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.1.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f7c92d8eec9 code=0x7ffc0000 [ 324.795845][ T28] audit: type=1326 audit(1758850073.169:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.1.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c92d8eec9 code=0x7ffc0000 [ 324.836972][ T6233] hsr_slave_1: left promiscuous mode [ 324.853408][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.863005][ T6233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.891614][ T6233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.921183][ T6233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.928683][ T6233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.952014][ T6233] bridge_slave_1: left allmulticast mode [ 324.957853][ T6233] bridge_slave_1: left promiscuous mode [ 325.000911][ T6233] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.023163][ T6233] bridge_slave_0: left allmulticast mode [ 325.028909][ T6233] bridge_slave_0: left promiscuous mode [ 325.059136][ T6233] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.080843][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.158406][ T6233] veth1_macvtap: left promiscuous mode [ 325.172198][ T6233] veth0_macvtap: left promiscuous mode [ 325.178242][ T6233] veth1_vlan: left promiscuous mode [ 325.190522][ T6233] veth0_vlan: left promiscuous mode [ 325.985259][ T7673] binder_alloc: binder_alloc_mmap_handler: 7671 200000ffd000-200000fff000 already mapped failed -16 [ 326.477431][ T6233] team0 (unregistering): Port device team_slave_1 removed [ 326.621319][ T6233] team0 (unregistering): Port device team_slave_0 removed [ 326.755707][ T7679] loop0: detected capacity change from 0 to 256 [ 326.788056][ T7679] exfat: Deprecated parameter 'utf8' [ 326.823221][ T7679] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 326.986097][ T6233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.116446][ T6233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.309611][ T7692] loop0: detected capacity change from 0 to 1024 [ 328.406320][ T7692] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 328.487361][ T7692] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.349: bg 0: block 10: padding at end of block bitmap is not set [ 328.509850][ T7692] Quota error (device loop0): write_blk: dquota write failed [ 328.518236][ T7692] Quota error (device loop0): find_free_dqentry: Can't write quota data block 2 [ 328.528663][ T7692] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 328.539404][ T7692] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.349: Failed to acquire dquot type 0 [ 328.556193][ T7692] Quota error (device loop0): write_blk: dquota write failed [ 328.563941][ T7692] Quota error (device loop0): find_free_dqentry: Can't write quota data block 2 [ 328.574215][ T7692] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 328.584716][ T7692] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.349: Failed to acquire dquot type 0 [ 328.611188][ T7692] EXT4-fs error (device loop0): ext4_free_blocks:6676: comm syz.0.349: Freeing blocks not in datazone - block = 0, count = 4096 [ 328.630663][ T7692] Quota error (device loop0): write_blk: dquota write failed [ 328.639478][ T7692] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.349: Failed to acquire dquot type 0 [ 328.655449][ T7692] EXT4-fs (loop0): 1 orphan inode deleted [ 328.669541][ T7692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.266982][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.340433][ T6233] bond0 (unregistering): Released all slaves [ 330.733048][ T7701] loop0: detected capacity change from 0 to 256 [ 332.939221][ T7719] binder_alloc: binder_alloc_mmap_handler: 7712 200000ffd000-200000fff000 already mapped failed -16 [ 333.363011][ T7495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.423644][ T7475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.285267][ T7724] loop0: detected capacity change from 0 to 40427 [ 334.329395][ T7495] veth0_vlan: entered promiscuous mode [ 334.351877][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 334.351892][ T28] audit: type=1326 audit(1758850082.799:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7754 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c92d8eec9 code=0x7ffc0000 [ 334.380891][ T7724] F2FS-fs (loop0): invalid crc value [ 334.396003][ T7495] veth1_vlan: entered promiscuous mode [ 334.433792][ T28] audit: type=1326 audit(1758850082.799:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7754 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f7c92d8eec9 code=0x7ffc0000 [ 334.457315][ T7724] F2FS-fs (loop0): Found nat_bits in checkpoint [ 334.505952][ T28] audit: type=1326 audit(1758850082.799:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7754 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c92d8eec9 code=0x7ffc0000 [ 334.574872][ T28] audit: type=1326 audit(1758850082.889:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7754 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c92d8eec9 code=0x7ffc0000 [ 334.620170][ T7724] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 334.672929][ T7495] veth0_macvtap: entered promiscuous mode [ 334.717701][ T7475] veth0_vlan: entered promiscuous mode [ 334.772603][ T7495] veth1_macvtap: entered promiscuous mode [ 334.818337][ T7475] veth1_vlan: entered promiscuous mode [ 334.862814][ T7495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.893227][ T7495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.937047][ T7495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.950043][ T7495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.969080][ T7495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.026604][ T7495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.085349][ T7495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.130711][ T7495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.161477][ T7495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.175380][ T7495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.193079][ T7495] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.202273][ T7495] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.220106][ T7495] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.233607][ T7495] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.323634][ T7771] loop1: detected capacity change from 0 to 256 [ 336.158866][ T7475] veth0_macvtap: entered promiscuous mode [ 336.285683][ T7475] veth1_macvtap: entered promiscuous mode [ 336.414650][ T7475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.487689][ T7475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.519763][ T7475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.574927][ T7475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.606049][ T7475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.632089][ T7475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.662116][ T7475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.782853][ T6233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.807870][ T7475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.862733][ T6233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.895004][ T7475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.946815][ T7475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.992245][ T7475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.258532][ T7475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.273971][ T7475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.286582][ T7475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.346879][ T7779] binder_alloc: binder_alloc_mmap_handler: 7776 200000ffd000-200000fff000 already mapped failed -16 [ 337.523648][ T7475] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.565702][ T7475] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.620867][ T7475] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.658427][ T7475] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.767756][ T6233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.810257][ T6233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.194447][ T6006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.239616][ T6006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.415473][ T6214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.490251][ T6214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.496497][ T7802] loop0: detected capacity change from 0 to 1024 [ 339.541346][ T7802] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 339.676845][ T7802] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.364: bg 0: block 10: padding at end of block bitmap is not set [ 339.694698][ T7802] Quota error (device loop0): write_blk: dquota write failed [ 339.702304][ T7802] Quota error (device loop0): find_free_dqentry: Can't write quota data block 2 [ 339.712745][ T7802] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 339.723204][ T7802] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.364: Failed to acquire dquot type 0 [ 339.789030][ T7802] Quota error (device loop0): write_blk: dquota write failed [ 339.797173][ T7802] Quota error (device loop0): find_free_dqentry: Can't write quota data block 2 [ 339.807769][ T7802] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 339.818374][ T7802] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.364: Failed to acquire dquot type 0 [ 339.833279][ T7802] EXT4-fs error (device loop0): ext4_free_blocks:6676: comm syz.0.364: Freeing blocks not in datazone - block = 0, count = 4096 [ 339.854014][ T7802] Quota error (device loop0): write_blk: dquota write failed [ 339.861839][ T7802] Quota error (device loop0): find_free_dqentry: Can't write quota data block 2 [ 339.873779][ T7802] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 339.884282][ T7802] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.364: Failed to acquire dquot type 0 [ 340.020505][ T7802] EXT4-fs (loop0): 1 orphan inode deleted [ 340.035791][ T7802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.598268][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.828909][ T7819] loop5: detected capacity change from 0 to 512 [ 343.661648][ T7819] EXT4-fs (loop5): Test dummy encryption mode enabled [ 343.907408][ T7819] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2244: inode #15: comm syz.5.367: corrupted in-inode xattr: invalid ea_ino [ 343.961625][ T7819] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.367: couldn't read orphan inode 15 (err -117) [ 344.052016][ T7819] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.253770][ T7833] binder_alloc: binder_alloc_mmap_handler: 7825 200000ffd000-200000fff000 already mapped failed -16 [ 348.085179][ T7475] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.330793][ T7858] loop5: detected capacity change from 0 to 1024 [ 349.342587][ T7858] EXT4-fs: Ignoring removed i_version option [ 349.395487][ T7858] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 349.502221][ T7858] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:478: comm syz.5.375: Invalid block bitmap block 0 in block_group 0 [ 349.520147][ T7858] Quota error (device loop5): write_blk: dquota write failed [ 349.527831][ T7858] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 349.538364][ T7858] EXT4-fs error (device loop5): ext4_acquire_dquot:6940: comm syz.5.375: Failed to acquire dquot type 0 [ 349.555682][ T7858] EXT4-fs error (device loop5): ext4_free_blocks:6676: comm syz.5.375: Freeing blocks not in datazone - block = 0, count = 4096 [ 349.572706][ T7858] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.375: Invalid inode bitmap blk 0 in block_group 0 [ 349.586315][ T7858] EXT4-fs error (device loop5) in ext4_free_inode:363: Corrupt filesystem [ 349.595699][ T7858] EXT4-fs (loop5): 1 orphan inode deleted [ 349.613873][ T7858] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.673304][ T7858] netlink: 72 bytes leftover after parsing attributes in process `syz.5.375'. [ 349.942190][ T6006] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-8 [ 350.025497][ T6006] EXT4-fs error (device loop5): ext4_release_dquot:6976: comm kworker/u4:10: Failed to release dquot type 0 [ 350.170486][ T7863] loop6: detected capacity change from 0 to 128 [ 350.639764][ T7866] netlink: 24 bytes leftover after parsing attributes in process `syz.6.376'. [ 352.257825][ T7475] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.285354][ T6006] kworker/u4:10: attempt to access beyond end of device [ 352.285354][ T6006] loop6: rw=1, sector=145, nr_sectors = 328 limit=128 [ 352.727873][ T7887] loop0: detected capacity change from 0 to 1024 [ 352.812399][ T7887] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 352.982025][ T7887] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.378: bg 0: block 10: padding at end of block bitmap is not set [ 353.073661][ T7887] Quota error (device loop0): write_blk: dquota write failed [ 353.082352][ T7887] Quota error (device loop0): find_free_dqentry: Can't write quota data block 2 [ 353.092690][ T7887] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 353.103346][ T7887] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.378: Failed to acquire dquot type 0 [ 353.146892][ T7887] Quota error (device loop0): write_blk: dquota write failed [ 353.154517][ T7887] Quota error (device loop0): find_free_dqentry: Can't write quota data block 2 [ 353.164754][ T7887] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 353.175213][ T7887] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.378: Failed to acquire dquot type 0 [ 353.195388][ T7887] EXT4-fs error (device loop0): ext4_free_blocks:6676: comm syz.0.378: Freeing blocks not in datazone - block = 0, count = 4096 [ 353.215930][ T7887] Quota error (device loop0): write_blk: dquota write failed [ 353.224843][ T7887] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.378: Failed to acquire dquot type 0 [ 353.240989][ T7887] EXT4-fs (loop0): 1 orphan inode deleted [ 353.255139][ T7887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.542011][ T7887] syz.0.378 (7887) used greatest stack depth: 19784 bytes left [ 354.031571][ T7893] binder_alloc: binder_alloc_mmap_handler: 7890 200000ffd000-200000fff000 already mapped failed -16 [ 354.926235][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.101801][ T7915] loop6: detected capacity change from 0 to 1024 [ 356.375859][ T5799] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 358.259758][ T7933] loop6: detected capacity change from 0 to 128 [ 358.382049][ T7937] netlink: 24 bytes leftover after parsing attributes in process `syz.6.388'. [ 358.864683][ T7942] binder_alloc: binder_alloc_mmap_handler: 7941 200000ffd000-200000fff000 already mapped failed -16 [ 359.322619][ T6235] kworker/u4:22: attempt to access beyond end of device [ 359.322619][ T6235] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 359.465045][ T7965] overlayfs: failed to resolve './bus': -2 [ 359.658779][ T7966] loop0: detected capacity change from 0 to 1024 [ 364.454788][ T7966] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 364.469578][ T7966] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 364.470058][ T7966] EXT4-fs: failed to create workqueue [ 364.487529][ T7966] EXT4-fs (loop0): mount failed [ 364.874959][ T7971] loop0: detected capacity change from 0 to 1024 [ 365.121365][ T5799] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 367.363632][ T7985] syz.5.398[7985] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 367.363772][ T7985] syz.5.398[7985] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 367.385380][ T7985] xt_bpf: check failed: parse error [ 367.427751][ T7985] loop5: detected capacity change from 0 to 512 [ 367.516921][ T7985] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 367.971343][ T7985] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.985029][ T7985] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.038989][ T7985] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.426008][ T7993] binder_alloc: binder_alloc_mmap_handler: 7992 200000ffd000-200000fff000 already mapped failed -16 [ 370.072644][ T8009] binder: 8001:8009 ioctl c0306201 0 returned -14 [ 370.394803][ T8021] overlayfs: failed to resolve './bus': -2 [ 371.674402][ T8031] binder_alloc: binder_alloc_mmap_handler: 8028 200000ffd000-200000fff000 already mapped failed -16 [ 373.060793][ T8041] loop6: detected capacity change from 0 to 1024 [ 375.626145][ T8057] overlayfs: failed to resolve './bus': -2 [ 378.517821][ T8087] input: syz0 as /devices/virtual/input/input6 [ 378.564000][ T8089] loop6: detected capacity change from 0 to 128 [ 378.724947][ T8093] netlink: 24 bytes leftover after parsing attributes in process `syz.6.422'. [ 379.140301][ T5875] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 379.208378][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.215384][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.348097][ T5875] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.381091][ T5875] usb 6-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 379.407681][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.432447][ T6233] kworker/u4:21: attempt to access beyond end of device [ 379.432447][ T6233] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 379.461429][ T5875] usb 6-1: config 0 descriptor?? [ 379.772256][ T8115] loop6: detected capacity change from 0 to 1024 [ 379.968345][ T5875] wacom 0003:056A:0015.0004: Unknown device_type for 'HID 056a:0015'. Assuming pen. [ 380.100569][ T5875] wacom 0003:056A:0015.0004: hidraw0: USB HID v9.14 Device [HID 056a:0015] on usb-dummy_hcd.5-1/input0 [ 380.931215][ T5875] input: Wacom Graphire4 4x5 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0015.0004/input/input7 [ 382.167714][ T5875] usb 6-1: USB disconnect, device number 2 [ 383.555104][ T8148] loop5: detected capacity change from 0 to 128 [ 383.703889][ T8150] netlink: 24 bytes leftover after parsing attributes in process `syz.5.436'. [ 383.931098][ T8158] loop1: detected capacity change from 0 to 1024 [ 384.027319][ T8156] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 384.072643][ T5799] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 384.980840][ T6221] kworker/u4:16: attempt to access beyond end of device [ 384.980840][ T6221] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 387.688278][ T8184] binder: 8176:8184 ioctl c0306201 200000000680 returned -14 [ 389.640047][ T8199] serio: Serial port ttyS3 [ 390.063211][ T8214] loop6: detected capacity change from 0 to 1024 [ 390.108654][ T8214] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 390.202394][ T8214] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.450: bg 0: block 10: padding at end of block bitmap is not set [ 390.284170][ T8226] loop0: detected capacity change from 0 to 512 [ 390.291721][ T8226] EXT4-fs: Ignoring removed mblk_io_submit option [ 390.410212][ T8226] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 390.429260][ T8226] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 390.443680][ T8214] __quota_error: 2 callbacks suppressed [ 390.443735][ T8214] Quota error (device loop6): write_blk: dquota write failed [ 390.750436][ T8214] Quota error (device loop6): find_free_dqentry: Can't write quota data block 2 [ 391.342975][ T8221] syz_tun: entered promiscuous mode [ 391.368532][ T8214] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 391.910257][ T8221] vlan2: entered promiscuous mode [ 392.071018][ T8214] EXT4-fs error (device loop6): ext4_acquire_dquot:6940: comm syz.6.450: Failed to acquire dquot type 0 [ 392.164633][ T8214] Quota error (device loop6): write_blk: dquota write failed [ 392.210052][ T8214] Quota error (device loop6): find_free_dqentry: Can't write quota data block 2 [ 392.284600][ T8214] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 392.370790][ T8214] EXT4-fs error (device loop6): ext4_acquire_dquot:6940: comm syz.6.450: Failed to acquire dquot type 0 [ 392.463691][ T8214] EXT4-fs error (device loop6): ext4_free_blocks:6676: comm syz.6.450: Freeing blocks not in datazone - block = 0, count = 4096 [ 392.569850][ T8214] Quota error (device loop6): write_blk: dquota write failed [ 392.618161][ T8214] Quota error (device loop6): find_free_dqentry: Can't write quota data block 2 [ 392.888699][ T8214] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 393.250853][ T8214] EXT4-fs error (device loop6): ext4_acquire_dquot:6940: comm syz.6.450: Failed to acquire dquot type 0 [ 393.656344][ T8214] EXT4-fs (loop6): 1 orphan inode deleted [ 393.693444][ T8214] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.806665][ T8241] binder_alloc: binder_alloc_mmap_handler: 8240 200000ffd000-200000fff000 already mapped failed -16 [ 393.861077][ T8214] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.035497][ T28] audit: type=1326 audit(1758850142.479:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz.0.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770038eec9 code=0x7ffc0000 [ 394.086664][ T8214] syz.6.450 (8214) used greatest stack depth: 19640 bytes left [ 394.097271][ T8248] syz.0.459: attempt to access beyond end of device [ 394.097271][ T8248] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 394.110784][ T8248] FAT-fs (loop1): unable to read boot sector [ 397.158618][ T8283] binder_alloc: binder_alloc_mmap_handler: 8281 200000ffd000-200000fff000 already mapped failed -16 [ 398.383482][ T8304] loop1: detected capacity change from 0 to 256 [ 398.556159][ T8304] FAT-fs (loop1): Directory bread(block 64) failed [ 398.590502][ T8304] FAT-fs (loop1): Directory bread(block 65) failed [ 398.621845][ T8304] FAT-fs (loop1): Directory bread(block 66) failed [ 398.660193][ T8304] FAT-fs (loop1): Directory bread(block 67) failed [ 398.690112][ T8304] FAT-fs (loop1): Directory bread(block 68) failed [ 398.696747][ T8304] FAT-fs (loop1): Directory bread(block 69) failed [ 398.726833][ T8304] FAT-fs (loop1): Directory bread(block 70) failed [ 398.754594][ T8304] FAT-fs (loop1): Directory bread(block 71) failed [ 398.772376][ T8304] FAT-fs (loop1): Directory bread(block 72) failed [ 398.789316][ T8304] FAT-fs (loop1): Directory bread(block 73) failed [ 399.039789][ T8305] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 399.048733][ T8305] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 399.218099][ T8305] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 399.234651][ T8305] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 399.320575][ T8305] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 399.408230][ T8305] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 399.492666][ T8305] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 400.158091][ T8305] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 400.254263][ T8305] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 400.443214][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 400.443231][ T28] audit: type=1326 audit(1758850148.889:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8318 comm="syz.6.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc278eec9 code=0x7ffc0000 [ 400.449553][ T8305] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 400.664691][ T28] audit: type=1326 audit(1758850148.889:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8318 comm="syz.6.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc278eec9 code=0x7ffc0000 [ 400.737237][ T28] audit: type=1326 audit(1758850148.929:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8318 comm="syz.6.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fefc278eec9 code=0x7ffc0000 [ 400.760857][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 401.005625][ T28] audit: type=1326 audit(1758850148.929:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8318 comm="syz.6.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc278eec9 code=0x7ffc0000 [ 401.280043][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 401.792896][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 402.079310][ T28] audit: type=1326 audit(1758850148.929:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8318 comm="syz.6.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc278eec9 code=0x7ffc0000 [ 402.251517][ T5790] Bluetooth: hci4: command 0x0c1a tx timeout [ 402.512172][ T28] audit: type=1326 audit(1758850148.939:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8318 comm="syz.6.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fefc278eec9 code=0x7ffc0000 [ 402.801290][ T5790] Bluetooth: hci1: command 0x0406 tx timeout [ 403.055440][ T28] audit: type=1326 audit(1758850148.939:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8318 comm="syz.6.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc278eec9 code=0x7ffc0000 [ 403.341147][ T28] audit: type=1326 audit(1758850148.939:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8318 comm="syz.6.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc278eec9 code=0x7ffc0000 [ 403.508324][ T28] audit: type=1326 audit(1758850148.949:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8318 comm="syz.6.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fefc278eec9 code=0x7ffc0000 [ 403.975266][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 403.981684][ T5790] Bluetooth: hci0: command 0x0c1a tx timeout [ 404.264506][ T28] audit: type=1326 audit(1758850149.139:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8318 comm="syz.6.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fefc278eec9 code=0x7ffc0000 [ 404.354081][ T5790] Bluetooth: hci4: command 0x0c1a tx timeout [ 404.830754][ T8335] binder_alloc: binder_alloc_mmap_handler: 8334 200000ffd000-200000fff000 already mapped failed -16 [ 405.670625][ T28] audit: type=1326 audit(1758850154.109:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.6.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc278eec9 code=0x7ffc0000 [ 405.832118][ T28] audit: type=1326 audit(1758850154.119:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.6.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc278eec9 code=0x7ffc0000 [ 405.954912][ T28] audit: type=1326 audit(1758850154.139:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.6.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fefc278eec9 code=0x7ffc0000 [ 406.008844][ T5790] Bluetooth: hci0: command 0x0c1a tx timeout [ 406.404151][ T5790] Bluetooth: hci4: command 0x0c1a tx timeout [ 406.514025][ T28] audit: type=1326 audit(1758850154.139:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.6.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc278eec9 code=0x7ffc0000 [ 407.459638][ T8363] xt_bpf: check failed: parse error [ 408.563156][ T8363] loop6: detected capacity change from 0 to 512 [ 408.604644][ T28] audit: type=1326 audit(1758850156.959:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.6.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc278eec9 code=0x7ffc0000 [ 408.817553][ T8363] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 409.207169][ T8363] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.220918][ T8363] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.262050][ T8363] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.465289][ T28] audit: type=1326 audit(1758850156.959:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.6.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc278eec9 code=0x7ffc0000 [ 409.729334][ T28] audit: type=1326 audit(1758850156.959:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.6.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fefc278eec9 code=0x7ffc0000 [ 409.912356][ T28] audit: type=1326 audit(1758850156.959:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.6.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc278eec9 code=0x7ffc0000 [ 410.260553][ T28] audit: type=1326 audit(1758850156.969:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.6.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc278eec9 code=0x7ffc0000 [ 410.289776][ T28] audit: type=1326 audit(1758850156.969:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.6.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fefc278eec9 code=0x7ffc0000 [ 410.444986][ T8375] loop1: detected capacity change from 0 to 1024 [ 410.513657][ T8375] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 410.640982][ T8375] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.488: bg 0: block 10: padding at end of block bitmap is not set [ 410.889771][ T8375] __quota_error: 9 callbacks suppressed [ 410.889789][ T8375] Quota error (device loop1): write_blk: dquota write failed [ 410.905544][ T8375] Quota error (device loop1): find_free_dqentry: Can't write quota data block 2 [ 410.915242][ T8375] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 410.925312][ T8375] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.488: Failed to acquire dquot type 0 [ 411.043857][ T28] audit: type=1326 audit(1758850159.359:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8384 comm="syz.6.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc278eec9 code=0x7ffc0000 [ 411.173707][ T8375] Quota error (device loop1): write_blk: dquota write failed [ 411.558327][ T8375] Quota error (device loop1): find_free_dqentry: Can't write quota data block 2 [ 411.667040][ T8375] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 411.677248][ T8375] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.488: Failed to acquire dquot type 0 [ 411.704447][ T8375] EXT4-fs error (device loop1): ext4_free_blocks:6676: comm syz.1.488: Freeing blocks not in datazone - block = 0, count = 4096 [ 411.721647][ T8375] Quota error (device loop1): write_blk: dquota write failed [ 411.729255][ T8375] Quota error (device loop1): find_free_dqentry: Can't write quota data block 2 [ 411.738807][ T8375] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 411.749397][ T8375] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.488: Failed to acquire dquot type 0 [ 411.775113][ T8375] EXT4-fs (loop1): 1 orphan inode deleted [ 411.782640][ T8375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.055966][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.413039][ T8421] loop6: detected capacity change from 0 to 512 [ 414.422509][ T8421] EXT4-fs: Ignoring removed mblk_io_submit option [ 416.357240][ T8421] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 416.385438][ T8421] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal [ 417.918351][ T8430] usb usb1: check_ctrlrecip: process 8430 (syz.1.501) requesting ep 01 but needs 81 [ 419.314386][ T8438] loop1: detected capacity change from 0 to 1024 [ 419.323205][ T8438] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 419.359623][ T8438] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.504: bg 0: block 10: padding at end of block bitmap is not set [ 419.379604][ T8438] __quota_error: 7 callbacks suppressed [ 419.379624][ T8438] Quota error (device loop1): write_blk: dquota write failed [ 419.392912][ T8438] Quota error (device loop1): find_free_dqentry: Can't write quota data block 2 [ 419.402203][ T8438] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 419.412306][ T8438] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.504: Failed to acquire dquot type 0 [ 419.556344][ T8445] loop5: detected capacity change from 0 to 1024 [ 419.568560][ T8445] EXT4-fs: Ignoring removed i_version option [ 419.667107][ T8445] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 419.707635][ T8445] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:478: comm syz.5.506: Invalid block bitmap block 0 in block_group 0 [ 419.723377][ T8445] Quota error (device loop5): write_blk: dquota write failed [ 419.731175][ T8445] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 419.741690][ T8445] EXT4-fs error (device loop5): ext4_acquire_dquot:6940: comm syz.5.506: Failed to acquire dquot type 0 [ 419.760233][ T8445] EXT4-fs error (device loop5): ext4_free_blocks:6676: comm syz.5.506: Freeing blocks not in datazone - block = 0, count = 4096 [ 419.776942][ T8445] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.506: Invalid inode bitmap blk 0 in block_group 0 [ 419.793808][ T8445] EXT4-fs error (device loop5) in ext4_free_inode:363: Corrupt filesystem [ 419.819856][ T8445] EXT4-fs (loop5): 1 orphan inode deleted [ 419.838495][ T8445] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.927616][ T8438] Quota error (device loop1): write_blk: dquota write failed [ 419.935203][ T8438] Quota error (device loop1): find_free_dqentry: Can't write quota data block 2 [ 419.945577][ T8438] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 419.955738][ T8438] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.504: Failed to acquire dquot type 0 [ 419.969420][ T8438] EXT4-fs error (device loop1): ext4_free_blocks:6676: comm syz.1.504: Freeing blocks not in datazone - block = 0, count = 4096 [ 420.000330][ T8438] Quota error (device loop1): write_blk: dquota write failed [ 420.007796][ T8438] Quota error (device loop1): find_free_dqentry: Can't write quota data block 2 [ 420.017196][ T8438] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.504: Failed to acquire dquot type 0 [ 420.035890][ T8438] EXT4-fs (loop1): 1 orphan inode deleted [ 420.043234][ T8438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.262861][ T6237] EXT4-fs error (device loop5): ext4_release_dquot:6976: comm kworker/u4:23: Failed to release dquot type 0 [ 421.698370][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.891699][ T7475] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.791535][ T8496] loop1: detected capacity change from 0 to 512 [ 426.804972][ T8496] EXT4-fs: Ignoring removed orlov option [ 426.877031][ T8496] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 427.108799][ T8496] EXT4-fs (loop1): 1 orphan inode deleted [ 427.124839][ T8496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.142840][ T8496] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.274901][ T6235] __quota_error: 2 callbacks suppressed [ 428.274922][ T6235] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 428.318716][ T6235] EXT4-fs error (device loop1): ext4_release_dquot:6976: comm kworker/u4:22: Failed to release dquot type 1 [ 428.431657][ T8500] loop5: detected capacity change from 0 to 1024 [ 428.458592][ T8500] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 428.522228][ T8500] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.517: bg 0: block 10: padding at end of block bitmap is not set [ 428.547268][ T8500] Quota error (device loop5): write_blk: dquota write failed [ 428.554964][ T8500] Quota error (device loop5): find_free_dqentry: Can't write quota data block 2 [ 428.564373][ T8500] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 428.574636][ T8500] EXT4-fs error (device loop5): ext4_acquire_dquot:6940: comm syz.5.517: Failed to acquire dquot type 0 [ 428.588495][ T8500] Quota error (device loop5): write_blk: dquota write failed [ 428.595999][ T8500] Quota error (device loop5): find_free_dqentry: Can't write quota data block 2 [ 428.605560][ T8500] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 428.615850][ T8500] EXT4-fs error (device loop5): ext4_acquire_dquot:6940: comm syz.5.517: Failed to acquire dquot type 0 [ 428.628194][ T8500] EXT4-fs error (device loop5): ext4_free_blocks:6676: comm syz.5.517: Freeing blocks not in datazone - block = 0, count = 4096 [ 428.642626][ T8500] Quota error (device loop5): write_blk: dquota write failed [ 428.651337][ T8500] Quota error (device loop5): find_free_dqentry: Can't write quota data block 2 [ 428.660695][ T8500] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 428.670697][ T8500] EXT4-fs error (device loop5): ext4_acquire_dquot:6940: comm syz.5.517: Failed to acquire dquot type 0 [ 428.683127][ T8500] EXT4-fs (loop5): 1 orphan inode deleted [ 428.690783][ T8500] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.061365][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.645162][ T8535] loop1: detected capacity change from 0 to 128 [ 435.737301][ T7475] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.384645][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 436.396775][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 436.406560][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 436.459340][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 436.470483][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 436.499828][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 436.689813][ T8540] loop5: detected capacity change from 0 to 40427 [ 436.720923][ T8540] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 436.728848][ T8540] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 436.751795][ T8540] F2FS-fs (loop5): invalid crc value [ 436.767071][ T8540] F2FS-fs (loop5): Found nat_bits in checkpoint [ 436.928311][ T8540] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 436.936821][ T8540] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 437.113555][ T8537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.524'. [ 437.362862][ T6214] kworker/u4:14: attempt to access beyond end of device [ 437.362862][ T6214] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 438.717496][ T5790] Bluetooth: hci3: command tx timeout [ 439.275679][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 439.297166][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 439.320214][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 439.330679][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 439.338568][ T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 439.350249][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 440.700649][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.707062][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.821722][ T50] Bluetooth: hci3: command tx timeout [ 441.592179][ T50] Bluetooth: hci1: command tx timeout [ 441.866960][ T8543] chnl_net:caif_netlink_parms(): no params data found [ 442.342491][ T6237] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.539554][ T6237] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.563288][ T8543] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.577793][ T8543] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.596660][ T8543] bridge_slave_0: entered allmulticast mode [ 442.606040][ T8543] bridge_slave_0: entered promiscuous mode [ 442.627978][ T8543] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.635439][ T8543] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.644505][ T8543] bridge_slave_1: entered allmulticast mode [ 442.657762][ T8543] bridge_slave_1: entered promiscuous mode [ 442.688514][ T8604] loop5: detected capacity change from 0 to 128 [ 442.707900][ T6237] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.834047][ T8543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.878700][ T8605] netlink: 24 bytes leftover after parsing attributes in process `syz.5.535'. [ 442.888318][ T50] Bluetooth: hci3: command tx timeout [ 443.003959][ T6237] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.054218][ T8543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.247700][ T8543] team0: Port device team_slave_0 added [ 443.329243][ T8543] team0: Port device team_slave_1 added [ 443.600225][ T50] Bluetooth: hci1: command tx timeout [ 444.061892][ T6227] kworker/u4:18: attempt to access beyond end of device [ 444.061892][ T6227] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 444.305652][ T8567] chnl_net:caif_netlink_parms(): no params data found [ 444.328270][ T8543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.353142][ T8543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.410142][ T8543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.433681][ T8543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.441088][ T8543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.490837][ T8621] serio: Serial port ptm0 [ 444.513064][ T8543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.960295][ T50] Bluetooth: hci3: command tx timeout [ 445.654179][ T6237] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.325177][ T8630] loop5: detected capacity change from 0 to 256 [ 447.332549][ T8630] exfat: Unknown parameter 'pcr' [ 447.510106][ T50] Bluetooth: hci1: command tx timeout [ 447.721555][ T6237] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.191733][ T6237] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.237062][ T5799] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 449.457172][ T8543] hsr_slave_0: entered promiscuous mode [ 449.520800][ T50] Bluetooth: hci1: command tx timeout [ 449.529285][ T8649] loop5: detected capacity change from 0 to 128 [ 449.541678][ T8543] hsr_slave_1: entered promiscuous mode [ 449.559689][ T8543] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.576010][ T8543] Cannot create hsr debugfs directory [ 449.704081][ T8567] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.712544][ T8567] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.721612][ T8567] bridge_slave_0: entered allmulticast mode [ 449.729146][ T8567] bridge_slave_0: entered promiscuous mode [ 449.795501][ T6237] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.067704][ T8653] netlink: 24 bytes leftover after parsing attributes in process `syz.5.543'. [ 450.100576][ T8567] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.108316][ T8567] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.117964][ T8567] bridge_slave_1: entered allmulticast mode [ 450.132581][ T8567] bridge_slave_1: entered promiscuous mode [ 450.363748][ T8567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.387478][ T8567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.453916][ T1322] kworker/u4:6: attempt to access beyond end of device [ 450.453916][ T1322] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 450.677190][ T8567] team0: Port device team_slave_0 added [ 450.738484][ T8567] team0: Port device team_slave_1 added [ 451.266317][ T8567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.468206][ T8567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.759280][ T8567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.773190][ T8567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.790197][ T8567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.820938][ T8567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.911325][ T6237] tipc: Left network mode [ 452.317071][ T8567] hsr_slave_0: entered promiscuous mode [ 452.342651][ T8567] hsr_slave_1: entered promiscuous mode [ 452.349240][ T8694] loop5: detected capacity change from 0 to 512 [ 452.355757][ T8567] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 452.376893][ T8567] Cannot create hsr debugfs directory [ 452.388849][ T8694] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 452.439546][ T8694] EXT4-fs (loop5): 1 orphan inode deleted [ 452.445736][ T8694] EXT4-fs (loop5): 1 truncate cleaned up [ 452.471721][ T8694] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.490460][ T8694] EXT4-fs error (device loop5): ext4_search_dir:1549: inode #12: block 7: comm syz.5.549: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 452.530246][ T8694] EXT4-fs (loop5): Remounting filesystem read-only [ 452.610608][ T7475] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.802577][ T8543] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 452.983258][ T8705] loop5: detected capacity change from 0 to 512 [ 453.161681][ T8705] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 453.172196][ T8705] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 453.198925][ T8705] EXT4-fs (loop5): 1 truncate cleaned up [ 453.211134][ T8705] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.838641][ T8709] loop1: detected capacity change from 0 to 128 [ 455.109346][ T8543] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 455.845366][ T8543] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 455.882936][ T8543] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 455.966175][ T8711] netlink: 24 bytes leftover after parsing attributes in process `syz.1.551'. [ 456.001319][ T8696] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 456.036798][ T7475] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.196821][ T6221] kworker/u4:16: attempt to access beyond end of device [ 456.196821][ T6221] loop1: rw=1, sector=145, nr_sectors = 520 limit=128 [ 456.250481][ T8718] loop5: detected capacity change from 0 to 1024 [ 456.288840][ T8718] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 456.312808][ T8718] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.377244][ T8727] loop1: detected capacity change from 0 to 1024 [ 456.389079][ T8727] EXT4-fs: Ignoring removed i_version option [ 456.395409][ T8727] EXT4-fs: inline encryption not supported [ 456.405594][ T8727] EXT4-fs (loop1): Test dummy encryption mode enabled [ 456.421754][ T8718] EXT4-fs error (device loop5): ext4_map_blocks:718: inode #15: block 3: comm syz.5.552: lblock 3 mapped to illegal pblock 3 (length 3) [ 456.447028][ T8727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.462090][ T8718] EXT4-fs error (device loop5): ext4_ext_remove_space:2929: inode #15: comm syz.5.552: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 456.572179][ T8731] EXT4-fs error (device loop5): ext4_map_blocks:718: inode #15: block 7: comm syz.5.552: lblock 7 mapped to illegal pblock 7 (length 9) [ 456.635983][ T8731] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117 [ 456.700337][ T8731] EXT4-fs (loop5): This should not happen!! Data will be lost [ 456.700337][ T8731] [ 456.718994][ T8727] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 456.806050][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.842992][ T7475] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 458.445978][ T8754] input: syz0 as /devices/virtual/input/input10 [ 458.648202][ T8567] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 458.710623][ T8567] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 458.741536][ T8567] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 458.772084][ T8567] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 459.015182][ T8543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.125993][ T8772] loop1: detected capacity change from 0 to 2048 [ 459.178096][ T8543] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.217409][ T8772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.300294][ T8772] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.437527][ T6239] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.444830][ T6239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.496016][ T6239] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.503319][ T6239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.601063][ T6237] hsr_slave_0: left promiscuous mode [ 459.620388][ T6237] hsr_slave_1: left promiscuous mode [ 459.682385][ T6237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.700661][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.712915][ T6237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.728044][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.765517][ T6237] bridge_slave_1: left allmulticast mode [ 459.780923][ T6237] bridge_slave_1: left promiscuous mode [ 459.786870][ T6237] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.836530][ T6237] bridge_slave_0: left allmulticast mode [ 459.842622][ T6237] bridge_slave_0: left promiscuous mode [ 459.848414][ T6237] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.910137][ T6237] hsr_slave_0: left promiscuous mode [ 459.916444][ T6237] hsr_slave_1: left promiscuous mode [ 459.925721][ T6237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.940172][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.958552][ T6237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.976466][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.992797][ T6237] bridge_slave_1: left allmulticast mode [ 460.000046][ T6237] bridge_slave_1: left promiscuous mode [ 460.005847][ T6237] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.032405][ T6237] bridge_slave_0: left allmulticast mode [ 460.048415][ T6237] bridge_slave_0: left promiscuous mode [ 460.054310][ T6237] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.190626][ T6237] veth1_macvtap: left promiscuous mode [ 460.196367][ T6237] veth0_macvtap: left promiscuous mode [ 460.210164][ T6237] veth1_vlan: left promiscuous mode [ 460.220151][ T6237] veth0_vlan: left promiscuous mode [ 460.238270][ T6237] veth1_macvtap: left promiscuous mode [ 460.250296][ T6237] veth0_macvtap: left promiscuous mode [ 460.260702][ T6237] veth1_vlan: left promiscuous mode [ 460.276529][ T6237] veth0_vlan: left promiscuous mode [ 460.547618][ T28] audit: type=1800 audit(1758850208.989:241): pid=8772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.559" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 460.982731][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.928806][ T8790] loop1: detected capacity change from 0 to 40427 [ 462.948935][ T8790] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 462.957690][ T8790] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 462.985834][ T6237] team0 (unregistering): Port device team_slave_1 removed [ 462.996017][ T8790] F2FS-fs (loop1): invalid crc value [ 463.044506][ T8790] F2FS-fs (loop1): Found nat_bits in checkpoint [ 463.112290][ T6237] team0 (unregistering): Port device team_slave_0 removed [ 463.186824][ T8790] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 463.194220][ T8790] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 463.329601][ T6237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.478056][ T6237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.888031][ T6237] bond0 (unregistering): Released all slaves [ 465.642038][ T6237] team0 (unregistering): Port device team_slave_1 removed [ 465.701003][ T6237] team0 (unregistering): Port device team_slave_0 removed [ 465.761986][ T6237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.823966][ T6237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.508398][ T6237] bond0 (unregistering): Released all slaves [ 466.994802][ T8567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.105178][ T28] audit: type=1326 audit(1758850215.549:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c92d8eec9 code=0x7ffc0000 [ 467.203396][ T8817] loop5: detected capacity change from 0 to 16 [ 467.284176][ T8817] erofs: (device loop5): mounted with root inode @ nid 36. [ 467.420336][ T28] audit: type=1326 audit(1758850215.549:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c92d8eec9 code=0x7ffc0000 [ 467.807265][ T8567] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.888949][ T28] audit: type=1326 audit(1758850215.549:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f7c92d8eec9 code=0x7ffc0000 [ 468.023688][ T6006] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.030940][ T6006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.110094][ T28] audit: type=1326 audit(1758850215.549:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c92d8eec9 code=0x7ffc0000 [ 468.211974][ T6006] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.219416][ T6006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.290183][ T28] audit: type=1326 audit(1758850215.549:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7c92d8eec9 code=0x7ffc0000 [ 468.520090][ T28] audit: type=1326 audit(1758850215.549:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c92d8eec9 code=0x7ffc0000 [ 468.736459][ T28] audit: type=1326 audit(1758850215.549:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c92d8eec9 code=0x7ffc0000 [ 468.832997][ T28] audit: type=1326 audit(1758850215.549:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c92d8eec9 code=0x7ffc0000 [ 468.920593][ T28] audit: type=1326 audit(1758850215.549:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f7c92d8eec9 code=0x7ffc0000 [ 468.944970][ T28] audit: type=1326 audit(1758850215.549:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c92d8eec9 code=0x7ffc0000 [ 469.077461][ T8830] loop1: detected capacity change from 0 to 256 [ 469.085158][ T8830] exfat: Unknown parameter 'fsmagic' [ 469.202771][ T5799] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 469.326904][ T8543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.045186][ T8567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.506286][ T8864] loop1: detected capacity change from 0 to 512 [ 471.519058][ T8864] EXT4-fs: Ignoring removed orlov option [ 471.621929][ T8864] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 471.820487][ T8864] EXT4-fs (loop1): 1 orphan inode deleted [ 471.834943][ T8864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.849665][ T8864] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.559578][ T8543] veth0_vlan: entered promiscuous mode [ 472.636052][ T8872] loop5: detected capacity change from 0 to 512 [ 472.666547][ T8543] veth1_vlan: entered promiscuous mode [ 472.794056][ T8872] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.840334][ T8872] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.847837][ T12] __quota_error: 10 callbacks suppressed [ 472.847870][ T12] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 472.868672][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6976: comm kworker/u4:1: Failed to release dquot type 1 [ 472.922335][ T8543] veth0_macvtap: entered promiscuous mode [ 473.000183][ T8543] veth1_macvtap: entered promiscuous mode [ 473.418067][ T8543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.418093][ T8543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.418107][ T8543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.418122][ T8543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.287369][ T8543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.313996][ T8543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.314022][ T8543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.314036][ T8543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.314050][ T8543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.315743][ T8543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.333527][ T8543] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.333626][ T8543] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.333656][ T8543] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.333685][ T8543] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.436791][ T7475] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.438104][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.966741][ T8896] loop1: detected capacity change from 0 to 1024 [ 474.978701][ T8896] EXT4-fs: Ignoring removed i_version option [ 475.096211][ T8896] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 475.212083][ T8896] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.577: Invalid block bitmap block 0 in block_group 0 [ 475.228091][ T8896] Quota error (device loop1): write_blk: dquota write failed [ 475.235861][ T8896] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 475.246320][ T8896] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.577: Failed to acquire dquot type 0 [ 475.268521][ T8896] EXT4-fs error (device loop1): ext4_free_blocks:6676: comm syz.1.577: Freeing blocks not in datazone - block = 0, count = 4096 [ 475.298172][ T8896] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.577: Invalid inode bitmap blk 0 in block_group 0 [ 475.312178][ T8896] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem [ 475.322035][ T8896] EXT4-fs (loop1): 1 orphan inode deleted [ 475.334186][ T8896] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.386779][ T8896] netlink: 72 bytes leftover after parsing attributes in process `syz.1.577'. [ 475.722485][ T58] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 475.791759][ T6006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.821374][ T58] EXT4-fs error (device loop1): ext4_release_dquot:6976: comm kworker/u4:4: Failed to release dquot type 0 [ 475.846945][ T6006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.354206][ T6227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.383097][ T8567] veth0_vlan: entered promiscuous mode [ 476.396861][ T6227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.477479][ T8567] veth1_vlan: entered promiscuous mode [ 476.863246][ T8567] veth0_macvtap: entered promiscuous mode [ 476.963989][ T8567] veth1_macvtap: entered promiscuous mode [ 477.119830][ T8567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.193353][ T8567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.247921][ T8567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.334805][ T8567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.369171][ T8567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.390436][ T8567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.408085][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.421905][ T8567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.483315][ T8567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.542765][ T8567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.840862][ T8567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.121348][ T8567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.410183][ T8567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.438065][ T8567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.454334][ T8567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.467610][ T8921] binder: BINDER_SET_CONTEXT_MGR already set [ 478.475006][ T8921] binder: 8919:8921 ioctl 4018620d 2000000002c0 returned -16 [ 478.572493][ T8567] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.591159][ T8567] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.620622][ T8567] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.651788][ T8927] loop7: detected capacity change from 0 to 128 [ 478.667551][ T8931] loop1: detected capacity change from 0 to 128 [ 478.670577][ T8567] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.683213][ T8931] EXT4-fs (loop1): Test dummy encryption mode enabled [ 478.691022][ T8927] FAT-fs (loop7): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 478.743749][ T8931] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 478.762593][ T8931] ext4 filesystem being mounted at /173/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 479.086677][ T6235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.114422][ T6235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.224224][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.248271][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.418056][ T5789] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 480.895091][ T28] audit: type=1326 audit(1758850229.329:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.5.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4d18eec9 code=0x7ffc0000 [ 481.007426][ T28] audit: type=1326 audit(1758850229.329:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.5.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4d18eec9 code=0x7ffc0000 [ 481.030576][ T28] audit: type=1326 audit(1758850229.399:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.5.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec4d18eec9 code=0x7ffc0000 [ 481.110309][ T8963] loop1: detected capacity change from 0 to 1024 [ 481.117934][ T8963] EXT4-fs: Ignoring removed i_version option [ 481.183591][ T8963] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 481.382500][ T8963] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.590: Invalid block bitmap block 0 in block_group 0 [ 481.398229][ T8963] Quota error (device loop1): write_blk: dquota write failed [ 481.406610][ T8963] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 481.418764][ T8963] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.590: Failed to acquire dquot type 0 [ 481.436158][ T8963] EXT4-fs error (device loop1): ext4_free_blocks:6676: comm syz.1.590: Freeing blocks not in datazone - block = 0, count = 4096 [ 481.452608][ T8963] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.590: Invalid inode bitmap blk 0 in block_group 0 [ 481.466730][ T8963] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem [ 481.483002][ T8963] EXT4-fs (loop1): 1 orphan inode deleted [ 481.495643][ T8963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.562505][ T8963] netlink: 72 bytes leftover after parsing attributes in process `syz.1.590'. [ 481.685611][ T6231] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 481.882837][ T28] audit: type=1326 audit(1758850229.399:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.5.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4d18eec9 code=0x7ffc0000 [ 481.958414][ T8967] loop7: detected capacity change from 0 to 128 [ 481.965969][ T6231] EXT4-fs error (device loop1): ext4_release_dquot:6976: comm kworker/u4:20: Failed to release dquot type 0 [ 482.110445][ T28] audit: type=1326 audit(1758850229.399:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.5.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4d18eec9 code=0x7ffc0000 [ 482.264541][ T28] audit: type=1326 audit(1758850229.399:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.5.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec4d18eec9 code=0x7ffc0000 [ 482.329490][ T8971] netlink: 24 bytes leftover after parsing attributes in process `syz.7.591'. [ 482.424673][ T28] audit: type=1326 audit(1758850229.399:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.5.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4d18eec9 code=0x7ffc0000 [ 484.238675][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.312412][ T6231] kworker/u4:20: attempt to access beyond end of device [ 484.312412][ T6231] loop7: rw=1, sector=145, nr_sectors = 816 limit=128 [ 485.680094][ T5775] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 485.973979][ T6227] Bluetooth: hci4: Frame reassembly failed (-84) [ 486.864646][ T5775] usb 2-1: unable to get BOS descriptor or descriptor too short [ 486.880940][ T5775] usb 2-1: not running at top speed; connect to a high speed hub [ 486.891831][ T5775] usb 2-1: config 1 has an invalid interface number: 138 but max is 0 [ 486.910256][ T5775] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.929941][ T5775] usb 2-1: config 1 has no interface number 0 [ 486.949631][ T5775] usb 2-1: config 1 interface 138 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 486.966454][ T5775] usb 2-1: config 1 interface 138 has no altsetting 0 [ 486.992785][ T5775] usb 2-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 487.016680][ T5775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.046498][ T5775] usb 2-1: Product: syz [ 487.051584][ T5775] usb 2-1: Manufacturer: syz [ 487.056242][ T5775] usb 2-1: SerialNumber: syz [ 487.479004][ T5775] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 488.107401][ T50] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 488.588080][ T5775] usb 2-1: USB disconnect, device number 2 [ 489.118245][ T9031] loop5: detected capacity change from 0 to 512 [ 489.416244][ T9031] EXT4-fs: Ignoring removed bh option [ 489.563902][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 489.671848][ T9031] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.820183][ T9031] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 490.174353][ T7475] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.612608][ T9052] loop8: detected capacity change from 0 to 1024 [ 490.751720][ T9052] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 490.780230][ T9052] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 492.150977][ T9070] hub 8-0:1.0: USB hub found [ 492.160530][ T9070] hub 8-0:1.0: 1 port detected [ 492.826740][ T9040] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 493.695137][ T8567] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 495.054096][ T9090] usb usb1: check_ctrlrecip: process 9090 (syz.5.614) requesting ep 01 but needs 81 [ 495.160259][ T9093] loop8: detected capacity change from 0 to 512 [ 495.178064][ T9093] EXT4-fs: Ignoring removed bh option [ 495.265733][ T9093] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.280340][ T9093] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 495.428346][ T8567] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.256289][ T9146] usb usb1: check_ctrlrecip: process 9146 (syz.7.625) requesting ep 01 but needs 81 [ 499.266251][ T9146] usb usb1: usbfs: process 9146 (syz.7.625) did not claim interface 0 before use [ 499.322472][ T9145] loop1: detected capacity change from 0 to 512 [ 499.361167][ T9145] EXT4-fs: Ignoring removed mblk_io_submit option [ 499.752902][ T9145] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 499.822508][ T9145] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 502.219545][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.226139][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.953108][ T9174] loop8: detected capacity change from 0 to 8192 [ 508.001735][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 508.001751][ T28] audit: type=1800 audit(1758850256.439:272): pid=9174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.633" name="bus" dev="loop8" ino=1048643 res=0 errno=0 [ 508.119820][ T28] audit: type=1107 audit(1758850256.559:273): pid=9167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='nhA' [ 510.507898][ T5886] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 510.843792][ T5886] usb 9-1: Using ep0 maxpacket: 32 [ 510.859294][ T5886] usb 9-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 510.869310][ T5886] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.878505][ T5886] usb 9-1: Product: syz [ 510.884875][ T5886] usb 9-1: Manufacturer: syz [ 510.889696][ T5886] usb 9-1: SerialNumber: syz [ 510.945426][ T5886] usb 9-1: config 0 descriptor?? [ 510.972644][ T5886] ums-onetouch 9-1:0.0: USB Mass Storage device detected [ 511.198304][ T5886] usb 9-1: Found UVC 0.00 device syz (0d49:7000) [ 511.243273][ T5886] usb 9-1: No valid video chain found. [ 511.303423][ T5886] usb 9-1: USB disconnect, device number 2 [ 513.156351][ T9229] loop8: detected capacity change from 0 to 512 [ 514.410418][ T9229] EXT4-fs: Ignoring removed mblk_io_submit option [ 514.579319][ T9229] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 514.616251][ T9229] EXT4-fs (loop8): can't mount with data_err=abort, fs mounted w/o journal [ 515.659485][ T9227] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 515.822846][ T9231] fuse: Bad value for 'fd' [ 517.754437][ T9238] overlayfs: missing 'lowerdir' [ 519.721811][ T28] audit: type=1107 audit(1758850268.159:274): pid=9248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='nhA' [ 521.132558][ T9257] overlayfs: failed to clone upperpath [ 521.500439][ T9262] syz.8.651[9262] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 521.501267][ T9262] syz.8.651[9262] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 524.078465][ T9276] syz.5.656[9276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 524.135057][ T9276] syz.5.656[9276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 526.186963][ T9284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 527.220300][ T9284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 527.231082][ T9284] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 527.239417][ T9284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 527.247817][ T9284] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 527.265951][ T9284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 529.181591][ T28] audit: type=1326 audit(1758850277.629:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.5.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4d18eec9 code=0x7ffc0000 [ 529.247183][ T28] audit: type=1326 audit(1758850277.659:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.5.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fec4d18d710 code=0x7ffc0000 [ 529.284549][ T5790] Bluetooth: hci4: command tx timeout [ 529.308296][ T28] audit: type=1326 audit(1758850277.659:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.5.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fec4d18d710 code=0x7ffc0000 [ 529.343720][ T28] audit: type=1326 audit(1758850277.659:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.5.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4d18eec9 code=0x7ffc0000 [ 529.368041][ T28] audit: type=1326 audit(1758850277.659:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.5.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fec4d18eec9 code=0x7ffc0000 [ 529.391629][ T28] audit: type=1326 audit(1758850277.659:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.5.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4d18eec9 code=0x7ffc0000 [ 529.415659][ T28] audit: type=1326 audit(1758850277.669:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.5.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4d18eec9 code=0x7ffc0000 [ 529.722836][ T9284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 529.756880][ T9284] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 529.784414][ T9284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 529.820597][ T9284] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 529.829605][ T9284] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 529.837572][ T9284] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 530.168174][ T9290] netlink: 12 bytes leftover after parsing attributes in process `syz.8.660'. [ 530.283744][ T9300] tipc: Enabling of bearer rejected, failed to enable media [ 531.821012][ T9284] Bluetooth: hci4: command tx timeout [ 531.931962][ T9284] Bluetooth: hci5: command tx timeout [ 533.840352][ T9284] Bluetooth: hci4: command tx timeout [ 533.999995][ T9284] Bluetooth: hci5: command tx timeout [ 535.029643][ T9326] loop8: detected capacity change from 0 to 1024 [ 535.144602][ T5799] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 535.594287][ T9335] netlink: 1212 bytes leftover after parsing attributes in process `syz.5.669'. [ 535.922083][ T9284] Bluetooth: hci4: command tx timeout [ 536.090296][ T9284] Bluetooth: hci5: command tx timeout [ 536.108088][ T9346] fuse: Bad value for 'fd' [ 536.246751][ T9281] chnl_net:caif_netlink_parms(): no params data found [ 536.271563][ T9350] loop8: detected capacity change from 0 to 1024 [ 536.278152][ T9349] netlink: 24 bytes leftover after parsing attributes in process `syz.5.673'. [ 536.303145][ T9350] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 536.455793][ T9350] EXT4-fs error (device loop8): ext4_validate_block_bitmap:439: comm syz.8.671: bg 0: block 10: padding at end of block bitmap is not set [ 536.567661][ T9350] Quota error (device loop8): write_blk: dquota write failed [ 536.596186][ T9350] Quota error (device loop8): find_free_dqentry: Can't write quota data block 2 [ 536.677884][ T9302] chnl_net:caif_netlink_parms(): no params data found [ 536.683904][ T9350] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 536.694866][ T9350] EXT4-fs error (device loop8): ext4_acquire_dquot:6940: comm syz.8.671: Failed to acquire dquot type 0 [ 536.713009][ T9350] Quota error (device loop8): write_blk: dquota write failed [ 536.721106][ T9350] Quota error (device loop8): find_free_dqentry: Can't write quota data block 2 [ 536.730502][ T9350] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 536.760028][ T9350] EXT4-fs error (device loop8): ext4_acquire_dquot:6940: comm syz.8.671: Failed to acquire dquot type 0 [ 536.794788][ T9350] EXT4-fs error (device loop8): ext4_free_blocks:6676: comm syz.8.671: Freeing blocks not in datazone - block = 0, count = 4096 [ 536.824485][ T9350] Quota error (device loop8): write_blk: dquota write failed [ 536.898735][ T9350] Quota error (device loop8): find_free_dqentry: Can't write quota data block 2 [ 536.951960][ T9350] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 536.988076][ T9281] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.015697][ T9350] EXT4-fs error (device loop8): ext4_acquire_dquot:6940: comm syz.8.671: Failed to acquire dquot type 0 [ 537.029480][ T9281] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.038153][ T9281] bridge_slave_0: entered allmulticast mode [ 537.055645][ T9281] bridge_slave_0: entered promiscuous mode [ 537.090589][ T9350] EXT4-fs (loop8): 1 orphan inode deleted [ 537.121422][ T9350] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.210071][ T9281] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.217717][ T9281] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.225609][ T9281] bridge_slave_1: entered allmulticast mode [ 537.233317][ T9281] bridge_slave_1: entered promiscuous mode [ 537.335154][ T9281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.433581][ T9281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.483003][ T9302] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.500045][ T9302] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.510852][ T9302] bridge_slave_0: entered allmulticast mode [ 537.528786][ T9302] bridge_slave_0: entered promiscuous mode [ 537.597943][ T9302] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.624027][ T9302] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.647908][ T9302] bridge_slave_1: entered allmulticast mode [ 537.671300][ T9302] bridge_slave_1: entered promiscuous mode [ 537.723809][ T9281] team0: Port device team_slave_0 added [ 537.753092][ T9281] team0: Port device team_slave_1 added [ 537.859248][ T9281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.884215][ T9281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.960889][ T9281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.019678][ T9281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.039994][ T9281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.090196][ T9281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.151746][ T9302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.161368][ T9284] Bluetooth: hci5: command tx timeout [ 538.201069][ T9302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.411419][ T9281] hsr_slave_0: entered promiscuous mode [ 538.418384][ T9281] hsr_slave_1: entered promiscuous mode [ 538.508269][ T9302] team0: Port device team_slave_0 added [ 538.535759][ T9302] team0: Port device team_slave_1 added [ 538.797147][ T6235] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.895465][ T9302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.912110][ T9390] raw_sendmsg: syz.5.677 forgot to set AF_INET. Fix it! [ 538.923527][ T9302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.989194][ T9302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.115665][ T6235] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.168372][ T9302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.186935][ T9302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.253533][ T9302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.334861][ T6235] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.492552][ T6235] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.573473][ T9302] hsr_slave_0: entered promiscuous mode [ 539.587211][ T9302] hsr_slave_1: entered promiscuous mode [ 539.602616][ T9302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 539.619993][ T9302] Cannot create hsr debugfs directory [ 540.238816][ T6235] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.542905][ T6235] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.705643][ T6235] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.743579][ T9281] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 540.763962][ T9281] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 540.913039][ T6235] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.980030][ T9281] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 541.260852][ T8567] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.326179][ T9281] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 542.741814][ T9281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.964267][ T9281] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.120004][ T786] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 543.223445][ T6006] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.230702][ T6006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.278155][ T6006] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.285572][ T6006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.324324][ T786] usb 9-1: Using ep0 maxpacket: 16 [ 543.334976][ T786] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.379722][ T786] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.436092][ T786] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 543.475396][ T786] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 543.492584][ T786] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.515555][ T786] usb 9-1: config 0 descriptor?? [ 544.387791][ T786] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 544.401784][ T786] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 544.409153][ T786] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 544.418040][ T786] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 544.425813][ T786] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 544.433613][ T786] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 544.442328][ T786] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 544.449640][ T786] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 544.464297][ T786] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 544.474865][ T786] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 544.494063][ T786] HID 045e:07da: Invalid code 65791 type 1 [ 544.532209][ T786] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0005/input/input11 [ 545.094209][ T9281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.151804][ T786] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 545.233263][ T786] usb 9-1: USB disconnect, device number 3 [ 546.145050][ T9437] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 546.154903][ T9437] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 546.160048][ T28] audit: type=1800 audit(1758850294.589:282): pid=9437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.682" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 546.164992][ T9437] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 548.243804][ T9281] veth0_vlan: entered promiscuous mode [ 548.279055][ T9302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 548.407887][ T9281] veth1_vlan: entered promiscuous mode [ 548.436861][ T9302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 548.527841][ T9302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 548.588628][ T9302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 548.711942][ T28] audit: type=1326 audit(1758850297.159:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9462 comm="syz.8.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd798eec9 code=0x7ffc0000 [ 548.769970][ T28] audit: type=1326 audit(1758850297.189:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9462 comm="syz.8.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fdfd798eec9 code=0x7ffc0000 [ 548.836840][ T9281] veth0_macvtap: entered promiscuous mode [ 548.861343][ T28] audit: type=1326 audit(1758850297.189:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9462 comm="syz.8.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd798eec9 code=0x7ffc0000 [ 548.901826][ T28] audit: type=1326 audit(1758850297.189:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9462 comm="syz.8.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7fdfd798eec9 code=0x7ffc0000 [ 548.925593][ T28] audit: type=1326 audit(1758850297.189:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9462 comm="syz.8.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd798eec9 code=0x7ffc0000 [ 548.948922][ T28] audit: type=1326 audit(1758850297.189:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9462 comm="syz.8.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd798eec9 code=0x7ffc0000 [ 549.042007][ T9281] veth1_macvtap: entered promiscuous mode [ 549.130503][ T6235] hsr_slave_0: left promiscuous mode [ 549.376877][ T6235] hsr_slave_1: left promiscuous mode [ 549.392360][ T6235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.400089][ T6235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.409638][ T6235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.417232][ T6235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.426681][ T6235] bridge_slave_1: left allmulticast mode [ 549.432853][ T6235] bridge_slave_1: left promiscuous mode [ 549.439456][ T6235] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.092122][ T6235] bridge_slave_0: left allmulticast mode [ 550.110025][ T6235] bridge_slave_0: left promiscuous mode [ 550.128651][ T6235] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.186060][ T6235] hsr_slave_0: left promiscuous mode [ 550.198278][ T6235] hsr_slave_1: left promiscuous mode [ 550.227098][ T6235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.255841][ T6235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.265894][ T6235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.280746][ T6235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.299276][ T6235] bridge_slave_1: left allmulticast mode [ 550.312204][ T6235] bridge_slave_1: left promiscuous mode [ 550.318054][ T6235] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.382553][ T6235] bridge_slave_0: left allmulticast mode [ 550.388300][ T6235] bridge_slave_0: left promiscuous mode [ 550.406857][ T6235] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.518181][ T6235] veth1_macvtap: left promiscuous mode [ 550.526267][ T6235] veth0_macvtap: left promiscuous mode [ 550.540179][ T6235] veth1_vlan: left promiscuous mode [ 550.547064][ T6235] veth0_vlan: left promiscuous mode [ 550.564644][ T6235] veth1_macvtap: left promiscuous mode [ 550.574968][ T6235] veth0_macvtap: left promiscuous mode [ 550.599648][ T6235] veth1_vlan: left promiscuous mode [ 550.605771][ T6235] veth0_vlan: left promiscuous mode [ 551.818184][ T6235] team0 (unregistering): Port device team_slave_1 removed [ 551.928972][ T6235] team0 (unregistering): Port device team_slave_0 removed [ 552.049051][ T6235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.234877][ T6235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.298906][ T6235] bond0 (unregistering): Released all slaves [ 554.075190][ T6235] team0 (unregistering): Port device team_slave_1 removed [ 554.147263][ T6235] team0 (unregistering): Port device team_slave_0 removed [ 554.209611][ T6235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.274512][ T6235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.022733][ T6235] bond0 (unregistering): Released all slaves [ 555.149778][ T9487] netlink: 24 bytes leftover after parsing attributes in process `syz.8.693'. [ 555.343969][ T9281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.391012][ T9281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.426229][ T9281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.445049][ T9281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.487557][ T9281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.591953][ T9281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.604658][ T9281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.631866][ T9281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.674155][ T9281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.708686][ T9281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.787068][ T9281] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.808350][ T9281] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.820739][ T9281] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.829531][ T9281] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.082938][ T9302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.193723][ T9302] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.243543][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.250789][ T5926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.297127][ T6227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.338504][ T6227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.436551][ T6227] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.444045][ T6227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.574727][ T6214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.608064][ T6214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.779157][ T6235] ================================================================== [ 556.787307][ T6235] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x47c/0x800 [ 556.795536][ T6235] Write of size 8 at addr ffff88805d5fc830 by task kworker/u4:22/6235 [ 556.804160][ T6235] [ 556.806538][ T6235] CPU: 1 PID: 6235 Comm: kworker/u4:22 Not tainted syzkaller #0 [ 556.814210][ T6235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 556.824306][ T6235] Workqueue: netns cleanup_net [ 556.829239][ T6235] Call Trace: [ 556.832558][ T6235] [ 556.835536][ T6235] dump_stack_lvl+0x16c/0x230 [ 556.840266][ T6235] ? read_lock_is_recursive+0x20/0x20 [ 556.845678][ T6235] ? show_regs_print_info+0x20/0x20 [ 556.850943][ T6235] ? load_image+0x3b0/0x3b0 [ 556.855481][ T6235] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 556.860926][ T6235] ? __virt_addr_valid+0x18c/0x540 [ 556.866076][ T6235] ? __virt_addr_valid+0x469/0x540 [ 556.871319][ T6235] print_report+0xac/0x220 [ 556.875834][ T6235] ? __xfrm_state_delete+0x47c/0x800 [ 556.881167][ T6235] kasan_report+0x117/0x150 [ 556.885810][ T6235] ? __xfrm_state_delete+0x47c/0x800 [ 556.891122][ T6235] __xfrm_state_delete+0x47c/0x800 [ 556.896256][ T6235] xfrm_state_delete_tunnel+0x9e/0x1e0 [ 556.901739][ T6235] ipcomp_destroy+0x4a/0x80 [ 556.906254][ T6235] ___xfrm_state_destroy+0x1fd/0x4d0 [ 556.911562][ T6235] xfrm_state_flush+0x50e/0x830 [ 556.916433][ T6235] xfrm6_tunnel_net_exit+0x46/0x100 [ 556.922093][ T6235] cleanup_net+0x6f4/0xb90 [ 556.926537][ T6235] ? ops_free_list+0x3b0/0x3b0 [ 556.931338][ T6235] ? _raw_spin_unlock_irq+0x23/0x50 [ 556.936620][ T6235] ? process_scheduled_works+0x957/0x15b0 [ 556.942369][ T6235] ? process_scheduled_works+0x957/0x15b0 [ 556.948109][ T6235] process_scheduled_works+0xa45/0x15b0 [ 556.953687][ T6235] ? assign_work+0x400/0x400 [ 556.958296][ T6235] ? assign_work+0x39e/0x400 [ 556.962903][ T6235] worker_thread+0xa55/0xfc0 [ 556.967527][ T6235] kthread+0x2fa/0x390 [ 556.971613][ T6235] ? pr_cont_work+0x560/0x560 [ 556.976308][ T6235] ? kthread_blkcg+0xd0/0xd0 [ 556.980922][ T6235] ret_from_fork+0x48/0x80 [ 556.985485][ T6235] ? kthread_blkcg+0xd0/0xd0 [ 556.990120][ T6235] ret_from_fork_asm+0x11/0x20 [ 556.994987][ T6235] [ 556.998018][ T6235] [ 557.000355][ T6235] Allocated by task 6141: [ 557.004728][ T6235] kasan_set_track+0x4e/0x70 [ 557.009363][ T6235] __kasan_slab_alloc+0x6c/0x80 [ 557.014263][ T6235] slab_post_alloc_hook+0x6e/0x4d0 [ 557.019421][ T6235] kmem_cache_alloc+0x11e/0x2e0 [ 557.024291][ T6235] xfrm_state_alloc+0x22/0x2a0 [ 557.029185][ T6235] __find_acq_core+0x7d8/0x19d0 [ 557.034083][ T6235] xfrm_find_acq+0x6a/0x90 [ 557.038532][ T6235] xfrm_alloc_userspi+0x57a/0xa90 [ 557.043599][ T6235] xfrm_user_rcv_msg+0x596/0x870 [ 557.048673][ T6235] netlink_rcv_skb+0x216/0x480 [ 557.053489][ T6235] xfrm_netlink_rcv+0x79/0x90 [ 557.058179][ T6235] netlink_unicast+0x751/0x8d0 [ 557.062960][ T6235] netlink_sendmsg+0x8c1/0xbe0 [ 557.067765][ T6235] ____sys_sendmsg+0x5bf/0x950 [ 557.072569][ T6235] ___sys_sendmsg+0x220/0x290 [ 557.077292][ T6235] __se_sys_sendmsg+0x1a5/0x270 [ 557.082193][ T6235] do_syscall_64+0x55/0xb0 [ 557.086656][ T6235] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 557.092581][ T6235] [ 557.094913][ T6235] The buggy address belongs to the object at ffff88805d5fc800 [ 557.094913][ T6235] which belongs to the cache xfrm_state of size 848 [ 557.108982][ T6235] The buggy address is located 48 bytes inside of [ 557.108982][ T6235] freed 848-byte region [ffff88805d5fc800, ffff88805d5fcb50) [ 557.122834][ T6235] [ 557.125172][ T6235] The buggy address belongs to the physical page: [ 557.131701][ T6235] page:ffffea0001757f00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88805d5fe000 pfn:0x5d5fc [ 557.143460][ T6235] head:ffffea0001757f00 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 557.152422][ T6235] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 557.160863][ T6235] page_type: 0xffffffff() [ 557.165206][ T6235] raw: 00fff00000000840 ffff888141298000 0000000000000000 0000000000000001 [ 557.173804][ T6235] raw: ffff88805d5fe000 000000008010000e 00000001ffffffff 0000000000000000 [ 557.182407][ T6235] page dumped because: kasan: bad access detected [ 557.188930][ T6235] page_owner tracks the page as allocated [ 557.194828][ T6235] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5883, tgid 5876 (syz.0.1), ts 93003603618, free_ts 92979572766 [ 557.215076][ T6235] post_alloc_hook+0x1cd/0x210 [ 557.219902][ T6235] get_page_from_freelist+0x195c/0x19f0 [ 557.225518][ T6235] __alloc_pages+0x1e3/0x460 [ 557.230128][ T6235] alloc_slab_page+0x5d/0x170 [ 557.234829][ T6235] new_slab+0x87/0x2e0 [ 557.238917][ T6235] ___slab_alloc+0xc6d/0x1300 [ 557.243788][ T6235] kmem_cache_alloc+0x1b7/0x2e0 [ 557.248674][ T6235] xfrm_state_alloc+0x22/0x2a0 [ 557.253470][ T6235] pfkey_add+0x6e1/0x2da0 [ 557.257847][ T6235] pfkey_sendmsg+0xbed/0x1050 [ 557.262552][ T6235] ____sys_sendmsg+0x5bf/0x950 [ 557.267339][ T6235] ___sys_sendmsg+0x220/0x290 [ 557.272039][ T6235] __se_sys_sendmsg+0x1a5/0x270 [ 557.276906][ T6235] do_syscall_64+0x55/0xb0 [ 557.281348][ T6235] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 557.287274][ T6235] page last free stack trace: [ 557.291970][ T6235] free_unref_page_prepare+0x7ce/0x8e0 [ 557.297450][ T6235] free_unref_page+0x32/0x2e0 [ 557.302147][ T6235] free_large_kmalloc+0x101/0x1a0 [ 557.307191][ T6235] bpf_check+0x62c6/0xe970 [ 557.311625][ T6235] bpf_prog_load+0x11cb/0x16d0 [ 557.316405][ T6235] __sys_bpf+0x55a/0x800 [ 557.320693][ T6235] __x64_sys_bpf+0x7c/0x90 [ 557.325157][ T6235] do_syscall_64+0x55/0xb0 [ 557.330235][ T6235] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 557.336165][ T6235] [ 557.338494][ T6235] Memory state around the buggy address: [ 557.344397][ T6235] ffff88805d5fc700: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 557.352465][ T6235] ffff88805d5fc780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 557.360534][ T6235] >ffff88805d5fc800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 557.368633][ T6235] ^ [ 557.374271][ T6235] ffff88805d5fc880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 557.382346][ T6235] ffff88805d5fc900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 557.390427][ T6235] ================================================================== [ 557.398687][ T6235] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 557.405921][ T6235] CPU: 1 PID: 6235 Comm: kworker/u4:22 Not tainted syzkaller #0 [ 557.413602][ T6235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 557.423704][ T6235] Workqueue: netns cleanup_net [ 557.428515][ T6235] Call Trace: [ 557.431838][ T6235] [ 557.434814][ T6235] dump_stack_lvl+0x16c/0x230 [ 557.439709][ T6235] ? show_regs_print_info+0x20/0x20 [ 557.444966][ T6235] ? load_image+0x3b0/0x3b0 [ 557.449532][ T6235] panic+0x2c0/0x710 [ 557.453485][ T6235] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 557.459690][ T6235] ? bpf_jit_dump+0xd0/0xd0 [ 557.464269][ T6235] ? _raw_spin_unlock_irqrestore+0xa9/0x110 [ 557.470227][ T6235] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 557.476258][ T6235] ? _raw_spin_unlock+0x40/0x40 [ 557.481153][ T6235] ? __xfrm_state_delete+0x47c/0x800 [ 557.486488][ T6235] check_panic_on_warn+0x84/0xa0 [ 557.491479][ T6235] ? __xfrm_state_delete+0x47c/0x800 [ 557.496900][ T6235] end_report+0x6f/0x140 [ 557.501188][ T6235] kasan_report+0x128/0x150 [ 557.505738][ T6235] ? __xfrm_state_delete+0x47c/0x800 [ 557.511071][ T6235] __xfrm_state_delete+0x47c/0x800 [ 557.516487][ T6235] xfrm_state_delete_tunnel+0x9e/0x1e0 [ 557.522001][ T6235] ipcomp_destroy+0x4a/0x80 [ 557.526635][ T6235] ___xfrm_state_destroy+0x1fd/0x4d0 [ 557.532406][ T6235] xfrm_state_flush+0x50e/0x830 [ 557.537398][ T6235] xfrm6_tunnel_net_exit+0x46/0x100 [ 557.543267][ T6235] cleanup_net+0x6f4/0xb90 [ 557.547835][ T6235] ? ops_free_list+0x3b0/0x3b0 [ 557.552653][ T6235] ? _raw_spin_unlock_irq+0x23/0x50 [ 557.557896][ T6235] ? process_scheduled_works+0x957/0x15b0 [ 557.563658][ T6235] ? process_scheduled_works+0x957/0x15b0 [ 557.569458][ T6235] process_scheduled_works+0xa45/0x15b0 [ 557.575057][ T6235] ? assign_work+0x400/0x400 [ 557.579687][ T6235] ? assign_work+0x39e/0x400 [ 557.584323][ T6235] worker_thread+0xa55/0xfc0 [ 557.589005][ T6235] kthread+0x2fa/0x390 [ 557.593119][ T6235] ? pr_cont_work+0x560/0x560 [ 557.597846][ T6235] ? kthread_blkcg+0xd0/0xd0 [ 557.602560][ T6235] ret_from_fork+0x48/0x80 [ 557.607021][ T6235] ? kthread_blkcg+0xd0/0xd0 [ 557.611652][ T6235] ret_from_fork_asm+0x11/0x20 [ 557.616465][ T6235] [ 557.619797][ T6235] Kernel Offset: disabled [ 557.624142][ T6235] Rebooting in 86400 seconds..