last executing test programs: 21m55.843788252s ago: executing program 32 (id=354): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x33}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000000000000ff0200000000000000000000000000014e200000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500010029bd700000000000e0000002000000000000000000000000000000000000000000000000000d000000000000000000000a0010"], 0xb8}}, 0x10000000) 21m0.840753028s ago: executing program 33 (id=1495): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000080)=0x80000001, 0x4) write(r0, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d000000", 0x24) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36b, 0xc000, 0x4, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_submit(0x0, 0x1, &(0x7f0000000700)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x42, 0xffffffffffffffff, 0x0, 0x1d, 0x36}]) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m46.800195649s ago: executing program 1 (id=23435): write(0xffffffffffffffff, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d", 0x13) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 4m46.737764203s ago: executing program 1 (id=23436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60004, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 4m46.577114541s ago: executing program 1 (id=23443): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x2a0202, 0x0) faccessat2(r0, &(0x7f0000000080)='\x00', 0x2, 0x1000) 4m46.313155156s ago: executing program 1 (id=23444): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) 4m46.299984996s ago: executing program 1 (id=23446): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, r2, 0x25, 0x4, @val=@tcx}, 0x1c) syz_emit_ethernet(0x11dc0, &(0x7f0000000600)=ANY=[], 0x0) 4m46.159697724s ago: executing program 1 (id=23450): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7a}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m46.159566004s ago: executing program 34 (id=23450): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7a}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m15.464450379s ago: executing program 2 (id=26621): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x3, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4000004}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x10080000, {0x0, 0x0, 0x0, r7, {0x0, 0xffec}, {0x8, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x6, 0x6, 0x9, 0x9, 0x80000001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c065}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m15.237221102s ago: executing program 2 (id=26623): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r0, 0x0, 0x0) mkdirat(r0, 0x0, 0x23) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2m14.758822208s ago: executing program 2 (id=26625): syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000390428bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="80000000800404004c0012800b000100697036746e6c00003c000280140002000000000000000000000000000000000108001400ff01000014000300ff", @ANYRES32=r0], 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x2000c8c0) 2m14.598332587s ago: executing program 2 (id=26627): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 2m14.297217473s ago: executing program 2 (id=26629): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200080, &(0x7f0000000040)={[{@jqfmt_vfsv1}]}, 0xfa, 0x56c, &(0x7f0000000940)="$eJzs3c9rFFccAPDvbBKjxtYIIm0PJeChFuvGJP1hoQd7LK1UaO92SdYg2biS3YhJheqhXnopUiilQukf0HuP0n+gf4XQClIktIdepsw6azbJ7ibG1WzdzwdG35s3mzdvZr6P9/btsgEMrInsn0LEqxHxbRJxuKVsOPLCiUfHrT28PpttSaTpZ38lkeT7mscn+f9jeeaViPjt64iTha311lZWF0qVSnkpz0/WF69M1lZWT11aLM2X58uXp2dmzrwzM/3+e+9uffHo7tr65vl/fvj07kdnvjm+9v0v94/cTuJsHMrLWtvxFG60ZiZiIr8mI3F204FTPaisnyR7fQLsylAe5yOR9QGHYyiPeuDF91VEpMCASsQ/DKjmOKA5t+86D05fvFnegw8bE6DRre1PHr03Evsbc6ODa8mGmVF2JcZ7UH9Wx69/3rmdbdG79yEAtnXjZkScHh7e0P+9HC393+6d3sExm+vQ/8Hzczcb/7w12mb8V3g8/ok245+xNrG7G9vHf+F+D6rpKBv/fdB2/Pt40Wp8KM+91BjzjSQXL1XKWd+WdZMnYmQ0y3dbzzmzdi/tVNY6/su2rP7mWDA/j/vDm9a75kr10tO0udWDmxGvDbdr//r4N2lz/7PrcX6HdRwr33m9U9n27X+20p8j3mh7/9fnOkn39cnJxvMw2Xwqtvr71rHfO9W/1+3P7v/B7u0fT1rXa2tPXsdP+/8tdyqbSPJF0yd8/vclnzfS+/J910r1+tJUxL7kk637p9df28w3j8/af+J4+/jv9vwfiIgvdtj+W0dvdTy0H+7/3BPd/w6JNOlYdO/jL3/sVP/O+r+3G6kT+Z6d9H9dznRD4mmuHQAAAAAAAPSbQkQciqRQfJwuFIrFR5/vOBoHC5VqrX7yYnX58lw0vis7HiOF5kr3WMvnIabyz8M289Ob8jMRcSQivhs60MgXZ6uVub1uPAAAAAAAAAAAAAAAAAAAAPSJsQ7f/8/8MbTXZwc8c37yGwbXtvHfi196AvpSl/h/8X7xF9jA+B8Gl/iHwSX+YXCJfxhc4h8Gl/iHwSX+AQAAAAAAAAAAAAAAAAAAAAAAAAAAoKfOnzuXbenaw+uzWX7u6sryQvXqqblybaG4uDxbnK0uXSnOV6vzlXJxthrj2/y9SrV6ZWo6lq9N1stJfbK2snphsbp8uX7h0mJpvnyhPPJ8mgUAAAAAAAAAAAAAAAAAAAD/K7WV1YVSpVJekpDYVWK4P06jN4k0TdM+OI1+SOx1zwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6/4LAAD//6lkOFk=") llistxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x1b) pipe2$9p(&(0x7f00000000c0), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r1, 0x0, 0x0) memfd_create(&(0x7f0000000240)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\fa\ry\xd1v\xbaL\x18;`\xaaT#f\x01%\xaf\'\xe0\x00\x00\x00\x00\xfb\x03\xc7a\x9f\xe8\xf1\x92cG\xec+\xec\x17_\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd0\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8\xb7L\xdd\xa2\xf8\xdb\xe12\x00\x00\x00\x00\x00\x00\x00', 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) 2m13.016498242s ago: executing program 2 (id=26635): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x282e82, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x18, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x4}]}}]}, 0x48}}, 0x802) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000314000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 2m12.956863135s ago: executing program 35 (id=26635): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x282e82, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x18, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x4}]}}]}, 0x48}}, 0x802) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000314000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 2m9.894305022s ago: executing program 4 (id=26670): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x10, 0x6, 0x10001) 2m9.706183582s ago: executing program 4 (id=26672): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) 2m9.548976391s ago: executing program 4 (id=26675): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m9.303805024s ago: executing program 4 (id=26678): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800700, &(0x7f0000000880)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@oldalloc}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000400)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) creat(&(0x7f0000000040)='./bus\x00', 0x191) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x5c}, 0x6e) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) socket$inet6(0xa, 0x80001, 0x0) 2m8.806752161s ago: executing program 4 (id=26682): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='pids.events\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x5) getdents64(r1, 0x0, 0x44) 2m8.554707334s ago: executing program 4 (id=26686): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x7, 0x0) 2m8.395505442s ago: executing program 36 (id=26686): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x7, 0x0) 1m52.853907895s ago: executing program 3 (id=26827): unshare(0x22020600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x80000001, @mcast2, 0xffffffff}, 0x1c) 1m52.786689639s ago: executing program 3 (id=26828): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000000c0)='syzkaller\x00', 0x5}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) recvfrom$inet(r0, &(0x7f0000000540)=""/137, 0x89, 0x103, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m51.904628126s ago: executing program 3 (id=26840): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) syz_emit_ethernet(0xce, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x98, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "00000005000000002600"}, {0x0, 0x5, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f7564"}]}}}}}}, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00@', 0x5dc}], 0x1}, 0x4) 1m51.722353766s ago: executing program 3 (id=26845): syz_usb_connect(0x0, 0xf5, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505240600010524007f000d240f0104000000080000000006241a03000a05240401", @ANYRESDEC], 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@quota}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000", @ANYBLOB], 0x48) read$char_usb(0xffffffffffffffff, &(0x7f0000001080)=""/160, 0xa0) unshare(0x6020400) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711812000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r4, r6, 0x1e, 0x0, @void}, 0x10) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r7 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) write$binfmt_script(r7, &(0x7f0000000080), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1m48.70187536s ago: executing program 3 (id=26872): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, 0x0, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_devices(r1, &(0x7f00000003c0)={'c', ' *:* ', 'wm\x00'}, 0x5dc) 1m48.486134691s ago: executing program 3 (id=26875): r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x40000) syz_open_dev$usbmon(&(0x7f0000000100), 0x1b, 0x20080) close(r0) 1m48.485970301s ago: executing program 37 (id=26875): r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x40000) syz_open_dev$usbmon(&(0x7f0000000100), 0x1b, 0x20080) close(r0) 1m34.85294518s ago: executing program 7 (id=27087): syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a2401000000020102132406000006000000000000000000000000000924030000000104000924050000f8431cfd09240300ff010004000624050400000904010000010200000904010101010200000905010900000000000725010000000009040200000102000009040201010197"], 0x0) 1m34.210609555s ago: executing program 7 (id=27100): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000110000000800000000000000000000003000000000100000002"], 0x0, 0x4e}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYBLOB="1e00004000120000005000002df0acd92e93529179c14230e8269e17d57a82f7df69650ec6c8111e5d20aef880d5d7f2d1cd6fe47bc02e5b08c98b35ca8c9a79", @ANYRES64], 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="2b63707520f1796a0a96b5aaa356499c67417858ac6abf8e4908bb3d87ba9bd4d216e181830d1af715eefa10b586114b5272a603f7f95caa2a74f1376e25f8468513e1a3ed32ee8ec5b69aa1a1c7614922bba3ac897c2857e2578d82e94668a0e9f827ccff9cf0abf53206930079645c2371009970608c87cc7a67de8e8fbcd205df2a0fea90ea091fae6b"], 0x5) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000400)={r2, 0x0, 0xc6, 0x0, &(0x7f00000008c0)="791b5cbd9543057476c254d749681eef9f656db2a9cf9f90d654c5991694441c8886b8396706aeef006d2703aaebde6c6f7873ac70fd9eb6478a0dcab75f12228adbf869803175a3bf4972d0b171579ba9a9f2775ac8db72a646b987f875d32133079bdb95d35e8fcfda4edf2f1122cf2f21d3a52766c9a10a500057b142d04cb964060dbadba46f22e6946dae898777011e6eec21b522d0d7acbe6022be51daefd34643760c86cfecc00cde21e063b7e4501e5e552c4bde80d8d944418fe01521c3c633d07d", 0x0, 0x8001, 0x0, 0xd5, 0x0, &(0x7f00000009c0)="261339ae52644e3f43a5209fd4fe0eded2f9b85e4b0b6371d62ce3390057c349efa1c5d8df7603d42c97ffd784310e79d58e6683b849c640bacbbcbe9fe537d3e3e8e9cf761ed6b96b07cb4142ba450666ecee67b92be9b78763d11d78d6fdc9923dba54d05f049f144b9dff1e5b822fc45cd45d0a9a6fbaa17b8cf99bab77f1b163cac26156b229c4bfc4330fc53a8e42386f89911060b8da8be5226a00a226ff29bc678a82ee2fb1c127090e31b215ee7eb5b6025cfdb4f677dd5fa2060691a6bb9bb516584436142e91ae10059c9a7107fdb42a", 0x0, 0x2, 0x0, 0x4}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r6) 1m34.155916968s ago: executing program 7 (id=27101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1m33.586933649s ago: executing program 7 (id=27107): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 1m33.545925471s ago: executing program 7 (id=27108): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file1\x00', 0xc004, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES8, @ANYRESDEC, @ANYRESHEX, @ANYRES8, @ANYRES32, @ANYRES64, @ANYBLOB="1b742fa579e3655868a62360590e954d4a3e"], 0x1, 0x2c7, &(0x7f0000000540)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) truncate(&(0x7f0000000900)='./file1\x00', 0xfef4) 1m33.274774096s ago: executing program 7 (id=27109): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)="985e44efeabe00", 0x7}], 0x1}}], 0x1, 0x480e0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000340)=0xd, 0x4) 1m33.274447126s ago: executing program 38 (id=27109): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)="985e44efeabe00", 0x7}], 0x1}}], 0x1, 0x480e0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000340)=0xd, 0x4) 5.114480273s ago: executing program 6 (id=28051): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000300)={0x0, 0x0, 0x803, 0x0, 0x19, "e140001e1d11bc000a5d600000000000000080"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) read$watch_queue(r5, &(0x7f0000000240)=""/173, 0xad) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000180)={0x80000001, 0x2, 0x81e6b76d, 0x10002, 0x9, "aa32b73986bbee6b9231334cbfa0b748261a13"}) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x6}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r11, &(0x7f0000001940), 0x0, 0x4}, 0xfffffe2a) r12 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r12, 0x0, 0x485, 0x0, 0x0) write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES64=r7, @ANYRES64=r12, @ANYRESHEX=r2], 0xa) 4.06101753s ago: executing program 6 (id=28060): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f0000000000), 0x4) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x6, 0x0, 0xa4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x48, 0x8, 0xfe, 0xff7ffeff}, {0x6, 0xa, 0xfe, 0x8001}]}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000140)="1a06", 0x2}], 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f00000012c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa398100000086dd60910100001211fffe8000000000000000000000000000bbfe8000000000000000000000000000aa00010e220012907801010000000000000000ef0c5bcdf9be57b1e86ecca92927dc5b635a704292a977de4106cf0c7a3b5e0a52aabafb39963e676685abf384b9dd9a9f6305ed77a12e9dbd8f0ab45e15b7dffdc54269461a7b625664adbfdfdf9532366f0a4c26954d"], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001280), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESOCT], 0xbc}, 0x1, 0x0, 0x0, 0x401d1}, 0x44040001) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0900000010000000070000000900000001000000", @ANYRES32=0x1, @ANYBLOB="0000000000180000000000000000000000000000290aed8e27b6888269e2e106d21ecefe8cd05239230b2733312c908f8964c4aeb3e8e2c5471bd8fed178c399f83dec430d188b6a367d2884b3398915aa173354600f6f91f1099c815b0eaf1c4fd7cc7a9bafccdf9eb21589c1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r7, &(0x7f0000000140), 0x0}, 0x20) 3.961417225s ago: executing program 8 (id=28063): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x4c, 0x1a, 0x180, 0x73, 0x328, 0x258, 0x258, 0x328, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x23, 0x3, 0x2, 0x3, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x2e, 0x8, 0xfb, 0x87, 0x3, @remote, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xffffff00], [0x8982e4c132e3b466, 0xffffffff, 0xffffff00, 0xff000000], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 0x3420, 0x108}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x458) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000300)='./file1\x00', 0x800884, &(0x7f0000000000)=ANY=[], 0x4, 0x2b4, &(0x7f00000013c0)="$eJzs3U9r034cB/BP/2zrdth2/vE7BLx4GurZg0UmiIXBpAf1YmEKsonQXbpd7FPwIj4GH5IHH4PstFukJq6b6TbEJpn29YKRz/Lekk9CmqTwTfvy/7f7e+8OX6dfPkWnk0Q7OhGnEZvRjFZkGo1oxM86luO8cevCr7GST9sBANxUu7uD7mXZuNpWmIvinddw2F2KiLWVQtL/XFFTAAAAAAAAAAAAzFlx/H+MC+P/82lz1vj/yjsGAP7UVeP/+TcMh93BWn7/dpHx/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB9TtN0I73ip+7+AID5O03XXf8BYMF4/w8Ai+fc9T/imut/q742AYA5evrs+ZNur7e9mySdiJPxqD/qZ9Msf/S4t30n+WEzIprZ3JPRqN86y+9meTJd6iRfirU8vzczX47bt7J8kj3c6f2Sr8ReNbsAAAAAAAAAAAAAAAAAAAAAareVnNmczp0+37+1tfPx65tZeVblnw/QjMLz/e34r13ZZgAAAAAAAAAAAAAAAAAAAMBf7fDoeH9wcPBqWH7x4PDouBERJa2inRet8lYxOChvyZOiE6UsebLT59/zh6yI+Pb+9//9/ouIa/+4sb8ahWi12oO2/CLdyF6JN6Wf9fxoueyMsVzh2QkAAAAAAAAAAAAAAAAAABbL9OnfujsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPpMv/+/vKLubQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWw/cAAAD//zM5g9A=") socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000380)) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000080)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) 3.378858577s ago: executing program 5 (id=28067): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f00000003c0)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r6, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) 3.345530859s ago: executing program 0 (id=28068): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000cf00)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1000000, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1003}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x48}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r3, 0x8800000) close(0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000001240)=0x9, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendfile(0xffffffffffffffff, r3, 0x0, 0x578410ed) 3.044855515s ago: executing program 5 (id=28069): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00'}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x804, &(0x7f00000001c0)={[{@uni_xlateno}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@rodir}, {@utf8no}, {@rodir}, {@rodir}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x99b9}}, {@utf8no}, {@utf8no}, {@uni_xlateno}, {@utf8}, {@uni_xlate}]}, 0x1, 0x276, &(0x7f0000000640)="$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") sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 3.023217096s ago: executing program 8 (id=28070): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000300)={0x0, 0x0, 0x803, 0x0, 0x19, "e140001e1d11bc000a5d600000000000000080"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) read$watch_queue(r5, &(0x7f0000000240)=""/173, 0xad) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000180)={0x80000001, 0x2, 0x81e6b76d, 0x10002, 0x9, "aa32b73986bbee6b9231334cbfa0b748261a13"}) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x6}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r11, &(0x7f0000001940), 0x0, 0x4}, 0xfffffe2a) r12 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r12, 0x0, 0x485, 0x0, 0x0) write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES64=r7, @ANYRES64=r12, @ANYRESHEX=r2], 0xa) 2.824914707s ago: executing program 6 (id=28072): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0xdc}}, 0x0) 2.755013601s ago: executing program 6 (id=28075): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x22, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8408, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={&(0x7f0000001040), 0x4}, 0x0, 0x4085, 0xb, 0x4, 0xfffffffffffffffd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0xd) readahead(r0, 0x100, 0x7) r1 = syz_open_dev$sg(0x0, 0x0, 0x200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x6) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000180)='!\x00', &(0x7f00000001c0)='./file0\x00', r4) r5 = syz_io_uring_setup(0x339a, &(0x7f0000000300)={0x0, 0x2, 0x1, 0x1}, 0x0, &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000004f40)={0x0, 0x0, &(0x7f0000004f00)=[{0x0}], 0xfffffffffffffffe, 0x1}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x3af4701e) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0xfd, 0x5bc, &(0x7f0000001440)="$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") timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r6, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, 0x0) lseek(0xffffffffffffffff, 0x1, 0x0) getdents(0xffffffffffffffff, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001080)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) 2.20711832s ago: executing program 0 (id=28077): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4040) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r0], 0x80}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000094}, 0xc800) 2.148812703s ago: executing program 0 (id=28078): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00'}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x804, &(0x7f00000001c0)={[{@uni_xlateno}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@rodir}, {@utf8no}, {@rodir}, {@rodir}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x99b9}}, {@utf8no}, {@utf8no}, {@uni_xlateno}, {@utf8}, {@uni_xlate}]}, 0x1, 0x276, &(0x7f0000000640)="$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") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.094780796s ago: executing program 5 (id=28079): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r6, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) 2.011216521s ago: executing program 8 (id=28080): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x4c, 0x1a, 0x180, 0x73, 0x328, 0x258, 0x258, 0x328, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x23, 0x3, 0x2, 0x3, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x2e, 0x8, 0xfb, 0x87, 0x3, @remote, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xffffff00], [0x8982e4c132e3b466, 0xffffffff, 0xffffff00, 0xff000000], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 0x3420, 0x108}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x458) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000300)='./file1\x00', 0x800884, &(0x7f0000000000)=ANY=[], 0x4, 0x2b4, &(0x7f00000013c0)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000380)) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000080)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) 1.84382401s ago: executing program 5 (id=28081): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffeb) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) setxattr$security_ima(&(0x7f0000001000)='./file0/file0\x00', &(0x7f0000001040), &(0x7f0000001080)=@v1={0x2, "331f8957a731"}, 0x7, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) socket(0x400000000010, 0x3, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80400) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) 1.766760414s ago: executing program 5 (id=28082): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f0000000000), 0x4) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x6, 0x0, 0xa4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x48, 0x8, 0xfe, 0xff7ffeff}, {0x6, 0xa, 0xfe, 0x8001}]}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000140)="1a06", 0x2}], 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f00000012c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa398100000086dd60910100001211fffe8000000000000000000000000000bbfe8000000000000000000000000000aa00010e220012907801010000000000000000ef0c5bcdf9be57b1e86ecca92927dc5b635a704292a977de4106cf0c7a3b5e0a52aabafb39963e676685abf384b9dd9a9f6305ed77a12e9dbd8f0ab45e15b7dffdc54269461a7b625664adbfdfdf9532366f0a4c26954d"], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001280), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESOCT], 0xbc}, 0x1, 0x0, 0x0, 0x401d1}, 0x44040001) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0900000010000000070000000900000001000000", @ANYRES32=0x1, @ANYBLOB="0000000000180000000000000000000000000000290aed8e27b6888269e2e106d21ecefe8cd05239230b2733312c908f8964c4aeb3e8e2c5471bd8fed178c399f83dec430d188b6a367d2884b3398915aa173354600f6f91f1099c815b0eaf1c4fd7cc7a9bafccdf9eb21589c1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r7, &(0x7f0000000140), 0x0}, 0x20) 1.293447319s ago: executing program 9 (id=28085): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5088a8", 0x54, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @local}, 0x14) 1.242793093s ago: executing program 9 (id=28086): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000cf00)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1000000, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1003}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x48}}, 0x0) ftruncate(0xffffffffffffffff, 0x8800000) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001240)=0x9, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 1.174721806s ago: executing program 0 (id=28087): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000cf00)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1000000, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1003}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x48}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r3, 0x8800000) close(0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000001240)=0x9, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendfile(0xffffffffffffffff, r3, 0x0, 0x578410ed) 1.160018717s ago: executing program 9 (id=28088): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4040) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r0], 0x80}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000094}, 0xc800) 1.11382254s ago: executing program 9 (id=28089): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) 1.021578725s ago: executing program 6 (id=28090): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x4}, {0x6, 0x0, 0x6}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x72}}}, 0xf8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 989.288556ms ago: executing program 9 (id=28091): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r6, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) 988.933206ms ago: executing program 8 (id=28092): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x20000000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 932.59103ms ago: executing program 6 (id=28093): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES64=r3, @ANYRES64=r3, @ANYRESHEX=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 336.666162ms ago: executing program 5 (id=28094): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000200), 0x6, 0x515, &(0x7f0000000c00)="$eJzs3V1PY3kZAPDnlHYGdtGyu16smziL+xLG6BRY9oV4sS6JL1ebGNd7BqEQQqETKLsDmSjzCTRmoibe6JU3Jn4AEzMfwZhMondeeKWZKONceGNqTns6A6XFTqa0M/D7JYfzP/8/Pc/zFFrOGz0BXFiTEfFRRIxExNsRUcz6c9kUB80p/b4Hh7eW0ymJev2TfyaRZH3t63wxe1jqe9+J+EFyMu7O3v7GUqVS3j7evX9tfXNprbxW3pqbm31//oP59+ZneqwkyZ82+lJEfPjNhz/78W++/eEfvvbZ3xb/cfWHaVrXs/FOdfRDs/RCjB5bPj/S35t8o0IAAJ4Hr0TEyxHxRkR8JYoxEqduRgMAAADPofo3xi+3mgAAAMD5lIuI8Uhypex63/HI5Uql5jW8X4gXcpXqTu2rq9XdrZV0LGIiCrnV9Up5JrtWeCIKSbo822g/Xn6nbXkuuwb3TnEsXW6MAQAAAIOx0Lb//7DY3P8HAAAAzpnOJ+NHBp4HAAAAcHZcjA8AAADnn/1/AAAAONe++/HH6VR/cHircR+AlU/3djeqn15bKe9slDZ3l0vL1e0bpbVqda1SLvXwHwGVavXGu7G1e3O6lt+pTe/s7S9uVne3aouN+3ovll8eQE0AAADAcS+9fvcvSUQcfH2sMaUuZWOFoWYGPEOSfFvH9S8PKROgLzoc0h879QGTu2eXDDBQ7X/TgYvDPj6QtHe0bRiMdttU+GN7x5X/G8s2BwAADMfUF53/h4sqN+wEgKH5yYmeS0PJAxi8no/FT55tHsDgFdzmDy68E+f/24x2Gzhx/r+bev2JEgIAAPpuvDk7iOxc4HjkcqXSo9OCyep6pTwTEZ+PiD8XC5fT5dkh5gsAAAAAAAAAAAAAAAAAAAAAAAAAz6N6PYk6AAAAcK5F5P6eZPf/miq+Nd5+fOBS8p9iZHcF/uyXn/z85lKttj2b9v/rUX/tF1n/O8M4ggEAAAAXUeHU0dZ+ems/HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD66cHhreXWNMi49xdiLCY6xc/HaGM+GoWIeOHfSeSPPC6JiJE+xD+4HRGvdoqfpGnFRJZFe/xcRIwNOf6LfYgPF9ndhYj4qNPrLxeTjXnn118+m57W/YXGi7xj/Nb730iX97/P9RjjtXu/m+4a/3bEa/mT8ccjeRQ/6RL/zR7jX//+/n63sfqvI6Y6/v1JmrNc9o21zRvTO3v719Y3l9bKa+WtubnZ9+c/mH9vfmZ6db1Szr52jPHTL/3+4E7X+psBjsZv1TnRzPBH3ep/q8f6/3vv5uErzWbhZPyIq292/vm/2ph3fv7T34m3s6cnHZ9qtQ+a7aOu/PZPV7rllsZf6fL8N3/+xfrj+Plj9V/trfyjNf+qt4cAAGdpZ29/Y6lSKW8PoPHGu/1bYdJopFtBA0p+2I3WwY5nJZ/R4US/HMOt/VtPvZ7W5vDTrOevfasr3WfoPDTENyUAAOBMPN7oH3YmAAAAAAAAAAAAAAAAAAAAcHE1/v9/5Ak/CPD1J/uksfaYB8MpFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgVP8LAAD//9WHwV0=") quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, 0x0, 0x0, 0x0) 203.587249ms ago: executing program 0 (id=28095): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) 175.620671ms ago: executing program 9 (id=28096): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES64=r3, @ANYRES64=r3, @ANYRESHEX=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 82.681605ms ago: executing program 0 (id=28097): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_usbip_server_init(0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$tty20(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) 31.263108ms ago: executing program 8 (id=28098): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 0s ago: executing program 8 (id=28099): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4040) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r0, @ANYBLOB], 0x80}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000094}, 0xc800) kernel console output (not intermixed with test programs): syz2> rejected, already enabled [ 1258.754534][T12017] syzkaller0: entered promiscuous mode [ 1258.760213][T12017] syzkaller0: entered allmulticast mode [ 1258.819858][T12019] loop7: detected capacity change from 0 to 512 [ 1258.908561][T12021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.26943'. [ 1258.918139][T12022] tipc: Enabling of bearer rejected, failed to enable media [ 1258.966898][T10735] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1258.976715][T12019] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1259.077874][T12019] ext4 filesystem being mounted at /120/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1259.094605][T12027] tipc: Enabled bearer , priority 0 [ 1259.113220][T12027] syzkaller0: entered promiscuous mode [ 1259.118739][T12027] syzkaller0: entered allmulticast mode [ 1259.131759][T12027] tipc: Resetting bearer [ 1259.139231][T12026] tipc: Resetting bearer [ 1259.151431][T12026] tipc: Disabling bearer [ 1259.602574][ T9643] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1259.716270][T12049] loop7: detected capacity change from 0 to 512 [ 1259.734100][T12049] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1259.750040][T12051] loop9: detected capacity change from 0 to 1024 [ 1259.777199][T12051] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1259.803385][T12051] EXT4-fs warning (device loop9): ext4_rmdir:3185: inode #11: comm syz.9.26955: empty directory 'file1' has too many links (111) [ 1259.826877][T12059] syzkaller0: entered promiscuous mode [ 1259.832504][T12059] syzkaller0: entered allmulticast mode [ 1259.838436][T12057] loop8: detected capacity change from 0 to 4096 [ 1259.854480][T10735] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1259.854687][T12059] tipc: Enabling of bearer rejected, failed to enable media [ 1259.865755][T12057] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1259.935966][T10495] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1260.014342][T12068] tipc: Enabled bearer , priority 0 [ 1260.037767][T12068] syzkaller0: entered promiscuous mode [ 1260.043339][T12068] syzkaller0: entered allmulticast mode [ 1260.047706][T12072] loop9: detected capacity change from 0 to 512 [ 1260.058046][T12073] loop6: detected capacity change from 0 to 1024 [ 1260.073526][T12072] ext4 filesystem being mounted at /59/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1260.092004][T12068] tipc: Resetting bearer [ 1260.119591][T12067] tipc: Resetting bearer [ 1260.138456][T12067] tipc: Disabling bearer [ 1260.150408][T12082] netlink: 28 bytes leftover after parsing attributes in process `syz.6.26966'. [ 1260.258733][T12093] tipc: Enabling of bearer rejected, already enabled [ 1260.296112][T12095] syzkaller0: entered promiscuous mode [ 1260.301701][T12095] syzkaller0: entered allmulticast mode [ 1260.335038][T12095] tipc: Enabling of bearer rejected, failed to enable media [ 1260.442594][T12103] loop8: detected capacity change from 0 to 512 [ 1260.461920][T12103] ext4 filesystem being mounted at /64/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1260.483042][T12112] loop6: detected capacity change from 0 to 1024 [ 1261.050712][T12122] tipc: Enabled bearer , priority 0 [ 1261.069434][T12122] syzkaller0: entered promiscuous mode [ 1261.075034][T12122] syzkaller0: entered allmulticast mode [ 1261.106636][T12122] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1261.145191][T12122] tipc: Resetting bearer [ 1261.176125][T12121] tipc: Resetting bearer [ 1261.204394][T12121] tipc: Disabling bearer [ 1261.510816][T12136] netlink: 28 bytes leftover after parsing attributes in process `syz.8.26980'. [ 1261.542316][T12137] syzkaller0: entered promiscuous mode [ 1261.547876][T12137] syzkaller0: entered allmulticast mode [ 1261.635619][ T29] kauditd_printk_skb: 1041 callbacks suppressed [ 1261.635636][ T29] audit: type=1400 audit(2000000059.832:30466): avc: denied { write } for pid=12145 comm="syz.9.26993" name="event2" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1261.668651][T12148] loop8: detected capacity change from 0 to 1024 [ 1261.700136][T12152] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1261.721398][T12148] EXT4-fs warning (device loop8): ext4_rmdir:3185: inode #11: comm syz.8.26992: empty directory 'file1' has too many links (111) [ 1261.756477][ T29] audit: type=1400 audit(2000000059.832:30467): avc: denied { open } for pid=12145 comm="syz.9.26993" path="/dev/input/event2" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1261.783193][T12152] EXT4-fs (loop9): 1 truncate cleaned up [ 1261.919392][T12166] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1261.937548][T12166] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1261.946432][T12166] FAT-fs (loop7): Filesystem has been set read-only [ 1261.953510][T12166] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1261.969233][T12166] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1262.000537][T12174] syzkaller0: entered promiscuous mode [ 1262.006135][T12174] syzkaller0: entered allmulticast mode [ 1262.032730][T12176] netlink: 28 bytes leftover after parsing attributes in process `syz.6.27005'. [ 1262.057590][T12180] netlink: 'syz.6.27007': attribute type 1 has an invalid length. [ 1262.086408][T12180] veth5: entered promiscuous mode [ 1262.096054][T12180] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 1262.123520][T12185] FAT-fs (loop8): codepage cp860 not found [ 1262.183131][T12188] EXT4-fs warning (device loop7): ext4_rmdir:3185: inode #11: comm syz.7.27010: empty directory 'file1' has too many links (111) [ 1262.246147][ T29] audit: type=1326 audit(2000000060.443:30468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12191 comm="syz.8.27012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3146eaeb9 code=0x7ffc0000 [ 1262.270671][ T29] audit: type=1326 audit(2000000060.443:30469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12191 comm="syz.8.27012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fe3146eaeb9 code=0x7ffc0000 [ 1262.294489][ T29] audit: type=1326 audit(2000000060.443:30470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12191 comm="syz.8.27012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3146eaeb9 code=0x7ffc0000 [ 1262.318841][ T29] audit: type=1326 audit(2000000060.443:30471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12191 comm="syz.8.27012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3146eaeb9 code=0x7ffc0000 [ 1262.342842][ T29] audit: type=1326 audit(2000000060.443:30472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12191 comm="syz.8.27012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe3146eaeb9 code=0x7ffc0000 [ 1262.367333][ T29] audit: type=1326 audit(2000000060.443:30473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12191 comm="syz.8.27012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3146eaeb9 code=0x7ffc0000 [ 1262.392040][ T29] audit: type=1326 audit(2000000060.443:30474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12191 comm="syz.8.27012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fe3146eaeb9 code=0x7ffc0000 [ 1262.404784][T12208] tipc: Enabled bearer , priority 0 [ 1262.415829][ T29] audit: type=1326 audit(2000000060.443:30475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12191 comm="syz.8.27012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3146eaeb9 code=0x7ffc0000 [ 1262.450976][T12208] syzkaller0: entered promiscuous mode [ 1262.456475][T12208] syzkaller0: entered allmulticast mode [ 1262.458023][T12209] netlink: 28 bytes leftover after parsing attributes in process `syz.0.27019'. [ 1262.466850][T12208] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1262.491253][T12208] tipc: Resetting bearer [ 1262.504396][T12206] tipc: Resetting bearer [ 1262.514428][T12206] tipc: Disabling bearer [ 1262.525252][T12211] EXT4-fs: Ignoring removed mblk_io_submit option [ 1262.532198][T12211] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1262.553881][T12211] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 1262.579840][T12211] System zones: 1-12 [ 1262.584011][T12211] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1262.586566][T12213] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1262.601216][T12211] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.27017: bg 0: block 361: padding at end of block bitmap is not set [ 1262.618673][T12211] EXT4-fs (loop9): Remounting filesystem read-only [ 1262.626904][T12216] syzkaller0: entered promiscuous mode [ 1262.632498][T12216] syzkaller0: entered allmulticast mode [ 1262.638712][T12211] EXT4-fs (loop9): 1 truncate cleaned up [ 1262.667468][T12211] EXT4-fs warning (device loop9): dx_probe:791: inode #2: lblock 0: comm syz.9.27017: error -117 reading directory block [ 1262.707189][T12224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1262.716013][T12224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1262.775057][T12226] EXT4-fs warning (device loop9): ext4_rmdir:3185: inode #11: comm syz.9.27024: empty directory 'file1' has too many links (111) [ 1262.844852][T12236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1262.871001][T12240] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1262.882109][T12236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1262.899478][T12242] netlink: 28 bytes leftover after parsing attributes in process `syz.9.27031'. [ 1262.903691][T12240] EXT4-fs (loop7): 1 truncate cleaned up [ 1262.934905][T12245] tipc: Enabled bearer , priority 0 [ 1262.941958][T12245] syzkaller0: entered promiscuous mode [ 1262.947506][T12245] syzkaller0: entered allmulticast mode [ 1262.955624][T12245] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1262.964835][T12245] tipc: Resetting bearer [ 1262.971613][T12244] tipc: Resetting bearer [ 1262.979034][T12244] tipc: Disabling bearer [ 1263.071954][T12252] set_capacity_and_notify: 13 callbacks suppressed [ 1263.071966][T12252] loop9: detected capacity change from 0 to 512 [ 1263.108728][T12252] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1263.242626][T12259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.253133][T12259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.565196][T12266] loop6: detected capacity change from 0 to 1024 [ 1263.582836][T12264] loop8: detected capacity change from 0 to 2048 [ 1263.638956][T12270] syzkaller0: entered promiscuous mode [ 1263.644461][T12270] syzkaller0: entered allmulticast mode [ 1263.650947][T12264] loop8: p1 < > p4 [ 1263.668453][T12264] loop8: p4 start 42180 is beyond EOD, truncated [ 1263.688844][T12276] netlink: 28 bytes leftover after parsing attributes in process `syz.9.27044'. [ 1263.721337][T12275] tipc: Enabled bearer , priority 0 [ 1263.735566][ T6932] udevd[6932]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1263.740215][T12275] syzkaller0: entered promiscuous mode [ 1263.751598][T12275] syzkaller0: entered allmulticast mode [ 1263.773130][T12275] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1263.788216][T12275] tipc: Resetting bearer [ 1263.800870][T12273] tipc: Resetting bearer [ 1263.826290][T12273] tipc: Disabling bearer [ 1263.855712][T12286] loop6: detected capacity change from 0 to 512 [ 1263.865690][T12286] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1263.913175][T12293] loop6: detected capacity change from 0 to 1024 [ 1263.965799][T12298] loop8: detected capacity change from 0 to 512 [ 1263.981626][T12301] syzkaller0: entered promiscuous mode [ 1263.987999][T12301] syzkaller0: entered allmulticast mode [ 1264.017926][T12298] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1264.044589][T12298] EXT4-fs (loop8): 1 truncate cleaned up [ 1264.066164][T12311] loop6: detected capacity change from 0 to 128 [ 1264.081647][T12312] tipc: Enabling of bearer rejected, already enabled [ 1264.180273][T12318] loop7: detected capacity change from 0 to 1024 [ 1264.199005][T12318] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1264.423322][T12347] loop7: detected capacity change from 0 to 1024 [ 1264.435624][T12345] loop6: detected capacity change from 0 to 4096 [ 1264.444047][T12345] EXT4-fs: test_dummy_encryption option not supported [ 1264.579852][T12347] EXT4-fs warning (device loop7): ext4_rmdir:3185: inode #11: comm syz.7.27070: empty directory 'file1' has too many links (111) [ 1264.914487][T12356] syzkaller0: entered promiscuous mode [ 1264.920682][T12356] syzkaller0: entered allmulticast mode [ 1265.750209][T12374] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 1265.763237][T12374] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1265.774461][T12374] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.27079: bad orphan inode 15 [ 1265.786551][T12374] ext4_test_bit(bit=14, block=18) = 1 [ 1265.791955][T12374] is_bad_inode(inode)=0 [ 1265.796140][T12374] NEXT_ORPHAN(inode)=1023 [ 1265.800479][T12374] max_ino=32 [ 1265.800946][T12378] netlink: 28 bytes leftover after parsing attributes in process `syz.9.27080'. [ 1265.803669][T12374] i_nlink=0 [ 1265.803788][T12369] FAT-fs (loop7): IO charset cp932 not found [ 1265.851125][T12374] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2972: inode #15: comm syz.8.27079: corrupted xattr block 19: e_value size too large [ 1265.869949][T12382] tipc: Enabled bearer , priority 0 [ 1265.877000][T12382] syzkaller0: entered promiscuous mode [ 1265.882549][T12382] syzkaller0: entered allmulticast mode [ 1265.888455][T12374] EXT4-fs warning (device loop8): ext4_evict_inode:273: xattr delete (err -117) [ 1265.898102][T12374] EXT4-fs mount: 28 callbacks suppressed [ 1265.898115][T12374] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0009-000000000000 ro without journal. Quota mode: none. [ 1265.899048][T12382] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1265.920972][T12387] netlink: 'syz.9.27084': attribute type 1 has an invalid length. [ 1265.932041][T12374] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 1265.942359][T12374] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0009-000000000000 r/w. [ 1265.951138][T12374] ext2 filesystem being remounted at /84/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 1265.959831][T12382] tipc: Resetting bearer [ 1265.971396][T12380] tipc: Resetting bearer [ 1265.979883][T12380] tipc: Disabling bearer [ 1265.986251][T10495] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 1266.012791][T12391] syzkaller0: entered promiscuous mode [ 1266.018342][T12391] syzkaller0: entered allmulticast mode [ 1266.034078][T12392] veth3: entered promiscuous mode [ 1266.041617][T12392] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 1266.071906][T12395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1266.087713][T12395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.093900][T12398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1266.107610][T12400] vhci_hcd vhci_hcd.0: default hub control req: 8011 v0004 i0003 l14 [ 1266.110205][T12398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.135452][T12402] syzkaller0: entered promiscuous mode [ 1266.141058][T12402] syzkaller0: entered allmulticast mode [ 1266.250682][T12408] netlink: 28 bytes leftover after parsing attributes in process `syz.8.27092'. [ 1266.578806][T12418] netlink: 'syz.6.27097': attribute type 1 has an invalid length. [ 1266.609741][T12418] veth7: entered promiscuous mode [ 1266.616983][T12418] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 1266.707839][T12424] syzkaller0: entered promiscuous mode [ 1266.713353][T12424] syzkaller0: entered allmulticast mode [ 1266.806431][T12429] syzkaller0: entered promiscuous mode [ 1266.811946][T12429] syzkaller0: entered allmulticast mode [ 1267.300168][T12439] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1267.311678][T12439] vhci_hcd vhci_hcd.0: default hub control req: 2314 v0008 i0002 l0 [ 1267.618535][T10790] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.631536][T12446] netlink: 'syz.9.27110': attribute type 1 has an invalid length. [ 1267.671634][T12446] veth5: entered promiscuous mode [ 1267.679639][T12446] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 1267.712999][T10790] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.771450][T10790] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.792726][T12453] syzkaller0: entered promiscuous mode [ 1267.799142][T12453] syzkaller0: entered allmulticast mode [ 1267.844077][T10790] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.894215][T12449] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1267.906423][T12449] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1267.970464][T10790] bridge_slave_1: left allmulticast mode [ 1267.976267][T10790] bridge_slave_1: left promiscuous mode [ 1267.982022][T10790] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.003867][T10790] bridge_slave_0: left allmulticast mode [ 1268.009622][T10790] bridge_slave_0: left promiscuous mode [ 1268.015430][T10790] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.216332][T12479] set_capacity_and_notify: 4 callbacks suppressed [ 1268.216349][T12479] loop6: detected capacity change from 0 to 256 [ 1268.548790][T10790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1268.571853][T10790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1268.588288][T10790] bond0 (unregistering): Released all slaves [ 1268.652134][T10790] tipc: Disabling bearer [ 1268.657410][T10790] tipc: Left network mode [ 1268.662131][T12496] syzkaller0: entered promiscuous mode [ 1268.668427][T12496] syzkaller0: entered allmulticast mode [ 1268.747669][T10790] hsr_slave_0: left promiscuous mode [ 1268.753490][T10790] hsr_slave_1: left promiscuous mode [ 1268.762159][T10790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1268.769729][T10790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1268.813942][T12514] loop6: detected capacity change from 0 to 128 [ 1268.839152][T10790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1268.847281][T10790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1268.861877][T10790] veth1_macvtap: left promiscuous mode [ 1268.861976][T12517] loop9: detected capacity change from 0 to 1024 [ 1268.867539][T10790] veth0_macvtap: left promiscuous mode [ 1268.880596][T10790] veth1_vlan: left promiscuous mode [ 1268.889750][T10790] veth0_vlan: left promiscuous mode [ 1268.906967][T12517] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1268.909387][T12519] loop6: detected capacity change from 0 to 512 [ 1268.928590][T12517] EXT4-fs warning (device loop9): ext4_rmdir:3185: inode #11: comm syz.9.27119: empty directory 'file1' has too many links (111) [ 1268.990292][T10735] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1269.056852][T12526] netlink: 'syz.6.27122': attribute type 1 has an invalid length. [ 1269.098390][T10790] team0 (unregistering): Port device team_slave_1 removed [ 1269.109479][T10790] team0 (unregistering): Port device team_slave_0 removed [ 1269.173940][T12529] veth9: entered promiscuous mode [ 1269.181647][T12529] bond4: (slave veth9): Enslaving as a backup interface with a down link [ 1269.192797][T12528] tipc: Enabled bearer , priority 0 [ 1269.201311][T12449] chnl_net:caif_netlink_parms(): no params data found [ 1269.217938][T12528] syzkaller0: entered promiscuous mode [ 1269.223432][T12528] syzkaller0: entered allmulticast mode [ 1269.238914][T12528] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1269.261491][T12545] loop6: detected capacity change from 0 to 512 [ 1269.268270][T12528] tipc: Resetting bearer [ 1269.297050][T12527] tipc: Resetting bearer [ 1269.302701][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1269.302716][ T29] audit: type=1400 audit(2000000067.496:30483): avc: denied { remount } for pid=12544 comm="syz.6.27126" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1269.335538][T12527] tipc: Disabling bearer [ 1269.355575][T12449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.362789][T12449] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.370196][T12449] bridge_slave_0: entered allmulticast mode [ 1269.377376][T12449] bridge_slave_0: entered promiscuous mode [ 1269.384225][T12449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1269.391935][T12449] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.399346][T12449] bridge_slave_1: entered allmulticast mode [ 1269.406104][T12449] bridge_slave_1: entered promiscuous mode [ 1269.426872][T12557] syzkaller0: entered promiscuous mode [ 1269.432416][T12557] syzkaller0: entered allmulticast mode [ 1269.442568][T12449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1269.454631][T12449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1269.510761][T12566] loop9: detected capacity change from 0 to 1024 [ 1269.512714][T12449] team0: Port device team_slave_0 added [ 1269.536676][T12566] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1269.550435][T12449] team0: Port device team_slave_1 added [ 1269.573855][T10735] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1269.583571][T12573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1269.594355][T12449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1269.601318][T12449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1269.614405][T12573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1269.627653][T12449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1269.674079][T12449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1269.681129][T12449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1269.708346][T12449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1269.721740][ T29] audit: type=1400 audit(2000000067.886:30484): avc: denied { create } for pid=12581 comm="syz.9.27133" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 1269.748699][T12449] hsr_slave_0: entered promiscuous mode [ 1269.755006][T12449] hsr_slave_1: entered promiscuous mode [ 1269.760993][T12449] debugfs: 'hsr0' already exists in 'hsr' [ 1269.766817][T12449] Cannot create hsr debugfs directory [ 1269.790081][T12591] loop9: detected capacity change from 0 to 1024 [ 1269.812222][T12591] EXT4-fs: Ignoring removed bh option [ 1269.837574][T12591] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1269.870017][T12591] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.27134: Allocating blocks 497-513 which overlap fs metadata [ 1269.886656][T12591] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.27134: Allocating blocks 497-513 which overlap fs metadata [ 1269.912255][T10735] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1269.973664][T12621] netlink: 'syz.9.27136': attribute type 1 has an invalid length. [ 1270.010839][T12621] veth7: entered promiscuous mode [ 1270.017935][T12621] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 1270.056400][T12628] tipc: Enabled bearer , priority 0 [ 1270.063559][T12630] syzkaller0: entered promiscuous mode [ 1270.069617][T12630] syzkaller0: entered allmulticast mode [ 1270.078159][T12628] syzkaller0: entered promiscuous mode [ 1270.083623][T12628] syzkaller0: entered allmulticast mode [ 1270.096300][T12628] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1270.109582][T12628] tipc: Resetting bearer [ 1270.116453][T12627] tipc: Resetting bearer [ 1270.123848][T12627] tipc: Disabling bearer [ 1270.169253][T12636] syzkaller0: entered promiscuous mode [ 1270.174808][T12636] syzkaller0: entered allmulticast mode [ 1270.217602][T12641] loop8: detected capacity change from 0 to 1024 [ 1270.229507][T12449] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1270.249263][T12641] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1270.270501][T12449] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1270.283208][T12645] netlink: 28 bytes leftover after parsing attributes in process `syz.6.27144'. [ 1270.301588][T12449] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1270.322577][T12449] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1270.332593][T10495] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1270.371393][T12669] loop8: detected capacity change from 0 to 512 [ 1270.386658][T12669] EXT4-fs: Ignoring removed i_version option [ 1270.392785][T12669] EXT4-fs: Ignoring removed bh option [ 1270.402409][T12449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1270.417443][T12449] 8021q: adding VLAN 0 to HW filter on device team0 [ 1270.429694][T10342] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.436804][T10342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1270.448790][T10342] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.455891][T10342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1270.464533][T12669] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1270.478240][T12669] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1270.512251][T10495] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1270.537915][T12686] loop8: detected capacity change from 0 to 512 [ 1270.584351][T12686] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1270.610436][T12449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1270.618890][T12686] EXT4-fs error (device loop8): ext4_readdir:224: inode #12: comm syz.8.27148: path /98/file0/file0: directory fails checksum at offset 0 [ 1270.647350][T10495] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1270.687562][T12712] netlink: 'syz.8.27149': attribute type 1 has an invalid length. [ 1270.710206][T12712] veth3: entered promiscuous mode [ 1270.717230][T12712] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 1270.766506][T12727] syzkaller0: entered promiscuous mode [ 1270.772005][T12727] syzkaller0: entered allmulticast mode [ 1270.881997][T12449] veth0_vlan: entered promiscuous mode [ 1270.902599][T12754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1270.906417][T12449] veth1_vlan: entered promiscuous mode [ 1270.921286][T12754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1270.930670][T12449] veth0_macvtap: entered promiscuous mode [ 1270.942857][T12449] veth1_macvtap: entered promiscuous mode [ 1270.956559][T12449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1270.969035][T12449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1270.981235][T10790] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.996964][T10790] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.010292][T10790] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.024744][T10790] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.139384][T12788] syzkaller0: entered promiscuous mode [ 1271.144940][T12788] syzkaller0: entered allmulticast mode [ 1271.157752][T12789] FAT-fs (loop9): IO charset cp860 not found [ 1271.196588][T12793] netlink: 28 bytes leftover after parsing attributes in process `syz.6.27156'. [ 1271.234751][T12797] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1271.265610][T10735] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1271.302291][T12805] syzkaller0: entered promiscuous mode [ 1271.307895][T12805] syzkaller0: entered allmulticast mode [ 1271.354333][T12814] netlink: 'syz.9.27160': attribute type 1 has an invalid length. [ 1271.414446][T12815] EXT4-fs: test_dummy_encryption option not supported [ 1271.434920][T12814] veth9: entered promiscuous mode [ 1271.447854][T12814] bond4: (slave veth9): Enslaving as a backup interface with a down link [ 1271.549377][T12827] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1271.623803][T12836] FAT-fs (loop5): codepage cp932 not found [ 1271.647560][T12836] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1271.662751][T12836] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1271.679959][T12846] syzkaller0: entered promiscuous mode [ 1271.686349][T12846] syzkaller0: entered allmulticast mode [ 1271.726000][T12850] netlink: 28 bytes leftover after parsing attributes in process `syz.8.27169'. [ 1271.744125][T12853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1271.761863][T12853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1272.353653][T12899] netlink: 'syz.0.27177': attribute type 1 has an invalid length. [ 1272.390114][T12899] veth3: entered promiscuous mode [ 1272.422636][T12905] EXT4-fs: test_dummy_encryption option not supported [ 1272.570706][T12931] syzkaller0: entered promiscuous mode [ 1272.576304][T12931] syzkaller0: entered allmulticast mode [ 1273.295279][ T29] audit: type=1326 audit(2000000071.498:30485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12948 comm="syz.0.27195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee333aaeb9 code=0x7ffc0000 [ 1273.300313][T12950] set_capacity_and_notify: 7 callbacks suppressed [ 1273.300330][T12950] loop9: detected capacity change from 0 to 512 [ 1273.322075][ T29] audit: type=1326 audit(2000000071.528:30486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12948 comm="syz.0.27195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fee333aaeb9 code=0x7ffc0000 [ 1273.356070][ T29] audit: type=1326 audit(2000000071.528:30487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12948 comm="syz.0.27195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee333aaeb9 code=0x7ffc0000 [ 1273.379755][ T29] audit: type=1326 audit(2000000071.528:30488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12948 comm="syz.0.27195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fee333aaeb9 code=0x7ffc0000 [ 1273.404106][ T29] audit: type=1326 audit(2000000071.528:30489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12948 comm="syz.0.27195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee333aaeb9 code=0x7ffc0000 [ 1273.427887][ T29] audit: type=1326 audit(2000000071.528:30490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12948 comm="syz.0.27195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fee333aaeb9 code=0x7ffc0000 [ 1273.435349][T12950] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1273.452600][ T29] audit: type=1326 audit(2000000071.528:30491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12948 comm="syz.0.27195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee333aaeb9 code=0x7ffc0000 [ 1273.464469][T12950] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1273.488377][ T29] audit: type=1326 audit(2000000071.528:30492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12948 comm="syz.0.27195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fee333aaeb9 code=0x7ffc0000 [ 1273.548962][T10735] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1273.763679][T12966] netlink: 20 bytes leftover after parsing attributes in process `syz.0.27187'. [ 1274.466782][T12972] loop6: detected capacity change from 0 to 128 [ 1274.468325][T12974] netlink: 'syz.0.27192': attribute type 1 has an invalid length. [ 1274.517961][T12974] veth3: entered promiscuous mode [ 1274.526040][T12974] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 1274.557994][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1274.558010][ T29] audit: type=1400 audit(2000000072.759:30499): avc: denied { read } for pid=12981 comm="syz.0.27196" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1274.643216][T12987] syzkaller0: entered promiscuous mode [ 1274.648736][T12987] syzkaller0: entered allmulticast mode [ 1274.714102][ T29] audit: type=1400 audit(2000000072.919:30500): avc: denied { ioctl } for pid=12991 comm="syz.0.27199" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1274.770690][T12996] xt_hashlimit: size too large, truncated to 1048576 [ 1274.863138][T13001] loop9: detected capacity change from 0 to 512 [ 1275.018663][T13008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1275.028969][T13008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.207133][T13001] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1275.263883][T13012] loop8: detected capacity change from 0 to 128 [ 1275.323844][T13012] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1275.398304][T13012] ext4 filesystem being mounted at /108/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1275.436760][T13015] netlink: 'syz.0.27207': attribute type 1 has an invalid length. [ 1275.467309][T13015] veth5: entered promiscuous mode [ 1275.474144][T13012] EXT4-fs error (device loop8): dx_make_map:1296: inode #2: block 20: comm syz.8.27206: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=0 [ 1275.475048][T13015] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 1275.538039][T13012] EXT4-fs (loop8): Remounting filesystem read-only [ 1275.568636][T10495] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1275.579513][T13018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1275.588407][T13018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1275.674900][T13024] syzkaller0: entered promiscuous mode [ 1275.680401][T13024] syzkaller0: entered allmulticast mode [ 1275.825721][T13032] loop8: detected capacity change from 0 to 1024 [ 1275.852593][T13032] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1275.904941][T10735] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1275.915461][T13032] EXT4-fs warning (device loop8): ext4_rmdir:3185: inode #11: comm syz.8.27215: empty directory 'file1' has too many links (111) [ 1275.966730][T10495] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1276.045903][T13039] SELinux: failed to load policy [ 1276.146604][T13042] loop8: detected capacity change from 0 to 1024 [ 1276.235696][T13049] xt_hashlimit: size too large, truncated to 1048576 [ 1276.332181][T13046] loop9: detected capacity change from 0 to 512 [ 1276.339855][T13046] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1276.364778][T13042] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1276.386367][T13046] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #17: comm syz.9.27217: inode has both inline data and extents flags [ 1276.400249][T13046] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.27217: couldn't read orphan inode 17 (err -117) [ 1276.431866][T13046] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1276.628803][T13042] EXT4-fs warning (device loop8): ext4_rmdir:3185: inode #11: comm syz.8.27228: empty directory 'file1' has too many links (111) [ 1276.684914][T13058] netlink: 20 bytes leftover after parsing attributes in process `syz.9.27217'. [ 1276.929133][T10495] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1277.124609][T13068] loop5: detected capacity change from 0 to 512 [ 1277.148418][T13068] EXT4-fs: Ignoring removed oldalloc option [ 1277.211284][T13068] EXT4-fs (loop5): 1 truncate cleaned up [ 1277.226779][T13068] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1277.304777][T12449] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1277.378783][T13072] tipc: Started in network mode [ 1277.383760][T13072] tipc: Node identity 3a182f1e7d4b, cluster identity 4711 [ 1277.391095][T13072] tipc: Enabled bearer , priority 0 [ 1277.427371][T13072] syzkaller0: entered promiscuous mode [ 1277.432936][T13072] syzkaller0: entered allmulticast mode [ 1277.468692][T13072] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1277.504244][T13072] tipc: Resetting bearer [ 1277.517080][T13071] tipc: Resetting bearer [ 1277.534116][T13071] tipc: Disabling bearer [ 1277.642257][T13076] syzkaller0: entered promiscuous mode [ 1277.647773][T13076] syzkaller0: entered allmulticast mode [ 1277.783660][T13082] loop6: detected capacity change from 0 to 512 [ 1277.877783][T10735] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1277.979311][ T29] audit: type=1326 audit(2000000076.180:30501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13092 comm="syz.9.27235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9cecaeb9 code=0x7ffc0000 [ 1278.077398][ T29] audit: type=1326 audit(2000000076.210:30502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13092 comm="syz.9.27235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f6c9cecaeb9 code=0x7ffc0000 [ 1278.101887][ T29] audit: type=1326 audit(2000000076.210:30503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13092 comm="syz.9.27235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9cecaeb9 code=0x7ffc0000 [ 1278.125827][ T29] audit: type=1326 audit(2000000076.210:30504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13092 comm="syz.9.27235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9cecaeb9 code=0x7ffc0000 [ 1278.396074][T13109] loop9: detected capacity change from 0 to 2048 [ 1278.430953][T13113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1278.531829][T13113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1278.561892][T13109] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1278.599454][T13109] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1278.645253][T10735] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1279.018867][T13126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1279.047544][T13126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1279.365861][T13140] loop9: detected capacity change from 0 to 512 [ 1279.386265][T13140] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1279.396281][T13140] EXT4-fs (loop9): SIPHASH is not a valid default hash value [ 1279.637333][T13152] loop9: detected capacity change from 0 to 512 [ 1280.072411][ T29] audit: type=1326 audit(2000000078.271:30505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13163 comm="syz.5.27258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61d07aeb9 code=0x7ffc0000 [ 1280.096360][ T29] audit: type=1326 audit(2000000078.271:30506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13163 comm="syz.5.27258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61d07aeb9 code=0x7ffc0000 [ 1280.120923][ T29] audit: type=1326 audit(2000000078.271:30507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13163 comm="syz.5.27258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fc61d07aeb9 code=0x7ffc0000 [ 1280.144542][ T29] audit: type=1326 audit(2000000078.271:30508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13163 comm="syz.5.27258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61d07aeb9 code=0x7ffc0000 [ 1280.169096][ T29] audit: type=1326 audit(2000000078.271:30509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13163 comm="syz.5.27258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61d07aeb9 code=0x7ffc0000 [ 1280.192783][ T29] audit: type=1326 audit(2000000078.271:30510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13163 comm="syz.5.27258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc61d07aeb9 code=0x7ffc0000 [ 1280.217025][ T29] audit: type=1326 audit(2000000078.271:30511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13163 comm="syz.5.27258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61d07aeb9 code=0x7ffc0000 [ 1280.241694][ T29] audit: type=1326 audit(2000000078.271:30512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13163 comm="syz.5.27258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61d07aeb9 code=0x7ffc0000 [ 1280.265391][ T29] audit: type=1326 audit(2000000078.271:30513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13163 comm="syz.5.27258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc61d07aeb9 code=0x7ffc0000 [ 1280.289998][ T29] audit: type=1326 audit(2000000078.271:30514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13163 comm="syz.5.27258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61d07aeb9 code=0x7ffc0000 [ 1280.459543][T13179] loop6: detected capacity change from 0 to 1024 [ 1280.466421][T13179] EXT4-fs: Ignoring removed bh option [ 1280.596317][T13198] loop9: detected capacity change from 0 to 128 [ 1280.607989][T13198] EXT4-fs: Ignoring removed nobh option [ 1280.622164][T13198] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1280.636479][T13198] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1280.702412][T10735] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1281.012410][T13232] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1281.540259][T13345] loop9: detected capacity change from 0 to 512 [ 1281.570559][T13348] netlink: 'syz.5.27275': attribute type 1 has an invalid length. [ 1281.590157][T13348] veth3: entered promiscuous mode [ 1281.599854][T13345] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 1281.638385][T13345] EXT4-fs (loop9): 1 truncate cleaned up [ 1281.645866][T13345] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1281.663588][T13345] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 1281.682266][T10735] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1281.716705][T13353] loop5: detected capacity change from 0 to 256 [ 1281.810253][T13357] loop9: detected capacity change from 0 to 1024 [ 1281.860925][T13357] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1281.878006][T13357] EXT4-fs warning (device loop9): ext4_rmdir:3185: inode #11: comm syz.9.27276: empty directory 'file1' has too many links (111) [ 1282.457046][T13381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.27279'. [ 1282.466132][T13381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.27279'. [ 1282.687685][T13385] loop8: detected capacity change from 0 to 512 [ 1282.695175][T13385] msdos: Unknown parameter '' [ 1282.712547][ T4027] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1282.899994][T10735] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1283.091386][T13397] netlink: 28 bytes leftover after parsing attributes in process `syz.5.27286'. [ 1283.161898][T13404] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=13404 comm=syz.5.27288 [ 1283.175740][T13403] loop9: detected capacity change from 0 to 1024 [ 1283.219869][T13403] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1283.354816][T10735] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1283.396863][T13418] netlink: 8 bytes leftover after parsing attributes in process `syz.9.27294'. [ 1283.482206][T13421] vfat: Unknown parameter 'c' [ 1283.768082][T13432] netlink: 28 bytes leftover after parsing attributes in process `syz.9.27299'. [ 1284.315978][T13450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1284.324468][T13450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1284.587436][T13459] netlink: 20 bytes leftover after parsing attributes in process `syz.8.27306'. [ 1285.493709][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1285.493724][ T29] audit: type=1326 audit(2000000083.370:30523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13495 comm="syz.6.27315" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c583caeb9 code=0x0 [ 1285.864214][T13502] set_capacity_and_notify: 1 callbacks suppressed [ 1285.864248][T13502] loop5: detected capacity change from 0 to 512 [ 1286.017063][T13502] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1286.142846][T13497] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1286.193897][T13497] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1287.024931][T12449] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1287.557538][T13528] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1287.596678][T13528] vhci_hcd vhci_hcd.0: default hub control req: 2314 v0008 i0002 l0 [ 1288.609475][T13546] netlink: 28 bytes leftover after parsing attributes in process `syz.8.27322'. [ 1288.746503][T13554] loop9: detected capacity change from 0 to 1024 [ 1288.758155][T13554] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1288.769277][T13556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1288.778777][T13556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1288.788098][T13554] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1290.079587][T13570] bridge_slave_0: left allmulticast mode [ 1290.085303][T13570] bridge_slave_0: left promiscuous mode [ 1290.091018][T13570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.109963][T13570] bridge_slave_1: left allmulticast mode [ 1290.115731][T13570] bridge_slave_1: left promiscuous mode [ 1290.121459][T13570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.144181][T13570] bond0: (slave bond_slave_0): Releasing backup interface [ 1290.155784][T13572] netlink: 'syz.9.27326': attribute type 4 has an invalid length. [ 1290.172888][T13570] bond0: (slave bond_slave_1): Releasing backup interface [ 1290.212175][ T29] audit: type=1400 audit(2000000087.778:30524): avc: denied { rename } for pid=13553 comm="syz.9.27326" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1290.261236][T13570] team0: Port device team_slave_0 removed [ 1290.295598][T13570] team0: Port device team_slave_1 removed [ 1290.303231][T13570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1290.310678][T13570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1290.327880][T13570] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1290.792009][T13588] netlink: 'syz.6.27338': attribute type 1 has an invalid length. [ 1290.808120][T13588] netlink: 52 bytes leftover after parsing attributes in process `syz.6.27338'. [ 1290.825987][T13588] veth11: entered promiscuous mode [ 1290.833938][T13588] bond5: (slave veth11): Enslaving as a backup interface with a down link [ 1291.042851][T13594] tipc: Enabling of bearer rejected, already enabled [ 1291.576662][T13598] loop5: detected capacity change from 0 to 512 [ 1291.624468][T13598] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1291.877296][T13598] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #17: comm syz.5.27340: inode has both inline data and extents flags [ 1291.894915][T13598] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.27340: couldn't read orphan inode 17 (err -117) [ 1291.909059][T13598] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1291.936384][T13598] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.27340: bg 0: block 65: padding at end of block bitmap is not set [ 1291.952982][T13598] Quota error (device loop5): write_blk: dquota write failed [ 1291.961191][T13598] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1291.971225][T13598] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.27340: Failed to acquire dquot type 0 [ 1291.987865][T13602] Quota error (device loop5): do_check_range: Getting block 144 out of range 0-5 [ 1292.410774][T13608] loop8: detected capacity change from 0 to 128 [ 1292.458850][T13608] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1292.482210][T13608] ext4 filesystem being mounted at /131/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1292.532004][T10735] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1292.541176][T13612] loop6: detected capacity change from 0 to 1024 [ 1292.545364][T13608] EXT4-fs error (device loop8): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.8.27344: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 1292.606071][T13614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1292.639858][T13614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1292.683845][T13620] loop6: detected capacity change from 0 to 256 [ 1292.725203][T13622] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1292.750055][T10495] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1293.170423][T12449] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1293.377875][T13637] loop9: detected capacity change from 0 to 128 [ 1293.410724][T13637] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1293.433958][T13637] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 1293.442526][T13637] FAT-fs (loop9): Filesystem has been set read-only [ 1293.475289][T13643] loop8: detected capacity change from 0 to 1024 [ 1293.493696][T13637] bio_check_eod: 10 callbacks suppressed [ 1293.493714][T13637] syz.9.27355: attempt to access beyond end of device [ 1293.493714][T13637] loop9: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 1293.528970][T13637] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 1293.537013][T13637] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 1293.640866][T13643] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1293.673804][T13648] tipc: Started in network mode [ 1293.678765][T13648] tipc: Node identity ac1414aa, cluster identity 4711 [ 1293.686053][T13648] tipc: Enabled bearer , priority 9 [ 1293.719331][T13643] EXT4-fs warning (device loop8): ext4_rmdir:3185: inode #11: comm syz.8.27357: empty directory 'file1' has too many links (111) [ 1293.779612][T13650] netlink: 28 bytes leftover after parsing attributes in process `syz.5.27358'. [ 1293.823467][T10495] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1293.934025][T13660] loop8: detected capacity change from 0 to 512 [ 1293.973349][T13662] netlink: 8 bytes leftover after parsing attributes in process `syz.9.27363'. [ 1293.982501][T13662] netlink: 4 bytes leftover after parsing attributes in process `syz.9.27363'. [ 1294.006963][T13660] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1294.009775][T13662] macsec1: entered allmulticast mode [ 1294.024864][T13662] veth1_macvtap: entered allmulticast mode [ 1294.038872][T13660] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1294.101916][T10495] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1294.156274][T13672] syzkaller0: entered promiscuous mode [ 1294.161814][T13672] syzkaller0: entered allmulticast mode [ 1294.183989][T13666] kernel profiling enabled (shift: 17) [ 1294.774024][ T5147] tipc: Node number set to 2886997162 [ 1295.034567][T13700] xt_hashlimit: size too large, truncated to 1048576 [ 1295.041659][T13701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1295.064572][T13701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1295.441536][ T29] audit: type=1326 audit(2000000092.664:30525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13704 comm="syz.8.27379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3146eaeb9 code=0x7ffc0000 [ 1295.466131][ T29] audit: type=1326 audit(2000000092.664:30526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13704 comm="syz.8.27379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3146eaeb9 code=0x7ffc0000 [ 1295.489791][ T29] audit: type=1326 audit(2000000092.664:30527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13704 comm="syz.8.27379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe3146eaeb9 code=0x7ffc0000 [ 1295.514334][ T29] audit: type=1326 audit(2000000092.664:30528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13704 comm="syz.8.27379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3146eaeb9 code=0x7ffc0000 [ 1295.538437][ T29] audit: type=1326 audit(2000000092.664:30529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13704 comm="syz.8.27379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3146eaeb9 code=0x7ffc0000 [ 1295.564204][ T29] audit: type=1326 audit(2000000092.664:30530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13704 comm="syz.8.27379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe3146eaeb9 code=0x7ffc0000 [ 1295.588917][ T29] audit: type=1326 audit(2000000092.664:30531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13704 comm="syz.8.27379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3146eaeb9 code=0x7ffc0000 [ 1295.717711][T13711] loop6: detected capacity change from 0 to 512 [ 1296.353892][T13719] netlink: 28 bytes leftover after parsing attributes in process `syz.9.27382'. [ 1296.388520][T13724] loop9: detected capacity change from 0 to 512 [ 1296.398869][T13724] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.27385: bg 0: block 393: padding at end of block bitmap is not set [ 1296.430458][T13724] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1296.441145][T13724] EXT4-fs (loop9): 2 truncates cleaned up [ 1296.447382][T13724] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1296.484171][T10735] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1296.752766][T13737] loop9: detected capacity change from 0 to 128 [ 1296.763075][T13736] ip6erspan0: entered promiscuous mode [ 1296.771530][T13737] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1296.795041][T13737] ext4 filesystem being mounted at /164/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1296.883785][T10735] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1296.985486][T13743] loop9: detected capacity change from 0 to 512 [ 1297.011392][T13743] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.27392: inode has both inline data and extents flags [ 1297.048549][T13743] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.27392: couldn't read orphan inode 15 (err -117) [ 1297.194951][T13743] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1297.263375][T10735] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1297.944819][T13761] loop8: detected capacity change from 0 to 256 [ 1297.951529][T13761] vfat: Unknown parameter 'c' [ 1299.541368][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 1299.541385][ T29] audit: type=1326 audit(2000000096.398:30543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13747 comm="syz.9.27393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9cecaeb9 code=0x7ffc0000 [ 1299.571906][ T29] audit: type=1326 audit(2000000096.398:30544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13747 comm="syz.9.27393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9cecaeb9 code=0x7ffc0000 [ 1299.733462][T13771] loop8: detected capacity change from 0 to 512 [ 1300.690907][T13790] loop8: detected capacity change from 0 to 512 [ 1300.761648][T13790] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.27406: inode has both inline data and extents flags [ 1300.800172][T13790] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.27406: couldn't read orphan inode 15 (err -117) [ 1300.866781][T13790] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1300.932461][T10495] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1303.005825][T13815] loop9: detected capacity change from 0 to 512 [ 1303.031739][T13815] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1303.130846][ T29] audit: type=1326 audit(2000000099.870:30545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13813 comm="syz.0.27416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee333aaeb9 code=0x7ffc0000 [ 1303.155299][ T29] audit: type=1326 audit(2000000099.870:30546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13813 comm="syz.0.27416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee333aaeb9 code=0x7ffc0000 [ 1303.178964][ T29] audit: type=1326 audit(2000000099.870:30547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13813 comm="syz.0.27416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fee333aaeb9 code=0x7ffc0000 [ 1303.203270][ T29] audit: type=1326 audit(2000000099.870:30548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13813 comm="syz.0.27416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee333aaeb9 code=0x7ffc0000 [ 1303.226919][ T29] audit: type=1326 audit(2000000099.870:30549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13813 comm="syz.0.27416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee333aaeb9 code=0x7ffc0000 [ 1303.251359][ T29] audit: type=1326 audit(2000000099.870:30550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13813 comm="syz.0.27416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fee333aaeb9 code=0x7ffc0000 [ 1303.275049][ T29] audit: type=1326 audit(2000000099.870:30551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13813 comm="syz.0.27416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee333aaeb9 code=0x7ffc0000 [ 1303.299470][ T29] audit: type=1326 audit(2000000099.870:30552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13813 comm="syz.0.27416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee333aaeb9 code=0x7ffc0000 [ 1303.334556][T13815] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1303.432290][T13815] EXT4-fs error (device loop9): ext4_get_first_dir_block:3550: inode #12: comm syz.9.27415: directory missing '..' [ 1303.502313][T13822] netlink: 16 bytes leftover after parsing attributes in process `syz.8.27417'. [ 1303.523985][T10735] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1304.572373][T13841] loop8: detected capacity change from 0 to 512 [ 1304.621787][T13841] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1304.649378][T13841] ext4 filesystem being mounted at /147/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1304.651630][T13845] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1304.672393][T13848] loop5: detected capacity change from 0 to 256 [ 1304.695704][T13850] netlink: 24 bytes leftover after parsing attributes in process `syz.0.27427'. [ 1304.708592][T13845] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1304.768919][T13848] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 1304.813617][T10495] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1305.605425][T13939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1305.631931][T13939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1305.641255][T13945] netlink: 87 bytes leftover after parsing attributes in process `syz.6.27434'. [ 1305.900582][T13980] netlink: 'syz.6.27438': attribute type 1 has an invalid length. [ 1305.923453][T13980] netlink: 8 bytes leftover after parsing attributes in process `syz.6.27438'. [ 1305.943969][T13980] veth13: entered promiscuous mode [ 1305.954897][T13980] bond6: (slave veth13): Enslaving as a backup interface with a down link [ 1305.987003][T13986] loop6: detected capacity change from 0 to 256 [ 1306.551176][T14005] loop5: detected capacity change from 0 to 1024 [ 1306.587946][T14005] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1306.657251][T14005] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 1306.757099][T12449] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1306.813688][T14032] loop8: detected capacity change from 0 to 512 [ 1306.827133][T14032] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1306.837312][T14032] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 1306.851974][T14032] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 1306.858616][T14032] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.27451: bad orphan inode 768 [ 1306.905117][T14032] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1306.947990][T14032] netlink: 24 bytes leftover after parsing attributes in process `syz.8.27451'. [ 1306.972515][T14047] bridge_slave_0: left allmulticast mode [ 1306.978271][T14047] bridge_slave_0: left promiscuous mode [ 1306.984055][T14047] bridge0: port 1(bridge_slave_0) entered disabled state [ 1306.994663][T14047] bridge_slave_1: left allmulticast mode [ 1307.000637][T14047] bridge_slave_1: left promiscuous mode [ 1307.006345][T14047] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.023685][T14047] bond0: (slave bond_slave_0): Releasing backup interface [ 1307.045360][T14047] bond0: (slave bond_slave_1): Releasing backup interface [ 1307.068620][T14047] team0: Port device team_slave_0 removed [ 1307.088833][T14047] team0: Port device team_slave_1 removed [ 1307.103972][T14047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1307.111435][T14047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1307.122112][T14047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1307.129619][T14047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1307.139262][T14047] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1307.163244][T14032] ext4: Unknown parameter 'H' [ 1307.198295][T14079] loop6: detected capacity change from 0 to 1024 [ 1307.198365][T10495] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1307.684365][T14133] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.751107][T14133] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.890378][T14133] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.925633][T14147] loop6: detected capacity change from 0 to 512 [ 1307.979614][T14133] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.063521][T14151] batman_adv: batadv0: Adding interface: dummy0 [ 1308.069935][T14151] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1308.098509][T14151] batman_adv: batadv0: Interface activated: dummy0 [ 1308.130450][T13263] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.145909][T13263] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.155658][T14156] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1308.170260][T14156] vhci_hcd vhci_hcd.0: default hub control req: 2314 v0008 i0002 l0 [ 1308.209165][T14151] batadv0: mtu less than device minimum [ 1308.215297][T14151] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1308.226157][T14151] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1308.237035][T14151] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1308.247985][T14151] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1308.258864][T14151] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1308.269794][T14151] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1308.280632][T14151] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1308.291369][T14151] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1308.338805][T13263] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.348616][T13263] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.556770][T14175] loop8: detected capacity change from 0 to 256 [ 1308.563834][T14175] vfat: Unknown parameter 'nnonumtail' [ 1309.053766][T14193] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1309.130141][T14193] vhci_hcd vhci_hcd.0: default hub control req: 2314 v0008 i0002 l0 [ 1309.191917][T14199] netlink: 'syz.9.27484': attribute type 2 has an invalid length. [ 1309.755226][T14198] loop5: detected capacity change from 0 to 512 [ 1310.019346][T14206] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1310.044281][T14206] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1310.128733][T14198] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1310.142704][T14212] netlink: 8 bytes leftover after parsing attributes in process `syz.9.27487'. [ 1310.166432][T14209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1310.177085][T14213] loop6: detected capacity change from 0 to 256 [ 1310.215775][T14209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.682709][T14219] netlink: 'syz.8.27490': attribute type 1 has an invalid length. [ 1310.764738][T14219] netlink: 8 bytes leftover after parsing attributes in process `syz.8.27490'. [ 1310.822219][T14219] veth5: entered promiscuous mode [ 1310.841358][T14219] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 1310.893546][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 1310.893562][ T29] audit: type=1400 audit(2000000107.142:30563): avc: denied { sys_admin } for pid=14230 comm="syz.8.27494" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1310.894570][T12449] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1310.969437][T14239] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1310.976717][T14239] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1311.013511][T14244] loop5: detected capacity change from 0 to 256 [ 1311.080193][T14244] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 1311.624802][ T29] audit: type=1326 audit(2000000107.816:30564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14247 comm="syz.9.27499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9cecaeb9 code=0x7ffc0000 [ 1311.649390][ T29] audit: type=1326 audit(2000000107.816:30565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14247 comm="syz.9.27499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9cecaeb9 code=0x7ffc0000 [ 1311.673178][ T29] audit: type=1326 audit(2000000107.816:30566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14247 comm="syz.9.27499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6c9cecaeb9 code=0x7ffc0000 [ 1311.697583][ T29] audit: type=1326 audit(2000000107.816:30567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14247 comm="syz.9.27499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9cecaeb9 code=0x7ffc0000 [ 1311.721286][ T29] audit: type=1326 audit(2000000107.816:30568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14247 comm="syz.9.27499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9cecaeb9 code=0x7ffc0000 [ 1311.745789][ T29] audit: type=1326 audit(2000000107.816:30569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14247 comm="syz.9.27499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6c9cecaeb9 code=0x7ffc0000 [ 1311.769505][ T29] audit: type=1326 audit(2000000107.816:30570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14247 comm="syz.9.27499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9cecaeb9 code=0x7ffc0000 [ 1311.793960][ T29] audit: type=1326 audit(2000000107.816:30571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14247 comm="syz.9.27499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9cecaeb9 code=0x7ffc0000 [ 1311.817713][ T29] audit: type=1326 audit(2000000107.825:30572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14247 comm="syz.9.27499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6c9cecaeb9 code=0x7ffc0000 [ 1312.007558][T14259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27501'. [ 1312.123152][T14265] netlink: 'syz.6.27505': attribute type 1 has an invalid length. [ 1312.156804][T14263] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1312.179772][T14265] netlink: 8 bytes leftover after parsing attributes in process `syz.6.27505'. [ 1312.248917][T14265] veth15: entered promiscuous mode [ 1312.273729][T14265] bond7: (slave veth15): Enslaving as a backup interface with a down link [ 1312.282509][T14263] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1312.910221][T14290] loop6: detected capacity change from 0 to 1024 [ 1312.917162][T14290] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1313.818357][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27517'. [ 1313.894349][T14298] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1314.067054][T14276] net_ratelimit: 14 callbacks suppressed [ 1314.067070][T14276] Set syz1 is full, maxelem 65536 reached [ 1314.080026][T14278] Set syz1 is full, maxelem 65536 reached [ 1314.221867][T14324] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1314.229469][T14324] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1314.244870][T14320] netlink: 'syz.9.27523': attribute type 1 has an invalid length. [ 1314.264012][T14326] loop6: detected capacity change from 0 to 512 [ 1314.327002][T14329] loop8: detected capacity change from 0 to 256 [ 1314.351702][T14327] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1314.428270][T14332] loop5: detected capacity change from 0 to 512 [ 1314.435580][T14332] EXT4-fs: Ignoring removed mblk_io_submit option [ 1314.453573][T14320] veth11: entered promiscuous mode [ 1314.518288][T14320] bond5: (slave veth11): Enslaving as a backup interface with a down link [ 1314.553063][T14332] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1314.612372][T14329] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000001) [ 1314.640784][T14332] EXT4-fs error (device loop5): __ext4_fill_super:5553: inode #2: comm syz.5.27526: casefold flag without casefold feature [ 1314.732669][T14332] EXT4-fs (loop5): get root inode failed [ 1314.738469][T14332] EXT4-fs (loop5): mount failed [ 1315.053487][T14339] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1315.092505][T14343] loop9: detected capacity change from 0 to 256 [ 1315.110338][T14339] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1315.180075][T14343] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000001) [ 1315.433034][T14358] loop9: detected capacity change from 0 to 512 [ 1315.474838][T14355] loop8: detected capacity change from 0 to 2048 [ 1315.560819][T14358] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1315.574802][T31878] loop8: p2 p3 < > p4 < p5 > [ 1315.579600][T31878] loop8: partition table partially beyond EOD, truncated [ 1315.607780][T14358] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1315.619172][T31878] loop8: p3 start 4284289 is beyond EOD, truncated [ 1315.733382][T10735] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1315.784159][T14355] loop8: p2 p3 < > p4 < p5 > [ 1315.788898][T14355] loop8: partition table partially beyond EOD, truncated [ 1315.835348][T14365] netlink: 24 bytes leftover after parsing attributes in process `syz.6.27537'. [ 1315.845224][T14365] netlink: 24 bytes leftover after parsing attributes in process `syz.6.27537'. [ 1315.880473][T14355] loop8: p3 start 4284289 is beyond EOD, truncated [ 1316.125850][T14390] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1316.133110][T14390] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1316.179561][T14392] loop8: detected capacity change from 0 to 256 [ 1316.402258][T14392] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000001) [ 1316.515519][T14401] loop5: detected capacity change from 0 to 512 [ 1316.893780][T28078] usb usb8-port1: attempt power cycle [ 1317.051589][T14431] netlink: 'syz.9.27557': attribute type 2 has an invalid length. [ 1317.098340][T14433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1317.106971][T14433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1317.116153][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 1317.116168][ T29] audit: type=1326 audit(2000000112.963:30595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14432 comm="syz.9.27558" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c9cecaeb9 code=0x0 [ 1317.445278][T14436] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1317.452697][T14436] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1317.489890][T14437] loop5: detected capacity change from 0 to 256 [ 1317.500460][T14437] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 1317.606470][T13256] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 1317.834365][T14457] loop5: detected capacity change from 0 to 512 [ 1317.841485][T14457] msdos: Unknown parameter '' [ 1318.324147][ T29] audit: type=1326 audit(2000000113.806:30596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14453 comm="syz.6.27564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c583caeb9 code=0x7ffc0000 [ 1318.348492][ T29] audit: type=1326 audit(2000000113.806:30597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14453 comm="syz.6.27564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c583caeb9 code=0x7ffc0000 [ 1318.372249][ T29] audit: type=1326 audit(2000000113.806:30598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14453 comm="syz.6.27564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f5c583caeb9 code=0x7ffc0000 [ 1318.396664][ T29] audit: type=1326 audit(2000000113.806:30599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14453 comm="syz.6.27564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c583caeb9 code=0x7ffc0000 [ 1318.420325][ T29] audit: type=1326 audit(2000000113.806:30600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14453 comm="syz.6.27564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c583caeb9 code=0x7ffc0000 [ 1318.660450][T14467] netlink: 28 bytes leftover after parsing attributes in process `syz.5.27567'. [ 1318.777283][T14477] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1318.784674][T14477] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1318.851209][T14481] netlink: 'syz.5.27573': attribute type 1 has an invalid length. [ 1318.893276][T14481] veth3: entered promiscuous mode [ 1318.900603][T14481] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 1319.064071][T14492] msdos: Unknown parameter '' [ 1319.233774][T28078] usb usb8-port1: unable to enumerate USB device [ 1319.647418][ T29] audit: type=1326 audit(2000000115.331:30601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14496 comm="syz.0.27578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee333aaeb9 code=0x7ffc0000 [ 1319.671153][ T29] audit: type=1326 audit(2000000115.331:30602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14496 comm="syz.0.27578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee333aaeb9 code=0x7ffc0000 [ 1319.695558][ T29] audit: type=1326 audit(2000000115.331:30603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14496 comm="syz.0.27578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fee333aaeb9 code=0x7ffc0000 [ 1319.719207][ T29] audit: type=1326 audit(2000000115.331:30604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14496 comm="syz.0.27578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee333aaeb9 code=0x7ffc0000 [ 1320.021950][T14510] set_capacity_and_notify: 3 callbacks suppressed [ 1320.022049][T14510] loop6: detected capacity change from 0 to 512 [ 1320.253414][T14513] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1320.262355][T14513] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1320.280082][T14516] loop6: detected capacity change from 0 to 256 [ 1320.464497][T14519] netlink: 'syz.9.27586': attribute type 1 has an invalid length. [ 1320.553003][T14521] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1320.612256][T14519] netlink: 4 bytes leftover after parsing attributes in process `syz.9.27586'. [ 1320.717364][T14515] Set syz1 is full, maxelem 65536 reached [ 1320.726628][T14517] Set syz1 is full, maxelem 65536 reached [ 1320.733419][T14519] veth13: entered promiscuous mode [ 1320.740805][T14519] bond6: (slave veth13): Enslaving as a backup interface with a down link [ 1320.749454][T14521] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1320.998784][T14543] loop9: detected capacity change from 0 to 512 [ 1321.101675][T14547] tipc: Enabling of bearer rejected, already enabled [ 1321.699130][T14552] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1321.707044][T14552] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1321.747096][T14553] loop6: detected capacity change from 0 to 256 [ 1321.912341][T14561] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1321.927750][T14566] loop6: detected capacity change from 0 to 256 [ 1321.937435][T14561] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1322.124380][T14576] loop9: detected capacity change from 0 to 512 [ 1322.198370][T14577] loop5: detected capacity change from 0 to 512 [ 1322.294290][T14577] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1322.377917][T14577] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #17: comm syz.5.27605: inode has both inline data and extents flags [ 1322.391554][T14577] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.27605: couldn't read orphan inode 17 (err -117) [ 1322.404827][T14577] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1322.424822][T14577] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.27605: bg 0: block 65: padding at end of block bitmap is not set [ 1322.439640][T14577] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.27605: Failed to acquire dquot type 0 [ 1322.665315][T14587] loop6: detected capacity change from 0 to 256 [ 1322.743911][T14586] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1322.835560][T14586] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1323.686856][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1323.686871][ T29] audit: type=1326 audit(2000000119.112:30607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14571 comm="syz.0.27606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee333aaeb9 code=0x7ffc0000 [ 1323.717288][ T29] audit: type=1326 audit(2000000119.112:30608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14571 comm="syz.0.27606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee333aaeb9 code=0x7ffc0000 [ 1323.740963][ T29] audit: type=1326 audit(2000000119.112:30609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14571 comm="syz.0.27606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fee333aaeb9 code=0x7ffc0000 [ 1323.765364][ T29] audit: type=1326 audit(2000000119.112:30610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14571 comm="syz.0.27606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee333aaeb9 code=0x7ffc0000 [ 1323.789087][ T29] audit: type=1326 audit(2000000119.112:30611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14571 comm="syz.0.27606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee333aaeb9 code=0x7ffc0000 [ 1323.813559][ T29] audit: type=1326 audit(2000000119.112:30612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14571 comm="syz.0.27606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee333aaeb9 code=0x7ffc0000 [ 1323.837247][ T29] audit: type=1326 audit(2000000119.112:30613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14571 comm="syz.0.27606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee333aaeb9 code=0x7ffc0000 [ 1323.861518][ T29] audit: type=1326 audit(2000000119.112:30614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14571 comm="syz.0.27606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee333aaeb9 code=0x7ffc0000 [ 1323.885292][ T29] audit: type=1326 audit(2000000119.112:30615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14571 comm="syz.0.27606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fee333aaeb9 code=0x7ffc0000 [ 1323.909907][ T29] audit: type=1326 audit(2000000119.112:30616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14571 comm="syz.0.27606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee333aaeb9 code=0x7ffc0000 [ 1323.961297][T12449] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1324.033682][T14599] tipc: Enabling of bearer rejected, already enabled [ 1324.150218][T14616] loop6: detected capacity change from 0 to 512 [ 1324.339901][T14632] loop6: detected capacity change from 0 to 512 [ 1324.346766][T14632] msdos: Unknown parameter '' [ 1324.934407][T14674] batman_adv: batadv0: Interface deactivated: dummy0 [ 1324.941519][T14674] batman_adv: batadv0: Removing interface: dummy0 [ 1324.954125][T14674] bridge_slave_0: left allmulticast mode [ 1324.959804][T14674] bridge_slave_0: left promiscuous mode [ 1324.966200][T14674] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.977482][T14674] bridge_slave_1: left allmulticast mode [ 1324.983312][T14674] bridge_slave_1: left promiscuous mode [ 1324.989031][T14674] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.999731][T14674] bond0: (slave bond_slave_0): Releasing backup interface [ 1325.010056][T14674] bond0: (slave bond_slave_1): Releasing backup interface [ 1325.022723][T14674] team0: Port device team_slave_0 removed [ 1325.032647][T14674] team0: Port device team_slave_1 removed [ 1325.039742][T14674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1325.047185][T14674] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1325.056496][T14674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1325.064727][T14674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1325.074638][T14674] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1325.140662][T14703] netlink: 'syz.9.27622': attribute type 2 has an invalid length. [ 1325.212726][T14713] netlink: 'syz.6.27627': attribute type 1 has an invalid length. [ 1325.248973][T14718] netlink: 28 bytes leftover after parsing attributes in process `syz.9.27628'. [ 1325.282115][T14724] veth17: entered promiscuous mode [ 1325.300364][T14724] bond8: (slave veth17): Enslaving as a backup interface with a down link [ 1325.406370][T14732] set_capacity_and_notify: 1 callbacks suppressed [ 1325.406385][T14732] loop9: detected capacity change from 0 to 512 [ 1325.420215][T14732] msdos: Unknown parameter '' [ 1326.154384][T14744] netlink: 'syz.0.27639': attribute type 2 has an invalid length. [ 1326.218756][T14747] Set syz1 is full, maxelem 65536 reached [ 1326.326445][T14762] netlink: 28 bytes leftover after parsing attributes in process `syz.5.27644'. [ 1326.400911][T14776] netlink: 'syz.9.27654': attribute type 2 has an invalid length. [ 1326.532919][T14790] loop8: detected capacity change from 0 to 512 [ 1326.614483][T14796] netlink: 28 bytes leftover after parsing attributes in process `syz.8.27661'. [ 1327.340647][T14809] Set syz1 is full, maxelem 65536 reached [ 1327.616447][T14820] loop9: detected capacity change from 0 to 512 [ 1327.769848][T14831] netlink: 28 bytes leftover after parsing attributes in process `syz.9.27675'. [ 1328.338458][T14849] loop5: detected capacity change from 0 to 512 [ 1329.201332][T14878] loop8: detected capacity change from 0 to 512 [ 1329.659609][T14910] loop5: detected capacity change from 0 to 512 [ 1329.908409][T14926] loop8: detected capacity change from 0 to 512 [ 1329.980391][T14926] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1330.546377][T14944] loop5: detected capacity change from 0 to 512 [ 1330.575075][T14944] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1330.704268][T14944] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #17: comm syz.5.27720: inode has both inline data and extents flags [ 1330.718628][T14944] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.27720: couldn't read orphan inode 17 (err -117) [ 1330.732470][T14944] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1330.747205][T14944] __quota_error: 9 callbacks suppressed [ 1330.747224][T14944] Quota error (device loop5): do_check_range: Getting block 144 out of range 0-5 [ 1330.803303][T10495] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1331.269962][T14957] loop9: detected capacity change from 0 to 512 [ 1331.645168][T14964] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1331.695044][T14964] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1332.009175][T12449] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1332.505769][ T29] audit: type=1326 audit(2000000127.283:30626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15005 comm="syz.6.27745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c583caeb9 code=0x7ffc0000 [ 1332.530189][ T29] audit: type=1326 audit(2000000127.283:30627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15005 comm="syz.6.27745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c583caeb9 code=0x7ffc0000 [ 1332.553895][ T29] audit: type=1326 audit(2000000127.283:30628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15005 comm="syz.6.27745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f5c583caeb9 code=0x7ffc0000 [ 1332.578280][ T29] audit: type=1326 audit(2000000127.283:30629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15005 comm="syz.6.27745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c583caeb9 code=0x7ffc0000 [ 1332.602661][ T29] audit: type=1326 audit(2000000127.283:30630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15005 comm="syz.6.27745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c583caeb9 code=0x7ffc0000 [ 1332.626298][ T29] audit: type=1326 audit(2000000127.283:30631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15005 comm="syz.6.27745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5c583caeb9 code=0x7ffc0000 [ 1332.650680][ T29] audit: type=1326 audit(2000000127.283:30632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15005 comm="syz.6.27745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c583caeb9 code=0x7ffc0000 [ 1332.674353][ T29] audit: type=1326 audit(2000000127.283:30633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15005 comm="syz.6.27745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c583caeb9 code=0x7ffc0000 [ 1332.698870][ T29] audit: type=1326 audit(2000000127.283:30634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15005 comm="syz.6.27745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c583caeb9 code=0x7ffc0000 [ 1332.768950][T14993] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1332.797589][T14993] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1332.917393][T15023] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1333.114194][T15028] loop9: detected capacity change from 0 to 256 [ 1333.194663][T15027] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000001) [ 1333.581172][T15023] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1334.118561][T15064] loop9: detected capacity change from 0 to 256 [ 1334.609897][T15064] FAT-fs (loop9): codepage cp932 not found [ 1334.724769][T15071] loop8: detected capacity change from 0 to 256 [ 1334.749552][T15074] netlink: 28 bytes leftover after parsing attributes in process `syz.9.27767'. [ 1334.845122][T15084] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1334.862731][T15084] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1334.884041][T15092] loop8: detected capacity change from 0 to 256 [ 1334.909052][T15092] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000001) [ 1335.031485][T15106] loop9: detected capacity change from 0 to 256 [ 1335.049814][T15104] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1335.242271][T15119] loop8: detected capacity change from 0 to 512 [ 1335.350767][T15119] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1335.886927][T15137] loop6: detected capacity change from 0 to 256 [ 1335.944841][T15133] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1335.996750][T15133] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1336.149671][T10495] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1336.197965][T15150] bridge_slave_0: left allmulticast mode [ 1336.203657][T15150] bridge_slave_0: left promiscuous mode [ 1336.209353][T15150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1336.218472][T15150] bridge_slave_1: left allmulticast mode [ 1336.224207][T15150] bridge_slave_1: left promiscuous mode [ 1336.229953][T15150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1336.239403][T15150] bond0: (slave bond_slave_0): Releasing backup interface [ 1336.249752][T15150] bond0: (slave bond_slave_1): Releasing backup interface [ 1336.272114][T15150] team0: Port device team_slave_0 removed [ 1336.291507][T15150] team0: Port device team_slave_1 removed [ 1336.298554][T15150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1336.306011][T15150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1336.315015][T15150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1336.322426][T15150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1336.332038][T15150] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1336.439961][T15154] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1336.495124][T15154] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1336.573683][T15161] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1336.592608][T15164] ref_ctr_offset mismatch. inode: 0x846 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 1336.609938][T15161] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1336.986673][T15208] netlink: 28 bytes leftover after parsing attributes in process `syz.6.27802'. [ 1337.274440][T15253] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1337.291839][T15253] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1337.324695][T15262] loop9: detected capacity change from 0 to 256 [ 1337.347338][T15262] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000001) [ 1337.471256][T15279] Set syz1 is full, maxelem 65536 reached [ 1337.535516][T15279] Set syz1 is full, maxelem 65536 reached [ 1337.893739][T15339] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1337.922359][T15339] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1337.933928][T15345] loop6: detected capacity change from 0 to 256 [ 1338.466128][T15379] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1338.479890][T15379] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1338.498871][T15382] loop8: detected capacity change from 0 to 256 [ 1338.761904][T15398] loop6: detected capacity change from 0 to 512 [ 1339.229687][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 1339.229712][ T29] audit: type=1326 audit(2000000133.329:30677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15392 comm="syz.9.27847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9cecaeb9 code=0x7ffc0000 [ 1339.259571][ T29] audit: type=1326 audit(2000000133.329:30678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15392 comm="syz.9.27847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9cecaeb9 code=0x7ffc0000 [ 1339.283347][ T29] audit: type=1326 audit(2000000133.329:30679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15392 comm="syz.9.27847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6c9cecaeb9 code=0x7ffc0000 [ 1339.307052][ T29] audit: type=1326 audit(2000000133.329:30680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15392 comm="syz.9.27847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9cecaeb9 code=0x7ffc0000 [ 1339.330732][ T29] audit: type=1326 audit(2000000133.329:30681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15392 comm="syz.9.27847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9cecaeb9 code=0x7ffc0000 [ 1339.354452][ T29] audit: type=1326 audit(2000000133.329:30682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15392 comm="syz.9.27847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6c9cecaeb9 code=0x7ffc0000 [ 1339.378148][ T29] audit: type=1326 audit(2000000133.329:30683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15392 comm="syz.9.27847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9cecaeb9 code=0x7ffc0000 [ 1339.401796][ T29] audit: type=1326 audit(2000000133.329:30684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15392 comm="syz.9.27847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9cecaeb9 code=0x7ffc0000 [ 1339.425464][ T29] audit: type=1326 audit(2000000133.329:30685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15392 comm="syz.9.27847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c9cecaeb9 code=0x7ffc0000 [ 1339.449151][ T29] audit: type=1326 audit(2000000133.329:30686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15392 comm="syz.9.27847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9cecaeb9 code=0x7ffc0000 [ 1339.912129][T15422] netlink: 72 bytes leftover after parsing attributes in process `syz.8.27856'. [ 1340.009320][T15427] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1340.016755][T15427] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1341.228654][T15458] netlink: 72 bytes leftover after parsing attributes in process `syz.6.27867'. [ 1341.436575][T15466] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1341.452135][T15467] blkio.reset_stats is deprecated [ 1341.457883][T15466] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1341.496086][T15468] loop6: detected capacity change from 0 to 256 [ 1341.548487][T15470] loop5: detected capacity change from 0 to 256 [ 1341.668665][T15470] FAT-fs (loop5): codepage cp932 not found [ 1342.768120][T15503] loop5: detected capacity change from 0 to 256 [ 1342.859162][T15502] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1342.873050][T15503] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 1342.908878][T15502] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1343.135377][T15513] netlink: 72 bytes leftover after parsing attributes in process `syz.8.27885'. [ 1343.300322][T15520] tipc: Enabled bearer , priority 0 [ 1343.308337][T15522] netlink: 'syz.8.27889': attribute type 1 has an invalid length. [ 1343.343241][T15522] veth7: entered promiscuous mode [ 1343.381945][T15520] syzkaller0: entered promiscuous mode [ 1343.387490][T15520] syzkaller0: entered allmulticast mode [ 1343.456396][T15520] tipc: Resetting bearer [ 1343.649299][T15536] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1343.656620][T15536] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1343.920828][T15549] loop6: detected capacity change from 0 to 512 [ 1344.343422][T15516] tipc: Resetting bearer [ 1344.356407][T15516] tipc: Disabling bearer [ 1344.929347][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 1344.929364][ T29] audit: type=1326 audit(2000000138.925:30707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15565 comm="syz.5.27905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61d07aeb9 code=0x7ffc0000 [ 1344.959868][ T29] audit: type=1326 audit(2000000138.925:30708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15565 comm="syz.5.27905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61d07aeb9 code=0x7ffc0000 [ 1344.983624][ T29] audit: type=1326 audit(2000000138.925:30709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15565 comm="syz.5.27905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc61d07aeb9 code=0x7ffc0000 [ 1345.007961][ T29] audit: type=1326 audit(2000000138.925:30710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15565 comm="syz.5.27905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61d07aeb9 code=0x7ffc0000 [ 1345.031661][ T29] audit: type=1326 audit(2000000138.925:30711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15565 comm="syz.5.27905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61d07aeb9 code=0x7ffc0000 [ 1345.056174][ T29] audit: type=1326 audit(2000000138.925:30712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15565 comm="syz.5.27905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc61d07aeb9 code=0x7ffc0000 [ 1345.079824][ T29] audit: type=1326 audit(2000000138.925:30713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15565 comm="syz.5.27905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61d07aeb9 code=0x7ffc0000 [ 1345.104587][ T29] audit: type=1326 audit(2000000138.925:30714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15565 comm="syz.5.27905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61d07aeb9 code=0x7ffc0000 [ 1345.128356][ T29] audit: type=1326 audit(2000000138.925:30715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15565 comm="syz.5.27905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc61d07aeb9 code=0x7ffc0000 [ 1345.152718][ T29] audit: type=1326 audit(2000000138.925:30716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15565 comm="syz.5.27905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61d07aeb9 code=0x7ffc0000 [ 1345.225177][T15572] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1345.232498][T15572] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1345.867141][T15594] tipc: Enabled bearer , priority 0 [ 1345.890267][T15594] syzkaller0: entered promiscuous mode [ 1345.895994][T15594] syzkaller0: entered allmulticast mode [ 1345.927248][T15594] tipc: Resetting bearer [ 1346.572331][T15615] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1346.587236][T15615] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1346.636482][T15593] tipc: Resetting bearer [ 1346.656652][T15593] tipc: Disabling bearer [ 1346.928112][T15630] netlink: 72 bytes leftover after parsing attributes in process `syz.5.27928'. [ 1346.946566][T15637] netlink: 28 bytes leftover after parsing attributes in process `syz.6.27930'. [ 1347.128690][T15654] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1347.139988][T15656] loop9: detected capacity change from 0 to 256 [ 1347.162939][T15656] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000001) [ 1347.184914][T15648] tipc: Enabled bearer , priority 0 [ 1347.202233][T15654] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1347.214058][T15648] syzkaller0: entered promiscuous mode [ 1347.220652][T15648] syzkaller0: entered allmulticast mode [ 1347.242315][T15648] tipc: Resetting bearer [ 1347.743082][T15675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27944'. [ 1347.904233][T15679] block device autoloading is deprecated and will be removed. [ 1347.914569][T15647] tipc: Resetting bearer [ 1347.941063][T15647] tipc: Disabling bearer [ 1348.655177][T15700] loop6: detected capacity change from 0 to 256 [ 1348.704767][T15699] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1348.725686][T15699] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1348.973915][T15709] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27955'. [ 1349.106285][T15712] loop0: detected capacity change from 0 to 1024 [ 1349.154072][T15712] EXT4-fs: Ignoring removed nobh option [ 1349.162159][T15712] EXT4-fs: Ignoring removed nobh option [ 1349.167791][T15712] EXT4-fs: inline encryption not supported [ 1349.201963][T15712] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1349.274946][T15727] loop5: detected capacity change from 0 to 512 [ 1349.294185][T15727] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1349.313987][T15712] syz_tun: entered allmulticast mode [ 1349.322284][T15712] syz_tun: left allmulticast mode [ 1349.350380][T11581] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1349.535608][T15740] loop0: detected capacity change from 0 to 512 [ 1349.542308][T15740] msdos: Unknown parameter '' [ 1349.679842][T15719] netlink: 24 bytes leftover after parsing attributes in process `syz.6.27959'. [ 1349.694964][T15697] syz.8.27946 (15697) used greatest stack depth: 6008 bytes left [ 1349.780473][T15743] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1349.836408][T15744] loop0: detected capacity change from 0 to 256 [ 1349.883749][T15746] netlink: 8 bytes leftover after parsing attributes in process `syz.6.27967'. [ 1349.913569][T15743] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1349.978769][T15744] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 1349.997393][T15748] netlink: 28 bytes leftover after parsing attributes in process `syz.8.27968'. [ 1350.996081][T15767] tipc: Enabling of bearer rejected, already enabled [ 1351.110529][T15778] loop6: detected capacity change from 0 to 512 [ 1351.117086][T15778] msdos: Unknown parameter '' [ 1351.142794][T15780] netlink: 'syz.6.27977': attribute type 1 has an invalid length. [ 1351.253582][T15791] loop0: detected capacity change from 0 to 512 [ 1351.321791][T15796] netlink: 8 bytes leftover after parsing attributes in process `syz.6.27979'. [ 1351.579539][T12449] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1351.592903][T15817] loop6: detected capacity change from 0 to 256 [ 1351.599848][T15808] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1351.621254][T15808] tQ±6ã×\b‹¡Y­4 speed is unknown, defaulting to 1000 [ 1351.635929][T15825] netlink: 72 bytes leftover after parsing attributes in process `syz.5.27986'. [ 1351.741132][T15840] batadv_slave_0: entered promiscuous mode [ 1351.923583][T15854] tipc: Enabled bearer , priority 0 [ 1351.989371][T15854] syzkaller0: entered promiscuous mode [ 1351.995054][T15854] syzkaller0: entered allmulticast mode [ 1352.035804][T15854] tipc: Resetting bearer [ 1352.057546][T15864] loop6: detected capacity change from 0 to 512 [ 1352.179547][T15910] netlink: 72 bytes leftover after parsing attributes in process `syz.9.27998'. [ 1352.203776][T15909] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1352.394769][T15935] netlink: 16 bytes leftover after parsing attributes in process `syz.6.28006'. [ 1352.564905][T15829] batadv_slave_0: left promiscuous mode [ 1352.624444][T15967] netlink: 72 bytes leftover after parsing attributes in process `syz.0.28013'. [ 1352.727808][T15853] tipc: Resetting bearer [ 1352.740885][T15853] tipc: Disabling bearer [ 1352.804439][T15985] loop9: detected capacity change from 0 to 512 [ 1352.887834][T15985] msdos: Unknown parameter '' [ 1353.651422][T15999] netlink: 16 bytes leftover after parsing attributes in process `syz.5.28018'. [ 1353.679002][T16021] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1353.925973][T16059] netlink: 8 bytes leftover after parsing attributes in process `syz.6.28025'. [ 1354.327320][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 1354.327335][ T29] audit: type=1326 audit(2000000147.685:30767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16064 comm="syz.0.28028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee333aaeb9 code=0x7ffc0000 [ 1354.358104][ T29] audit: type=1326 audit(2000000147.685:30768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16064 comm="syz.0.28028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee333aaeb9 code=0x7ffc0000 [ 1354.381822][ T29] audit: type=1326 audit(2000000147.685:30769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16064 comm="syz.0.28028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fee333aaeb9 code=0x7ffc0000 [ 1354.406287][ T29] audit: type=1326 audit(2000000147.685:30770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16064 comm="syz.0.28028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee333aaeb9 code=0x7ffc0000 [ 1354.430811][ T29] audit: type=1326 audit(2000000147.685:30771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16064 comm="syz.0.28028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee333aaeb9 code=0x7ffc0000 [ 1354.537148][T16081] tipc: Enabled bearer , priority 9 [ 1354.612718][T16079] netlink: 16 bytes leftover after parsing attributes in process `syz.9.28033'. [ 1354.719489][T16086] set_capacity_and_notify: 1 callbacks suppressed [ 1354.719505][T16086] loop6: detected capacity change from 0 to 256 [ 1354.749664][T10495] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1354.969539][T16098] syz.8.28037 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1354.980721][T16098] CPU: 0 UID: 0 PID: 16098 Comm: syz.8.28037 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1354.980781][T16098] Tainted: [W]=WARN [ 1354.980788][T16098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1354.980800][T16098] Call Trace: [ 1354.980806][T16098] [ 1354.980814][T16098] __dump_stack+0x1d/0x30 [ 1354.980838][T16098] dump_stack_lvl+0x95/0xd0 [ 1354.980859][T16098] dump_stack+0x15/0x1b [ 1354.980886][T16098] dump_header+0x80/0x240 [ 1354.980906][T16098] oom_kill_process+0x295/0x350 [ 1354.980930][T16098] out_of_memory+0x97d/0xb80 [ 1354.980953][T16098] try_charge_memcg+0x62e/0xa10 [ 1354.981023][T16098] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 1354.981055][T16098] __read_swap_cache_async+0x17b/0x2d0 [ 1354.981088][T16098] swap_cluster_readahead+0x362/0x3c0 [ 1354.981218][T16098] swapin_readahead+0xde/0x840 [ 1354.981254][T16098] ? __rcu_read_unlock+0x4e/0x70 [ 1354.981283][T16098] ? swap_cache_get_folio+0x26f/0x280 [ 1354.981314][T16098] do_swap_page+0x59b/0x2a50 [ 1354.981382][T16098] ? __rcu_read_lock+0x36/0x50 [ 1354.981414][T16098] ? __pfx_default_wake_function+0x10/0x10 [ 1354.981457][T16098] handle_mm_fault+0xb40/0x3030 [ 1354.981568][T16098] ? vma_start_read+0x1c7/0x2c0 [ 1354.981605][T16098] do_user_addr_fault+0x62f/0x1050 [ 1354.981635][T16098] exc_page_fault+0x62/0xa0 [ 1354.981663][T16098] asm_exc_page_fault+0x26/0x30 [ 1354.981684][T16098] RIP: 0033:0x7fe3146ebcd6 [ 1354.981768][T16098] Code: 0f 1f 40 00 b8 ea ff ff ff 48 85 ff 74 28 48 85 d2 74 23 49 89 c8 b8 b3 01 00 00 0f 05 48 85 c0 7c 14 74 01 c3 31 ed 4c 89 c7 d2 48 89 c7 b8 3c 00 00 00 0f 05 48 c7 c1 e8 ff ff ff f7 d8 64 [ 1354.981838][T16098] RSP: 002b:00007fe3131261c0 EFLAGS: 00010246 [ 1354.981855][T16098] RAX: 0000000000000000 RBX: 00007fe3146a72e0 RCX: 00007fe3146ebcc9 [ 1354.981868][T16098] RDX: 00007fe3146a72e0 RSI: 0000000000000058 RDI: 00007fe3131266c0 [ 1354.981881][T16098] RBP: 0000000000000000 R08: 00007fe3131266c0 R09: 00007ffd64f89d37 [ 1354.981927][T16098] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffe8 [ 1354.981943][T16098] R13: 000000000000006e R14: 00007ffd64f89c50 R15: 00007ffd64f89d38 [ 1354.981964][T16098] [ 1354.981971][T16098] memory: usage 307200kB, limit 307200kB, failcnt 1523 [ 1355.053433][T16105] netlink: 100 bytes leftover after parsing attributes in process `syz.9.28042'. [ 1355.057910][T16098] memory+swap: usage 373140kB, limit 9007199254740988kB, failcnt 0 [ 1355.168460][T16111] loop0: detected capacity change from 0 to 512 [ 1355.172080][T16098] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 1355.215281][T16111] msdos: Unknown parameter '' [ 1355.221316][T16098] Memory cgroup stats for /syz8: [ 1355.286347][T16098] cache 0 [ 1355.294328][T16098] rss 0 [ 1355.297215][T16098] shmem 0 [ 1355.300139][T16098] mapped_file 0 [ 1355.303650][T16098] dirty 0 [ 1355.306633][T16098] writeback 0 [ 1355.309904][T16098] workingset_refault_anon 45 [ 1355.314483][T16098] workingset_refault_file 0 [ 1355.319073][T16098] swap 67522560 [ 1355.322516][T16098] swapcached 0 [ 1355.325952][T16098] pgpgin 155717 [ 1355.329444][T16098] pgpgout 155716 [ 1355.332981][T16098] pgfault 164197 [ 1355.336523][T16098] pgmajfault 15 [ 1355.340052][T16098] inactive_anon 0 [ 1355.343692][T16098] active_anon 0 [ 1355.347157][T16098] inactive_file 0 [ 1355.350906][T16098] active_file 4096 [ 1355.354654][T16098] unevictable 0 [ 1355.358099][T16098] hierarchical_memory_limit 314572800 [ 1355.363505][T16098] hierarchical_memsw_limit 9223372036854771712 [ 1355.369708][T16098] total_cache 0 [ 1355.373271][T16098] total_rss 0 [ 1355.376570][T16098] total_shmem 0 [ 1355.380048][T16098] total_mapped_file 0 [ 1355.384054][T16098] total_dirty 0 [ 1355.387514][T16098] total_writeback 0 [ 1355.391322][T16098] total_workingset_refault_anon 45 [ 1355.396488][T16098] total_workingset_refault_file 0 [ 1355.401579][T16098] total_swap 67522560 [ 1355.405589][T16098] total_swapcached 0 [ 1355.409472][T16098] total_pgpgin 155717 [ 1355.413496][T16098] total_pgpgout 155716 [ 1355.417549][T16098] total_pgfault 164197 [ 1355.421607][T16098] total_pgmajfault 15 [ 1355.425601][T16098] total_inactive_anon 0 [ 1355.429744][T16098] total_active_anon 0 [ 1355.433789][T16098] total_inactive_file 0 [ 1355.437954][T16098] total_active_file 4096 [ 1355.442196][T16098] total_unevictable 0 [ 1355.446258][T16098] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.28037,pid=16095,uid=0 [ 1355.461291][T16098] Memory cgroup out of memory: Killed process 16095 (syz.8.28037) total-vm:94132kB, anon-rss:1204kB, file-rss:22540kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 1355.583077][T16115] netlink: 8 bytes leftover after parsing attributes in process `syz.9.28044'. [ 1355.744105][T28062] tipc: Node number set to 1196633886 [ 1355.832979][T16131] Set syz1 is full, maxelem 65536 reached [ 1355.908065][T16131] Set syz1 is full, maxelem 65536 reached [ 1355.935860][T16121] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 1355.942429][T16121] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1355.950810][T16121] vhci_hcd vhci_hcd.0: Device attached [ 1355.961483][T16129] loop5: detected capacity change from 0 to 512 [ 1356.000304][T16137] vhci_hcd: connection closed [ 1356.000927][T18589] vhci_hcd vhci_hcd.9: stop threads [ 1356.010894][T18589] vhci_hcd vhci_hcd.9: release socket [ 1356.017049][T18589] vhci_hcd vhci_hcd.9: disconnect device [ 1356.026225][T16129] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1356.365016][T16151] netlink: 100 bytes leftover after parsing attributes in process `syz.0.28053'. [ 1356.761605][T16161] loop9: detected capacity change from 0 to 256 [ 1356.820591][T16161] FAT-fs (loop9): codepage cp932 not found [ 1357.091830][T16180] loop8: detected capacity change from 0 to 512 [ 1357.098689][T16180] msdos: Unknown parameter '' [ 1357.301931][T12449] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1357.905058][T16195] loop5: detected capacity change from 0 to 256 [ 1357.984857][T16173] netlink: 8 bytes leftover after parsing attributes in process `syz.9.28062'. [ 1357.993946][T16195] FAT-fs (loop5): codepage cp932 not found [ 1358.314391][T16220] loop6: detected capacity change from 0 to 512 [ 1358.468563][ T29] audit: type=1326 audit(2000000151.663:30772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16218 comm="syz.9.28076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9cecaeb9 code=0x7ffc0000 [ 1358.493071][ T29] audit: type=1326 audit(2000000151.663:30773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16218 comm="syz.9.28076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9cecaeb9 code=0x7ffc0000 [ 1358.516867][ T29] audit: type=1326 audit(2000000151.663:30774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16218 comm="syz.9.28076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6c9cecaeb9 code=0x7ffc0000 [ 1358.541436][ T29] audit: type=1326 audit(2000000151.663:30775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16218 comm="syz.9.28076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9cecaeb9 code=0x7ffc0000 [ 1358.565899][ T29] audit: type=1326 audit(2000000151.663:30776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16218 comm="syz.9.28076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9cecaeb9 code=0x7ffc0000 [ 1358.808199][T16229] loop0: detected capacity change from 0 to 256 [ 1358.838825][T16229] FAT-fs (loop0): codepage cp932 not found [ 1359.048183][T16237] loop8: detected capacity change from 0 to 512 [ 1359.073996][T16237] msdos: Unknown parameter '' [ 1359.204958][T16243] loop9: detected capacity change from 0 to 512 [ 1359.232739][T16243] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1359.262996][T16243] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #17: comm syz.9.28083: inode has both inline data and extents flags [ 1359.300384][T16243] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.28083: couldn't read orphan inode 17 (err -117) [ 1359.455410][T16243] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1359.559850][T10735] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1360.263032][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 1360.263047][ T29] audit: type=1326 audit(2000000153.301:30789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16269 comm="syz.6.28093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c583caeb9 code=0x7ffc0000 [ 1360.292910][ T29] audit: type=1326 audit(2000000153.301:30790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16269 comm="syz.6.28093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c583caeb9 code=0x7ffc0000 [ 1360.316621][ T29] audit: type=1326 audit(2000000153.301:30791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16269 comm="syz.6.28093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f5c583caeb9 code=0x7ffc0000 [ 1360.340498][ T29] audit: type=1326 audit(2000000153.301:30792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16269 comm="syz.6.28093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c583caeb9 code=0x7ffc0000 [ 1360.364178][ T29] audit: type=1326 audit(2000000153.301:30793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16269 comm="syz.6.28093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c583caeb9 code=0x7ffc0000 [ 1360.388069][ T29] audit: type=1326 audit(2000000153.301:30794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16269 comm="syz.6.28093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5c583caeb9 code=0x7ffc0000 [ 1360.411777][ T29] audit: type=1326 audit(2000000153.301:30795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16269 comm="syz.6.28093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c583caeb9 code=0x7ffc0000 [ 1360.435460][ T29] audit: type=1326 audit(2000000153.301:30796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16269 comm="syz.6.28093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c583caeb9 code=0x7ffc0000 [ 1360.459193][ T29] audit: type=1326 audit(2000000153.301:30797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16269 comm="syz.6.28093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c583caeb9 code=0x7ffc0000 [ 1360.482934][ T29] audit: type=1326 audit(2000000153.301:30798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16269 comm="syz.6.28093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c583caeb9 code=0x7ffc0000 [ 1360.537053][T16271] Set syz1 is full, maxelem 65536 reached [ 1360.578139][T16272] Set syz1 is full, maxelem 65536 reached [ 1360.651865][T16277] loop5: detected capacity change from 0 to 512 [ 1360.712470][T16277] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1360.930629][T10495] ================================================================== [ 1360.938746][T10495] BUG: KCSAN: data-race in __mmput / copy_mm [ 1360.944732][T10495] [ 1360.947047][T10495] write to 0xffff8881b9ec37c0 of 8 bytes by task 16274 on cpu 1: [ 1360.954756][T10495] __mmput+0xe2/0x1c0 [ 1360.958749][T10495] mmput+0x40/0x50 [ 1360.962470][T10495] exit_mm+0xe3/0x180 [ 1360.966451][T10495] do_exit+0x3fa/0x1590 [ 1360.970619][T10495] do_group_exit+0xfe/0x140 [ 1360.975121][T10495] get_signal+0xe4f/0xf60 [ 1360.979449][T10495] arch_do_signal_or_restart+0x96/0x450 [ 1360.985002][T10495] exit_to_user_mode_loop+0x6a/0x6f0 [ 1360.990295][T10495] do_syscall_64+0x1d3/0x2a0 [ 1360.994893][T10495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.000787][T10495] [ 1361.003109][T10495] read to 0xffff8881b9ec3600 of 1664 bytes by task 10495 on cpu 0: [ 1361.010998][T10495] copy_mm+0xe1/0x370 [ 1361.014995][T10495] copy_process+0xcbd/0x1f10 [ 1361.019596][T10495] kernel_clone+0x16b/0x5b0 [ 1361.024093][T10495] __x64_sys_clone+0x143/0x180 [ 1361.028849][T10495] x64_sys_call+0x12d0/0x3000 [ 1361.033522][T10495] do_syscall_64+0xc0/0x2a0 [ 1361.038022][T10495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.043909][T10495] [ 1361.046224][T10495] Reported by Kernel Concurrency Sanitizer on: [ 1361.052362][T10495] CPU: 0 UID: 0 PID: 10495 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1361.063989][T10495] Tainted: [W]=WARN [ 1361.067778][T10495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1361.077819][T10495] ================================================================== [ 1361.231229][T16277] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #17: comm syz.5.28094: inode has both inline data and extents flags [ 1361.246305][T16277] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.28094: couldn't read orphan inode 17 (err -117) [ 1361.289210][T16277] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1361.382726][T12449] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1361.395038][T16292] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1361.401576][T16292] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1361.409931][T16292] vhci_hcd vhci_hcd.0: Device attached [ 1361.495866][T16293] vhci_hcd: connection closed [ 1361.496011][T10342] vhci_hcd vhci_hcd.0: stop threads [ 1361.506380][T10342] vhci_hcd vhci_hcd.0: release socket [ 1361.511738][T10342] vhci_hcd vhci_hcd.0: disconnect device