last executing test programs: 1m9.01565082s ago: executing program 1 (id=2688): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = syz_io_uring_setup(0x304, &(0x7f0000000300)={0x0, 0x8006d85, 0x400, 0x2, 0x200118}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x8, 0x0, r4, 0x0, 0x0, 0x0, 0x100}) io_uring_enter(r1, 0x8aa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f00000006c0)={0xfffffffffffffff7, r4, 0x3, {0x27fffffffffffff, 0x4}, 0x54}, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_io_uring_setup(0x7998, &(0x7f0000001180)={0x0, 0x3b52, 0x1, 0x3, 0x32b}, &(0x7f0000000240)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0x7dd6, 0x8029, 0x1, 0x0, 0x0) io_uring_enter(r6, 0x0, 0x85c1, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtaction={0x6c, 0x30, 0xffff, 0x70bd2a, 0x25dfdbfb, {}, [{0x58, 0x1, [@m_ife={0x54, 0x18, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_DMAC={0xa}]}, {0x6, 0x6, '))'}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2040400) r9 = syz_open_dev$loop(&(0x7f0000000040), 0x1b3, 0x0) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000140)={0x2, 0x0, 0x98, &(0x7f0000000080)={0xffffffff, 0x0, 0xa}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_misc(r11, &(0x7f0000000300)="65f3", 0x2) r12 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r12, 0x0) r13 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, @perf_bp={&(0x7f0000000080)}, 0x100a00, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, r13, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00880000000000001e0012800900010069706970000000000c00028006000f00e196"], 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x40020) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100ac1e000108000200e00000010c0002800500010000000000240002800c000280050001000000000014000180080001000000000008000200e0000002080007400000000008000840000000001c0018800800024000000000080001400000000008000340000000002f5a724ad132f55ad46caee7c1ac77214d5215656a1f7e74fddebd16775d721002a624123176a003d3a763ba46ca70ef6e9fedc12b941804475f1560d41d8914039f3638cb7d5d44046e120b4d4bb4261c44a76118b1cf153ec29e045d6a"], 0x88}}, 0x0) 1m8.247087027s ago: executing program 1 (id=2692): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x7c, 0x30, 0xb, 0x0, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xf, 0x0, 0x3, 0xe4ff}}, @TCA_CT_ACTION={0x6, 0x3, 0x1b}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x13}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x604ff3648f564820}, 0x40014) 1m8.219568618s ago: executing program 1 (id=2693): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r1) ioprio_get$uid(0x3, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x3200082, &(0x7f0000000040), 0x1, 0x5d4, &(0x7f0000000bc0)="$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") stat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 1m8.155373411s ago: executing program 1 (id=2695): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) (async) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x84000, 0x0) (async, rerun: 32) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = syz_io_uring_setup(0x1936, &(0x7f0000000100)={0x0, 0x3c7a, 0x400, 0x0, 0x2f9}, &(0x7f0000000080), &(0x7f0000000240)=0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000280)={0x8000000000000000, r1, 'id0\x00'}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x40, 0x0, @fd_index=0x7, 0x0, 0x0, 0x401, 0xe}) 1m8.133560422s ago: executing program 1 (id=2696): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) 1m7.519523321s ago: executing program 1 (id=2703): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x4, @empty, 0x6}], 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000001000000000000000000000000ffff0000400000000000000000000000ffff"], 0x4c}}, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) signalfd4(r2, &(0x7f00000000c0)={[0x1]}, 0x8, 0x80800) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) pause() syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000000), &(0x7f0000000200)) 1m7.519272482s ago: executing program 32 (id=2703): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x4, @empty, 0x6}], 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000001000000000000000000000000ffff0000400000000000000000000000ffff"], 0x4c}}, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) signalfd4(r2, &(0x7f00000000c0)={[0x1]}, 0x8, 0x80800) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) pause() syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000000), &(0x7f0000000200)) 24.990444788s ago: executing program 0 (id=2989): r0 = open(&(0x7f0000000400)='./file1\x00', 0x160a00, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xffff) mkdirat(0xffffffffffffff9c, 0x0, 0x100) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) write$rfkill(r0, &(0x7f0000000540)={0xc, 0x6, 0x42, 0x0, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, 0x0, &(0x7f0000000080)) 24.838265826s ago: executing program 0 (id=2991): socket$inet(0x2, 0x4000000000000001, 0x100) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1218, &(0x7f00000005c0)="$eJzs3M9rHGUYB/AnsbZNan6otdqC+KIXvQxJDl70EiQF6YLSNkIrCFMz0SXjbsgsgRWxevLqX+FBBBG8CeJNL7n4HwjecvFYQXylu2lrululom4Jn89l3+V9v7PPwy4D7zIz+y9/+t7WZlNslr2YnpqK6e2IdCNFium45aN44aXvf3j60pWrF1ZbrbWLKZ1fvbz8Ykpp/plv3/zgi2e/65164+v5b07E3uJb+7+s/Lx3Zu/s/u+X3203qd2kTreXynSt2+2V1+oqbbSbrSKl1+uqbKrU7jTVzqH5zbq7vd1PZWdjbnZ7p2qaVHb6aavqp1439Xb6qXynbHdSURRpbja4f8duj9Y/v5Fzjsj54TgeOec8HxGn4pGYi/lYiMV4NB6Lx+N0PBFn4sl4Kr766cv+zQQAAAAAAAAAAAAAAAAAAADw77n7/v+ZmP3L+//PDlZNumoAAAAAAAAAAAAAAAAAAAA4Wi5duXphtdVau5jSyYj6k9313fXh63B+dTPaUUcVS7EQv0Xkz/KBGDwJ4PyrrbWlNLAYH9fXD/LXd9cfOpxfHjxOIHIezS8P8+lwfuZWicP8SizE6cH7kfzK2PzJeP65P31+EQvx49vRjTo2Bge5k/9wOaVXXmvdlT83WAcAAABHQZFuG7t/L4p7zQ/zI/8PjNnfL43Zn9/Mnjs20daJiKb//lZZ19WOwQM/OD7ZMn7NOf/Nmpkj+4u6d18nIuIfH3kqIh6MBkcGByeI6QmfoPhP3fnSJ10JAAAAAAAAAAAA9+P/uJxw0j0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAf7MCxAAAAAIAwf+s0OjYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCrAAAA//+EwM1v") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto="000002ee079800"}}) 24.54753429s ago: executing program 0 (id=2994): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82200, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0xfffffbff}}, './file0\x00'}) ioprio_get$uid(0x3, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) r4 = socket(0x2, 0x2, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) shutdown(r5, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) bind$unix(r4, &(0x7f0000000000)=@abs, 0x6e) r7 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000200)=0xffffffff, 0x4) sendmsg$kcm(r7, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r8, &(0x7f0000000100)=[{&(0x7f0000000000)=""/250, 0xfa}], 0x1, 0x185, 0xfffffffc) open$dir(&(0x7f00000004c0)='./file0\x00', 0x400, 0x105) bind$inet(r3, &(0x7f0000000000)={0x2, 0x24, @empty}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) sync() 24.103901781s ago: executing program 0 (id=2998): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5c}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000180)={0xab000500, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') truncate(&(0x7f00000005c0)='./file1\x00', 0x6e3) 23.665493172s ago: executing program 0 (id=3002): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0x3e57}, {0x6}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000300)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000002100)=0xc) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x38, 0x3, 0x6, 0x0, 0x1ff, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_config_ext={0x5f, 0x200}, 0x6080, 0x9, 0xe6, 0x1, 0x0, 0x4a, 0x0, 0x0, 0x8, 0x0, 0x10}, r5, 0x10, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e000100000000000000000000030000080001"], 0x1c}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f00006d4000/0x2000)=nil, 0x2000, 0xc002, 0x0, 0x3, 0x3) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@getnexthop={0x20, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 23.2832563s ago: executing program 0 (id=3004): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x40c, &(0x7f0000000240)={[{@init_itable}, {@quota}, {@nojournal_checksum}, {@grpjquota}, {@lazytime}, {@block_validity}, {}]}, 0xff, 0x501, &(0x7f0000000e80)="$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") r0 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000000000300000000050000000200000000000000020000000000000c2000000000002e"], 0x0, 0x40}, 0x28) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffc}, 0x0, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0xa1001) r2 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x3093, 0x0, 0x0, 0x81}, &(0x7f0000000040)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f00000000c0)=0x9) syz_emit_ethernet(0x16, &(0x7f00000017c0)={@broadcast, @random="fcf3ff961f97", @void, {@llc={0x4, {@snap={0xaa, 0xaa, '\v', "021951", 0x6004}}}}}, &(0x7f0000001880)={0x0, 0x3, [0xaa5, 0x3ad, 0x73d, 0x415]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socket(0x10, 0x3, 0x0) remap_file_pages(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000000, 0x9, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x80) mount(0x0, &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x54, 0x0, 0xfffffffffe000001}) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 23.210179884s ago: executing program 33 (id=3004): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x40c, &(0x7f0000000240)={[{@init_itable}, {@quota}, {@nojournal_checksum}, {@grpjquota}, {@lazytime}, {@block_validity}, {}]}, 0xff, 0x501, &(0x7f0000000e80)="$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") r0 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000000000300000000050000000200000000000000020000000000000c2000000000002e"], 0x0, 0x40}, 0x28) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffc}, 0x0, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0xa1001) r2 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x3093, 0x0, 0x0, 0x81}, &(0x7f0000000040)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f00000000c0)=0x9) syz_emit_ethernet(0x16, &(0x7f00000017c0)={@broadcast, @random="fcf3ff961f97", @void, {@llc={0x4, {@snap={0xaa, 0xaa, '\v', "021951", 0x6004}}}}}, &(0x7f0000001880)={0x0, 0x3, [0xaa5, 0x3ad, 0x73d, 0x415]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socket(0x10, 0x3, 0x0) remap_file_pages(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000000, 0x9, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x80) mount(0x0, &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x54, 0x0, 0xfffffffffe000001}) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 9.729932796s ago: executing program 3 (id=3091): r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) writev(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0xc8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x98, 0x2, {{0x488, 0x2, 0xa9, 0xa2, 0x6, 0x8}, [@TCA_NETEM_RATE={0x14, 0x6, {0x7, 0x5e, 0x2, 0x4}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0xfffffffffffffff1}, @TCA_NETEM_DELAY_DIST={0x5b, 0x2, "f6c858ee6d0540ad87131f820fc68e65a163d7bdb1b17003c2cd25e6eea67183a171d0dfb41104b4a983880d388c90d03c3eca1d33d488133efc1ec09101a0392855a4ee3b3cdad2741c5183715a7366132fa11beb73a1"}]}}}]}, 0xc8}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x27, 0x2, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x9805, 0x3, 0x7fc, 0x6, 0x0, 0x1, 0x6}, 0x0, 0xffc0000000000000, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x5}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r7, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2000002}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.566257984s ago: executing program 6 (id=3094): r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@minixdf}, {@nobh}, {@sysvgroups}, {@noquota}]}, 0xfd, 0x478, &(0x7f0000000d00)="$eJzs3M9vVEUcAPDv2/7gt62IP0CUKhobjS0tqBw8gNHEgyYmesBjbQsiCzW0GiFEVw94NCTejUcT/wJPejHqycSr3g0JMVxAvTzzdt9rd5fddSlbF9zPJ1k68+YtM9+dN7szb7oNYGBNZP8kEdsj4teIGKtlG0+YqP24fvXC/J9XL8wnkaav/5FUz7t29cJ8cWrxvG1FptJ4vN7yufOn5srlxbN5fnrl9LvTy+fOP33y9NyJxROLZ2YPHz50cOa5Z2ef6UmcWZuu7flwae/ul9+89Or8sUtv/fh1UsTfEMf73f+nmzuWTrQ4NlQkHu++ljvCjrp0MtzHhnBT3o6IrLtGquN/LIZirfPG4qVP+to4YEOlaZpual9cSYH/sST63QKgP/LP+SSiMp+tgevX84PgytHaAiiL+3r+qJUMRyk/Z6RpfdtL2WrrWOWvL7JHNN1PAQDYCN8erf0s5n5r849Sw138I/ne0HhE3B0ROyPinojYFRH3RsR9EXF/RDxQ95xW+z7NmjdJsvobtw9Kl9cXWXey+d/z+d5W4/yvmP3F+FCe21GNfyQ5frK8eCAi7oqIyRjZlOVnOtTx3Yu/fNaubKJu/pc9svqLuWDejsvDTTfoFuZW5m4l5npXPo7YM9wq/mR1JyDrx90RsWff+uo4+eRXe9uV/Xv8HfRgnyn9MuKJWv9Xoin+QtJ5f3J6c5QXD0wXV8WNfvr54mvt6r+l+Hsg6/+tLa//1fjHk/r92uWbr+Pib5+2XdN0ef2P1j8nu/5Hkzeq6aLgg7mVlbMzEaPJK/nxI/nxxvqq582unZ/FP7m/9fjfGWuvxIMRkV3ED0XEwxGxL2/7IxHxaETs7xD/Dy889s76499YWfwLN9X/bRPF3vYNRUOnvv+mWlJ01niH+JNo0f+HqqnJ/Eg3738dW3r2Vq5mAAAAuPOUImJ7JKWp1XSpNDVV+335XbG1VF5aXnnq+NJ7ZxZq3xEYj5FScadrbPV+aFRm8mV9cX90til/ML9v/PnQlmp+an6pvNDv4GHAbWsz/jO/D/W7dcCG830tGFzrHf9pmn7U46YA/zGf/zC4jH8YXC3G/5amfIe/EQDcyVp9/lvYw2Aw/4fBZfzD4DL+YXAZ/zCQ8m/CD3fzBf8NS2TvP/2rvZtENLQwTfvUjNHb49WoJqLUt9pjnU+f7NMr9nf+xzZvj47rMtHvdyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDe+CcAAP//w+bidw==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105042, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x38, r2, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c005}, 0x40) ioctl$BLKFRAGET(r0, 0x1265, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000e00)=ANY=[@ANYBLOB='utF8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',map=normal,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,\x00'], 0x2, 0xa1a, &(0x7f0000000380)="$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") r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x88901) r8 = fspick(r7, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r8, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r8, 0x3, &(0x7f0000000040)='map=off', 0x0, r6) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002dbd7000fedbdf2501000000140002007767310000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d78431077b323eca8"], 0x4c}, 0x1, 0x0, 0x0, 0xc004}, 0x4008084) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004800}, 0x8) socket(0x15, 0x5, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x2000003, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c) 5.67038403s ago: executing program 3 (id=3100): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) eventfd(0x101) unshare(0x20000680) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x40180, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_usb_connect(0x0, 0x10b, 0x0, 0x0) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24) ioctl$TIOCGWINSZ(r0, 0x5413, 0xfffffffffffffffd) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r2, &(0x7f0000000300)='1\x00', 0x2) 5.629414191s ago: executing program 6 (id=3101): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x14, r1, 0x405, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x121c80, 0x180) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000540)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0xc, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @loopback}, {[], {0x4e1d, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x100, @void}}}}}}}}, 0x0) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5], 0x3c}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r4) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="38010000", @ANYRES16=r6, @ANYBLOB="000128bd7000fcdbdf250a0000004c0001800800030001000000080003000100000008000100", @ANYRES32=r5, @ANYBLOB='XuD(', @ANYRES32=0x0, @ANYBLOB="080003000300000008000300010000000800030003000000080003000000000008000300010000004800018008000300020000001400020067656e65766531000000000000000000000002007767310000000000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="080003000200000008000100", @ANYRES32=r5, @ANYBLOB="080003000000000074000300c649f9f0621d41da628e3d081432d3ea59d6394c94da18589bed532eb0f0344f75aa4fa39efedc19e7a7266cb9cba6e1380a1d7c1e127c81f82d23313500c0bb348e7ebfb06e719117a308746bf556b4fbe53657007bfe411aa1aaaae2169ccf62d95456253edb04c3bce350a53dfe263c2f6976430500001c000180080003000100000008000100", @ANYRES32=r5, @ANYBLOB="0800030001000000"], 0xfe8b}}, 0x4008000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x10, 0x0, 0x6, 0x0, 0x80000000, 0x40800, 0xf, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x101, 0x800}, 0x10002, 0x8001, 0x4, 0x6, 0x3, 0x4000000, 0x8, 0x0, 0xfffffff0, 0x0, 0x2}, 0x0, 0x4, r2, 0x3) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, &(0x7f00000023c0)) 5.559925195s ago: executing program 6 (id=3105): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) eventfd(0x101) unshare(0x20000680) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x40180, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_usb_connect(0x0, 0x10b, 0x0, 0x0) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24) ioctl$TIOCGWINSZ(r0, 0x5413, 0xfffffffffffffffd) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r2, &(0x7f0000000300)='1\x00', 0x2) 4.746787914s ago: executing program 5 (id=3108): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = syz_io_uring_setup(0xc6d, 0x0, &(0x7f0000000340), 0x0) io_uring_enter(r5, 0x3516, 0xa00100, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@ifindex, 0xffffffffffffffff, 0x17, 0x2}, 0x20) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) mknod(&(0x7f0000001b40)='./file0\x00', 0x400, 0xffffffff) mount$nfs(0x0, &(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), 0x0, &(0x7f0000000040)={[{'lock'}]}) 1.404737693s ago: executing program 3 (id=3111): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x2) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x9, [0x1ff, 0x80, 0x5, 0x40, 0x8, 0x529]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffff3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x7, 0x1, 0x5, 0x5, 0x3, 0x4}]}, &(0x7f0000000100)='GPL\x00', 0x7fffffff, 0x7d, &(0x7f0000000140)=""/125, 0x40f00, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x1, 0x6, 0x0, 0x200}, 0x10, 0x26303, 0xffffffffffffffff, 0x6, &(0x7f0000000200)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000240)=[{0x2, 0x1, 0x4, 0x5}, {0x1, 0x2, 0x0, 0x3}, {0x0, 0x3, 0xd, 0xe}, {0x3, 0x2, 0x4, 0x5}, {0x1, 0x3, 0xf, 0x5}, {0x0, 0x4, 0xf, 0xb}]}, 0x94) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffff3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x7, 0x1, 0x5, 0x5, 0x3, 0x4}]}, &(0x7f0000000100)='GPL\x00', 0x7fffffff, 0x7d, &(0x7f0000000140)=""/125, 0x40f00, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x1, 0x6, 0x0, 0x200}, 0x10, 0x26303, 0xffffffffffffffff, 0x6, &(0x7f0000000200)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000240)=[{0x2, 0x1, 0x4, 0x5}, {0x1, 0x2, 0x0, 0x3}, {0x0, 0x3, 0xd, 0xe}, {0x3, 0x2, 0x4, 0x5}, {0x1, 0x3, 0xf, 0x5}, {0x0, 0x4, 0xf, 0xb}]}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x7, 0x1, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=0xffffffffffffffff, 0x7, 0x1, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0}, 0x40) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000500)='\xaa\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@fallback=r4, r1, 0x0, 0x28, 0x0, @void, @void, @void, @value=r5, r3}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@fallback=r4, r1, 0x0, 0x28, 0x0, @void, @void, @void, @value=r5, r3}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20004811}, 0x4000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x58, &(0x7f00000006c0)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000780)={r6, 0x1, 0x6, @remote}, 0x10) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x3f3d6000) socket(0x21, 0xf4f171e81067e580, 0x3) (async) r7 = socket(0x21, 0xf4f171e81067e580, 0x3) r8 = dup(r2) r9 = dup(r8) sendmsg$nl_route(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)=@bridge_delvlan={0x24, 0x71, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0xfa}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000015}, 0x40800) getsockopt$WPAN_WANTLQI(r7, 0x0, 0x3, &(0x7f00000008c0), &(0x7f0000000900)=0x4) r10 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000940), 0x1, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r10, 0x8070587c, &(0x7f0000000980)) setsockopt$CAN_RAW_RECV_OWN_MSGS(r9, 0x65, 0x4, &(0x7f0000000a00)=0x1, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x48, 0x1411, 0x200, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20040084) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x48, 0x1411, 0x200, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20040084) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r11, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4008001) (async) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r11, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4008001) r12 = dup(r7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000cc0)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000cc0)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x5, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c80)={@cgroup=r13, r12, 0x35, 0x2038, 0x0, @void, @void, @value=r14, @void, r3}, 0x20) tee(r12, r0, 0x4, 0x2) bind$xdp(r12, &(0x7f0000000d40)={0x2c, 0x8, r6, 0x13, r9}, 0x10) 1.240638131s ago: executing program 5 (id=3113): r0 = open(&(0x7f0000000400)='./file1\x00', 0x160a00, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xffff) mkdirat(0xffffffffffffff9c, 0x0, 0x100) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) write$rfkill(r0, &(0x7f0000000540)={0xc, 0x6, 0x42, 0x0, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) (fail_nth: 1) 1.240145001s ago: executing program 2 (id=3114): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5c}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') truncate(&(0x7f00000005c0)='./file1\x00', 0x6e3) 1.216230512s ago: executing program 3 (id=3115): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f00005a2000/0x800000)=nil, 0x800000, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x38) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x38) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$BLKCRYPTOIMPORTKEY(0xffffffffffffffff, 0xc0401289, &(0x7f0000000140)={&(0x7f0000000080)="f37dbdaec7c2b06b64f71b8188944beeef128972b5d7ad8b6272e2322594ee14e29331bf0f84fcbd2c7c3b7c8317ffe3b0", 0x31, &(0x7f0000000240)=""/66, 0x42}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfd3fc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfd3fc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0xc, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @private=0xa010102}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20040054) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0xc, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @private=0xa010102}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20040054) 1.194843483s ago: executing program 6 (id=3116): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x4, @empty, 0x6}], 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000001000000000000000000000000ffff0000004000000000000000000000ffff"], 0x4c}}, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) signalfd4(r2, &(0x7f00000000c0)={[0x1]}, 0x8, 0x80800) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) pause() syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000000), &(0x7f0000000200)) 928.422016ms ago: executing program 2 (id=3117): close(0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0x9}, {}, {0xffe0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) 897.667498ms ago: executing program 5 (id=3118): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r0 = open(&(0x7f0000000100)='./file1\x00', 0x84242, 0x46) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) r1 = openat(0xffffffffffffff9c, &(0x7f00000021c0)='./file1\x00', 0x8442, 0x5c) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0x8}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x7, @perf_config_ext={0x407fff, 0xaea}, 0x14b3d, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407ffe, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x2700) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000080)={[{@shortname_winnt}, {@uni_xlate}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@utf8}, {@uni_xlate}, {@utf8}]}, 0x11, 0x233, &(0x7f0000000600)="$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") bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x792, &(0x7f0000020c00)="$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") add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) socket$kcm(0xa, 0x5, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x8001}) 756.135604ms ago: executing program 3 (id=3120): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82200, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0xfffffbff}}, './file0\x00'}) ioprio_get$uid(0x3, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) r4 = socket(0x2, 0x2, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) shutdown(r5, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) bind$unix(r4, &(0x7f0000000000)=@abs, 0x6e) r7 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000200)=0xffffffff, 0x4) sendmsg$kcm(r7, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') bind$inet(r3, &(0x7f0000000000)={0x2, 0x24, @empty}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) sync() 754.420354ms ago: executing program 2 (id=3121): socket$nl_generic(0x10, 0x3, 0x10) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet6(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) syz_emit_ethernet(0x4f, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="e894ce", 0x3}], 0x1}}], 0x1, 0x4000000) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000180)='lowerdir', &(0x7f0000000200)='&\x00', 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='bbr', 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x8050}, 0x40040) 711.381956ms ago: executing program 4 (id=3122): socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000680), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x1063be02}, 0xa216, 0x6, 0x11000, 0x4, 0x9488, 0x2001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4) read(r1, &(0x7f0000000440)=""/247, 0x26) tkill(r0, 0x7) 623.998841ms ago: executing program 5 (id=3123): unshare(0x26020480) syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2d, 0x80, 0x2, 0x3be}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0xfd, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_dev$loop(0x0, 0x9, 0x40000) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0xfffffffffffffffd, 0x0, 0x0, 0x5, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d87539e01177d3d458dd4992861ac00", "f4bd00000080190000000000000800", [0x0, 0x2000000000001]}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r3}, 0xc) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}, 0x20) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x80404, &(0x7f0000000500)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3c}}, {@max_batch_time={'max_batch_time', 0x3d, 0xcd5c}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") fallocate(0xffffffffffffffff, 0x0, 0x2000000, 0x1001f3) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioperm(0x8, 0x3ff, 0x80000001) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) getgroups(0x0, 0x0) getgid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0xffffffff, 0x10100, 0x0, 0xfffffffe}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 590.644062ms ago: executing program 2 (id=3124): fsopen(&(0x7f0000000100)='rpc_pipefs\x00', 0x0) socket(0x400000000010, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105842, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000001e00", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 585.447112ms ago: executing program 4 (id=3125): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a00"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x30000000}, 0x20040000) 489.680037ms ago: executing program 4 (id=3126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1400000010000100000000fcff0000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) 489.108237ms ago: executing program 4 (id=3127): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5c}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') truncate(&(0x7f00000005c0)='./file1\x00', 0x6e3) 338.283464ms ago: executing program 2 (id=3128): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f00000022c0)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81100) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) move_mount(r1, 0x0, r0, 0x0, 0x46) 311.100545ms ago: executing program 6 (id=3129): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000006c00010026bd7000fbdbdf2580000000", @ANYRES32=0x0, @ANYBLOB="00000400088004001400030064756d6d79300000000000000000000018003480140035"], 0x4c}, 0x1, 0x0, 0x0, 0x6}, 0x0) 263.059187ms ago: executing program 3 (id=3130): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x27, 0x2, 0x0, 0x0, 0x0, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a2d, 0x0, 0x7fc, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9805, 0x3, 0x7fc, 0x6, 0x0, 0x7}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000280)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)=')]@\x00', 0xfffffffffffffffc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x8}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) brk(0x200004ffc000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000500000000000000"], 0x48) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x84386, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x1, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60, 0x0, 0x1}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000f40)={r0, r1, 0x5, 0x0, @void}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r4, 0x3007, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000003ac0)={'ip6_vti0\x00', &(0x7f0000003a40)={'ip6gre0\x00', 0x0, 0x29, 0x73, 0x2, 0x6, 0x9, @private2, @remote, 0x40, 0x40, 0xa, 0x8}}) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r7 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) r8 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r8, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRES64, @ANYRES8, @ANYRESDEC, @ANYRES64], 0x2, 0x245, &(0x7f00000007c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 238.467819ms ago: executing program 6 (id=3131): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0xdfe6, 0x2}) r1 = syz_io_uring_setup(0x15e2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x80004, 0x20037a, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) msgrcv(0x0, 0x0, 0x0, 0x1, 0x1000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=@deltaction={0x28, 0x18, 0x1, 0x70bd26, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x8f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x15, 0x5e, 0xfa00, {0xffffffffffffffff, 0xef7, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x7, @loopback, 0xbff}, @ib={0x1b, 0x0, 0xbf, {"8535b62c8126bba5623b4b416408a797"}, 0x9, 0x1, 0xff}}}, 0x118) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89a2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r6, 0x0, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000380)=0x3, 0x4) sendmmsg(r8, &(0x7f0000001c00), 0x400000000000159, 0x40840) write(r7, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0xc043, &(0x7f0000000500)=ANY=[@ANYRES64=r0, @ANYRESHEX, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT, @ANYRESOCT, @ANYRES64], 0x7, 0x2d4, &(0x7f0000000180)="$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") r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x6c, r10, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_IFINDEX={0x8, 0xb, r12}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010102}]}, 0x6c}}, 0x80) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r13, 0x0, 0x8008000000010, 0x0, 0x0) io_uring_enter(r1, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 237.370049ms ago: executing program 4 (id=3132): close(0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0x9}, {}, {0xffe0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) 140.474534ms ago: executing program 5 (id=3133): bpf$ITER_CREATE(0xb, 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x9aff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x10290, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x808000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 30.917779ms ago: executing program 2 (id=3134): prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x82a32a, &(0x7f0000000340)={[{@quota}, {@bsdgroups}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_io_uring_setup(0xbdc, &(0x7f00000000c0)={0x0, 0x5edc, 0x1000, 0x1, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) connect$inet(r3, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x12, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_procfs$namespace(0x0, 0x0) setpgid(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) r4 = syz_socket_connect_nvme_tcp() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000631108000000000085100000020000e9fe68d9002300000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$inet(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="71796ec5a3a00437ed9a7fffda9ae263bce891b70449", 0x16}, {&(0x7f0000000080)="2d6c6724dbe1698d4af40f840246370c898e852bc50ea4cfedfa403c30cb6fb1301877ceff00cb55fefe9522f69aab38503c1fa38acb667e98d3793a329afb539b55381cc8f9490f1df8e6175c46c601a37d8259149414c90ff55070d69a82af8c3fb143828439a9fbd5c28dcb8313f93323f015ac5ca94111e66cd8a1d5fa85b715bfdc53f326c134564f61c93865908192912735ea275b44857e006bb11322dd6613c5e380bc9eb76e906671d42b7fa076fdc43df1ac893e165bdeae564684", 0xc0}, {&(0x7f0000000140)="60bdd44f5a1f2ad12fe169d41b32db175d4b5c62bb9ec24f4398760d68bb6757f6fdc1e4bd08ce54ea42de6d7b1a4e93ab2f695adf3c17cdccbec75b71078639bb2a00deeee8dc209c2141d9985f28b4c1881453e5cd81ca6295d1a4d8c47fd9c420431c9477a6a30737f1f0a89fe9991754a87e", 0x74}, {&(0x7f0000000240)="dd255919ec1612ed5b005cbe11dbe4326b7792bed918ea3b0766e7f841d26be50f7b8bc00422f1e4e3dad10dae24df05cb839f796d4db7a7a3f80bf4e88de8fc8df806c1bec7ffcb7b2da99613d33431861869a0d70882aec86b7a8ec9f1811c023dbb58b4b230bd9f35431ba64acb8bbc34f2ac71d72bc1d73afef39a6bef30d67676", 0x83}], 0x4}, 0x20009041) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mknod(0x0, 0x8001420, 0xffffffff) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) 27.859009ms ago: executing program 4 (id=3135): socket$nl_generic(0x10, 0x3, 0x10) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet6(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) syz_emit_ethernet(0x4f, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="e894ce", 0x3}], 0x1}}], 0x1, 0x4000000) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000180)='lowerdir', &(0x7f0000000200)='&\x00', 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='bbr', 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x8050}, 0x40040) 0s ago: executing program 5 (id=3136): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x14, r1, 0x405, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x121c80, 0x180) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000540)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0xc, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @loopback}, {[], {0x4e1d, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x100, @void}}}}}}}}, 0x0) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800900010062"], 0x3c}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r4) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="38010000", @ANYRES16=r6, @ANYBLOB="000128bd7000fcdbdf250a0000004c0001800800030001000000080003000100000008000100", @ANYRES32=r5, @ANYBLOB='XuD(', @ANYRES32=0x0, @ANYBLOB="080003000300000008000300010000000800030003000000080003000000000008000300010000004800018008000300020000001400020067656e65766531000000000000000000000002007767310000000000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="080003000200000008000100", @ANYRES32=r5, @ANYBLOB="080003000000000074000300c649f9f0621d41da628e3d081432d3ea59d6394c94da18589bed532eb0f0344f75aa4fa39efedc19e7a7266cb9cba6e1380a1d7c1e127c81f82d23313500c0bb348e7ebfb06e719117a308746bf556b4fbe53657007bfe411aa1aaaae2169ccf62d95456253edb04c3bce350a53dfe263c2f6976430500001c000180080003000100000008000100", @ANYRES32=r5, @ANYBLOB="0800030001000000"], 0xfe8b}}, 0x4008000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x10, 0x0, 0x6, 0x0, 0x80000000, 0x40800, 0xf, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x101, 0x800}, 0x10002, 0x8001, 0x4, 0x6, 0x3, 0x4000000, 0x8, 0x0, 0xfffffff0, 0x0, 0x2}, 0x0, 0x4, r2, 0x3) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, &(0x7f00000023c0)) kernel console output (not intermixed with test programs): ] xt_hashlimit: size too large, truncated to 1048576 [ 268.424555][ T28] audit: type=1400 audit(2000000021.190:1395): avc: denied { listen } for pid=10709 comm="syz.1.2528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 268.460900][T10712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2529'. [ 268.479805][T10710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2528'. [ 268.498715][T10712] vlan2: entered promiscuous mode [ 268.627633][T10725] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2534'. [ 270.463114][T10749] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2543'. [ 270.878439][T10761] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2548'. [ 271.021452][T10765] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2550'. [ 271.107262][T10763] lo speed is unknown, defaulting to 1000 [ 271.113397][T10763] lo speed is unknown, defaulting to 1000 [ 271.488421][T10774] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 271.518905][T10777] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2554'. [ 271.572486][T10775] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 272.076364][T10790] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 272.507969][T10796] loop0: detected capacity change from 0 to 2048 [ 272.600621][T10796] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.644711][T10796] ext4 filesystem being mounted at /502/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.672238][T10798] loop1: detected capacity change from 0 to 8192 [ 272.687750][T10796] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2560: bg 0: block 345: padding at end of block bitmap is not set [ 272.702618][ T28] audit: type=1400 audit(2000000025.460:1396): avc: denied { create } for pid=10794 comm="syz.0.2560" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 272.775390][T10796] EXT4-fs (loop0): Remounting filesystem read-only [ 272.788411][ T28] audit: type=1400 audit(2000000025.460:1397): avc: denied { read write } for pid=10794 comm="syz.0.2560" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 272.864841][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.895292][ T28] audit: type=1400 audit(2000000025.460:1398): avc: denied { open } for pid=10794 comm="syz.0.2560" path="/502/file0/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 272.974667][T10806] loop0: detected capacity change from 0 to 128 [ 273.037769][T10808] loop1: detected capacity change from 0 to 128 [ 273.059466][T10808] EXT4-fs: Ignoring removed nobh option [ 273.087139][T10808] EXT4-fs: Mount option(s) incompatible with ext2 [ 274.534828][T10829] netlink: 'syz.3.2572': attribute type 10 has an invalid length. [ 274.556952][T10831] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2573'. [ 274.592560][T10833] FAULT_INJECTION: forcing a failure. [ 274.592560][T10833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.666196][T10833] CPU: 0 UID: 0 PID: 10833 Comm: syz.4.2574 Tainted: G W syzkaller #0 PREEMPT(full) [ 274.666254][T10833] Tainted: [W]=WARN [ 274.666261][T10833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 274.666342][T10833] Call Trace: [ 274.666351][T10833] [ 274.666363][T10833] __dump_stack+0x1d/0x30 [ 274.666403][T10833] dump_stack_lvl+0x95/0xd0 [ 274.666434][T10833] dump_stack+0x15/0x1b [ 274.666458][T10833] should_fail_ex+0x263/0x280 [ 274.666540][T10833] should_fail+0xb/0x20 [ 274.666564][T10833] should_fail_usercopy+0x1a/0x20 [ 274.666601][T10833] _copy_to_user+0x20/0xa0 [ 274.666640][T10833] simple_read_from_buffer+0xb5/0x130 [ 274.666741][T10833] proc_fail_nth_read+0x10e/0x150 [ 274.666781][T10833] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 274.666893][T10833] vfs_read+0x1ab/0x7f0 [ 274.666967][T10833] ? __rcu_read_unlock+0x4e/0x70 [ 274.666994][T10833] ? __fget_files+0x184/0x1c0 [ 274.667098][T10833] ? mutex_lock+0x57/0x90 [ 274.667162][T10833] ksys_read+0xdc/0x1a0 [ 274.667197][T10833] __x64_sys_read+0x40/0x50 [ 274.667265][T10833] x64_sys_call+0x2886/0x3020 [ 274.667295][T10833] do_syscall_64+0x12c/0x370 [ 274.667326][T10833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.667400][T10833] RIP: 0033:0x7fd1168ccfce [ 274.667421][T10833] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 274.667441][T10833] RSP: 002b:00007fd115366fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 274.667491][T10833] RAX: ffffffffffffffda RBX: 00007fd1153676c0 RCX: 00007fd1168ccfce [ 274.667508][T10833] RDX: 000000000000000f RSI: 00007fd1153670a0 RDI: 0000000000000005 [ 274.667524][T10833] RBP: 00007fd115367090 R08: 0000000000000000 R09: 0000000000000000 [ 274.667541][T10833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.667634][T10833] R13: 00007fd116b86038 R14: 00007fd116b85fa0 R15: 00007ffceaa36158 [ 274.667672][T10833] [ 275.068248][T10839] loop4: detected capacity change from 0 to 8192 [ 275.275698][T10843] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2576'. [ 276.836895][T10846] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2579'. [ 278.653952][T10858] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 278.677265][T10858] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 278.686482][T10858] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 278.728920][T10858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10858 comm=syz.1.2583 [ 278.741669][T10858] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 278.772227][T10854] loop0: detected capacity change from 0 to 4096 [ 278.797765][ T28] audit: type=1400 audit(2000000031.570:1399): avc: denied { mounton } for pid=10853 comm="syz.0.2582" path="/510/file0" dev="tmpfs" ino=2671 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 278.821414][T10854] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.874153][T10854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.153513][T10869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2586'. [ 279.168091][T10850] loop4: detected capacity change from 0 to 512 [ 279.191008][T10850] EXT4-fs (loop4): 1 orphan inode deleted [ 279.211811][T10850] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.506728][T10885] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2592'. [ 280.831867][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.937554][T10895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2596'. [ 280.977660][T10895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2596'. [ 280.986744][T10895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2596'. [ 280.997297][T10899] loop0: detected capacity change from 0 to 8192 [ 281.351630][T10914] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 281.451794][T10915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2602'. [ 281.468011][T10917] gtp1: entered promiscuous mode [ 281.473162][T10917] gtp1: entered allmulticast mode [ 281.640700][T10929] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2608'. [ 281.641119][T10925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2607'. [ 281.707503][T10925] vlan2: entered promiscuous mode [ 281.727850][T10925] bridge0: entered promiscuous mode [ 282.195639][T10952] loop0: detected capacity change from 0 to 256 [ 282.274629][T10952] FAT-fs (loop0): Directory bread(block 64) failed [ 282.281400][T10952] FAT-fs (loop0): Directory bread(block 65) failed [ 282.288262][T10952] FAT-fs (loop0): Directory bread(block 66) failed [ 282.295018][T10952] FAT-fs (loop0): Directory bread(block 67) failed [ 282.302079][T10952] FAT-fs (loop0): Directory bread(block 68) failed [ 282.308655][T10952] FAT-fs (loop0): Directory bread(block 69) failed [ 282.315523][T10952] FAT-fs (loop0): Directory bread(block 70) failed [ 282.322164][T10952] FAT-fs (loop0): Directory bread(block 71) failed [ 282.329024][T10952] FAT-fs (loop0): Directory bread(block 72) failed [ 282.335692][T10952] FAT-fs (loop0): Directory bread(block 73) failed [ 282.884125][T10960] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2617'. [ 282.950225][T10960] gtp0: entered promiscuous mode [ 282.975502][T10960] gtp0: entered allmulticast mode [ 283.170212][T10973] geneve1: entered promiscuous mode [ 283.859147][T10975] netlink: 'syz.1.2620': attribute type 4 has an invalid length. [ 284.055579][T10980] futex_wake_op: syz.0.2622 tries to shift op by -1; fix this program [ 284.089889][ T28] audit: type=1326 audit(2000000036.860:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.4.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11690c799 code=0x7ffc0000 [ 284.126568][ T28] audit: type=1326 audit(2000000036.880:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.4.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11690c799 code=0x7ffc0000 [ 284.150242][ T28] audit: type=1326 audit(2000000036.880:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.4.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11690c799 code=0x7ffc0000 [ 284.177633][ T28] audit: type=1326 audit(2000000036.890:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.4.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fd11690c799 code=0x7ffc0000 [ 284.219809][ T28] audit: type=1326 audit(2000000000.000:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.4.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11690c799 code=0x7ffc0000 [ 284.244123][ T28] audit: type=1326 audit(2000000000.000:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.4.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11690c799 code=0x7ffc0000 [ 284.275947][ T28] audit: type=1326 audit(2000000000.000:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.4.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11690c799 code=0x7ffc0000 [ 284.316823][ T28] audit: type=1326 audit(2000000000.000:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.4.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd11690c799 code=0x7ffc0000 [ 284.380733][T10992] loop4: detected capacity change from 0 to 2048 [ 284.459501][T10992] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 284.486506][ T28] audit: type=1326 audit(2000000000.000:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.4.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd11690c799 code=0x7ffc0000 [ 284.632073][T11009] loop4: detected capacity change from 0 to 256 [ 284.677006][T11012] loop0: detected capacity change from 0 to 764 [ 284.683666][T11012] iso9660: Unknown parameter '‡i_Ò0x0000000000000000' [ 284.746911][T11015] netlink: 'syz.4.2635': attribute type 21 has an invalid length. [ 284.778832][T11015] netlink: 14532 bytes leftover after parsing attributes in process `syz.4.2635'. [ 284.833987][T11016] loop4: detected capacity change from 0 to 4096 [ 284.868652][T11016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.948821][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.129399][T11025] loop4: detected capacity change from 0 to 512 [ 285.155421][T11025] EXT4-fs: Ignoring removed nobh option [ 285.189864][T11025] EXT4-fs (loop4): orphan cleanup on readonly fs [ 285.207233][T11025] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.2637: EA inode hash validation failed [ 285.236567][T11025] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 285.249968][T11025] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.2637: corrupted inode contents [ 285.262144][T11025] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 285.266429][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 285.282157][ C1] EXT4-fs (loop4): initial error at time 2000000257: ext4_do_update_inode:5569: inode 15 [ 285.292055][ C1] EXT4-fs (loop4): last error at time 2000000257: ext4_do_update_inode:5569: inode 15 [ 285.306444][T11025] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #15: comm syz.4.2637: mark_inode_dirty error [ 285.336505][T11025] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 285.346677][T11025] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.2637: corrupted inode contents [ 285.396484][T11025] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 285.396940][T11025] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.2637: mark_inode_dirty error [ 285.479552][T11025] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 285.479748][T11025] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3002: inode #15: comm syz.4.2637: mark inode dirty (error -117) [ 285.516574][T11025] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 285.516821][T11025] EXT4-fs warning (device loop4): ext4_evict_inode:275: xattr delete (err -117) [ 285.534120][ T28] audit: type=1400 audit(2000000257.404:1409): avc: denied { append } for pid=11030 comm="syz.1.2639" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 285.606577][T11025] EXT4-fs (loop4): 1 orphan inode deleted [ 285.612810][T11025] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 285.659531][T11035] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2640'. [ 285.909481][T11041] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2642'. [ 286.326014][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.397590][T11053] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2646'. [ 286.519257][T11057] loop4: detected capacity change from 0 to 512 [ 286.534236][T11057] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 286.555774][T11057] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2648: invalid indirect mapped block 4294967295 (level 1) [ 286.580933][T11057] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 286.581179][T11057] EXT4-fs (loop4): Remounting filesystem read-only [ 286.590390][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 286.590415][ C1] EXT4-fs (loop4): initial error at time 2000000258: ext4_free_branches:1023: inode 11 [ 286.590457][ C1] EXT4-fs (loop4): last error at time 2000000258: ext4_free_branches:1023: inode 11 [ 286.656848][T11057] EXT4-fs (loop4): 2 truncates cleaned up [ 286.666348][T11057] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.292741][T11071] xt_TPROXY: Can be used only with -p tcp or -p udp [ 287.334931][T11072] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2653'. [ 287.358321][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.796114][T11085] loop1: detected capacity change from 0 to 512 [ 287.806222][T11085] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 287.828415][T11079] loop4: detected capacity change from 0 to 8192 [ 287.832583][T11085] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2658: bg 0: block 104: invalid block bitmap [ 287.848221][T11085] loop1: lost filesystem error report for type 5 error -117 [ 287.848549][T11085] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 287.864685][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 287.864706][ C1] EXT4-fs (loop1): initial error at time 2000000259: ext4_validate_block_bitmap:432 [ 287.864741][ C1] EXT4-fs (loop1): last error at time 2000000259: ext4_validate_block_bitmap:432 [ 287.890096][T11085] loop1: lost filesystem error report for type 5 error -117 [ 287.890352][T11085] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2658: invalid indirect mapped block 1 (level 1) [ 287.911186][T11085] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 287.916352][T11085] EXT4-fs (loop1): 1 truncate cleaned up [ 288.030366][T11085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.084360][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.205745][T11104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2666'. [ 288.308414][T11108] loop1: detected capacity change from 0 to 512 [ 288.364546][T11108] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 288.411150][T11108] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.432432][T11114] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2668'. [ 288.456564][T11108] ext4 filesystem being mounted at /522/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 288.659320][T11120] loop4: detected capacity change from 0 to 512 [ 288.730005][T11120] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 288.787878][T11120] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 288.837214][T11120] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2665: bg 0: block 248: padding at end of block bitmap is not set [ 288.856502][T11120] loop4: lost filesystem error report for type 5 error -117 [ 288.857226][T11120] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.2665: Failed to acquire dquot type 1 [ 288.875853][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 288.875896][ C0] EXT4-fs (loop4): last error at time 2000000260: ext4_validate_block_bitmap:441 [ 288.976474][T11120] loop4: lost filesystem error report for type 5 error -117 [ 288.978581][T11120] EXT4-fs (loop4): 1 truncate cleaned up [ 289.000341][T11120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 289.099711][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.124696][T11120] syz.4.2665 (11120) used greatest stack depth: 8608 bytes left [ 289.226382][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 289.289466][T11146] can0: slcan on ttyS3. [ 289.295097][ T28] kauditd_printk_skb: 118 callbacks suppressed [ 289.295182][ T28] audit: type=1400 audit(2000000261.164:1526): avc: denied { read } for pid=3040 comm="dhcpcd" name="n25" dev="tmpfs" ino=12045 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 289.356501][ T28] audit: type=1400 audit(2000000261.164:1527): avc: denied { open } for pid=3040 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=12045 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 289.386654][T11146] can0 (unregistered): slcan off ttyS3. [ 289.456435][ T28] audit: type=1400 audit(2000000261.164:1528): avc: denied { getattr } for pid=3040 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=12045 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 289.490133][ T28] audit: type=1400 audit(2000000261.274:1529): avc: denied { ioctl } for pid=11150 comm="syz.4.2677" path="socket:[28937]" dev="sockfs" ino=28937 ioctlcmd=0x894a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 289.522519][T11156] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2680'. [ 289.558973][T11171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2682'. [ 289.568832][T11156] x_tables: duplicate underflow at hook 2 [ 289.631037][ T28] audit: type=1400 audit(2000000261.504:1530): avc: denied { create } for pid=11159 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 289.670955][ T28] audit: type=1400 audit(2000000261.504:1531): avc: denied { write } for pid=11159 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=12066 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 289.698404][ T28] audit: type=1400 audit(2000000261.504:1532): avc: denied { append } for pid=11159 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=12066 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 289.780395][ T28] audit: type=1400 audit(2000000261.604:1533): avc: denied { unlink } for pid=11183 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=12066 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 289.867924][T11184] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2682'. [ 290.041304][ T28] audit: type=1400 audit(2000000261.914:1534): avc: denied { create } for pid=11204 comm="syz.1.2688" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 290.113428][ T28] audit: type=1400 audit(2000000261.914:1535): avc: denied { map } for pid=11204 comm="syz.1.2688" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28992 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 290.197390][T11207] loop4: detected capacity change from 0 to 512 [ 290.234781][T11207] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 290.289726][T11207] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 290.362139][T11223] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2688'. [ 290.363144][T11207] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2687: bg 0: block 248: padding at end of block bitmap is not set [ 290.503689][T11207] loop4: lost filesystem error report for type 5 error -117 [ 290.503992][T11207] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.2687: Failed to acquire dquot type 1 [ 290.511414][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 290.511441][ C0] EXT4-fs (loop4): last error at time 2000000262: ext4_validate_block_bitmap:441 [ 290.606652][T11207] loop4: lost filesystem error report for type 5 error -117 [ 290.627314][T11207] EXT4-fs (loop4): 1 truncate cleaned up [ 290.655573][T11207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 290.814916][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 291.048744][T11236] loop4: detected capacity change from 0 to 8192 [ 291.722193][T11255] lo speed is unknown, defaulting to 1000 [ 291.736785][T11255] lo speed is unknown, defaulting to 1000 [ 291.877650][T11255] chnl_net:caif_netlink_parms(): no params data found [ 291.936040][T11255] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.943233][T11255] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.950697][T11255] bridge_slave_0: entered allmulticast mode [ 291.957497][T11255] bridge_slave_0: entered promiscuous mode [ 291.964521][T11255] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.971966][T11255] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.979389][T11255] bridge_slave_1: entered allmulticast mode [ 291.986195][T11255] bridge_slave_1: entered promiscuous mode [ 292.007180][T11255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.018218][T11255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.040162][T11255] team0: Port device team_slave_0 added [ 292.047302][T11255] team0: Port device team_slave_1 added [ 292.067472][T11255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.074607][T11255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.101616][T11255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.113763][T11255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.123927][T11255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.150057][T11255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.180763][T11255] hsr_slave_0: entered promiscuous mode [ 292.211796][T11255] hsr_slave_1: entered promiscuous mode [ 292.248670][T11255] debugfs: 'hsr0' already exists in 'hsr' [ 292.255159][T11255] Cannot create hsr debugfs directory [ 292.409124][T11255] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 292.428833][T11255] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 292.448952][T11255] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 292.465972][T11255] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 292.515334][T11292] __nla_validate_parse: 1 callbacks suppressed [ 292.515353][T11292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2709'. [ 292.553414][T11255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.577006][T11255] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.606001][ T7195] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.613161][ T7195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.638092][ T7195] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.645235][ T7195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.775312][T11300] loop0: detected capacity change from 0 to 8192 [ 292.811219][T11255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.816459][T11303] netlink: 'syz.2.2713': attribute type 2 has an invalid length. [ 292.864104][T11303] netlink: 'syz.2.2713': attribute type 1 has an invalid length. [ 292.864388][T11309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2713'. [ 292.865410][T11309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2713'. [ 292.908444][T11309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2713'. [ 292.918730][T11309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2713'. [ 292.931571][T11303] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2713'. [ 293.188164][T11255] veth0_vlan: entered promiscuous mode [ 293.218811][T11255] veth1_vlan: entered promiscuous mode [ 293.256010][T11255] veth0_macvtap: entered promiscuous mode [ 293.264264][T11255] veth1_macvtap: entered promiscuous mode [ 293.288448][T11255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.315194][T11255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.331151][ T30] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.347852][T11331] loop0: detected capacity change from 0 to 8192 [ 293.355894][ T30] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.380683][ T7199] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.402424][ T7199] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.877367][T11342] siw: device registration error -23 [ 294.382785][T11347] loop5: detected capacity change from 0 to 512 [ 294.510760][T11347] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 294.623286][T11347] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 294.648868][T11362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=11362 comm=syz.2.2725 [ 294.693447][T11347] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2704: bg 0: block 248: padding at end of block bitmap is not set [ 294.711031][T11362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2725'. [ 294.758129][T11347] loop5: lost filesystem error report for type 5 error -117 [ 294.758498][T11347] __quota_error: 18 callbacks suppressed [ 294.758516][T11347] Quota error (device loop5): write_blk: dquota write failed [ 294.771573][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 294.771598][ C0] EXT4-fs (loop5): last error at time 2000000522: ext4_validate_block_bitmap:441 [ 294.825392][T11364] loop0: detected capacity change from 0 to 8192 [ 294.854245][T11347] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 294.896462][T11347] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.2704: Failed to acquire dquot type 1 [ 294.936440][T11347] loop5: lost filesystem error report for type 5 error -117 [ 294.937743][T11347] EXT4-fs (loop5): 1 truncate cleaned up [ 294.975268][T11347] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 295.092351][ T28] audit: type=1400 audit(2000000522.961:1552): avc: denied { shutdown } for pid=11370 comm="syz.0.2729" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 295.113685][T11371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2729'. [ 295.207857][T11255] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 295.549782][T11375] loop0: detected capacity change from 0 to 512 [ 295.585306][T11375] EXT4-fs: Ignoring removed nobh option [ 295.634729][T11375] EXT4-fs (loop0): orphan cleanup on readonly fs [ 295.675387][T11375] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.2730: EA inode hash validation failed [ 295.691126][T11375] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.2730: corrupted inode contents [ 295.704199][T11375] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 295.705722][T11375] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #15: comm syz.0.2730: mark_inode_dirty error [ 295.715906][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 295.716101][ C1] EXT4-fs (loop0): initial error at time 2000000523: ext4_do_update_inode:5569: inode 15 [ 295.716373][ C1] EXT4-fs (loop0): last error at time 2000000523: ext4_do_update_inode:5569: inode 15 [ 295.759425][T11375] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 295.762051][T11375] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.2730: corrupted inode contents [ 295.785317][T11375] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 295.785932][T11375] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.2730: mark_inode_dirty error [ 295.809543][T11375] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 295.810923][T11375] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3002: inode #15: comm syz.0.2730: mark inode dirty (error -117) [ 295.891212][T11375] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 295.893176][T11375] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117) [ 295.925720][T11375] EXT4-fs (loop0): 1 orphan inode deleted [ 295.958918][T11375] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 296.108473][T11390] netlink: 'syz.2.2734': attribute type 10 has an invalid length. [ 296.119862][T11390] team0: Port device xfrm0 added [ 296.165252][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2735'. [ 296.216808][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.761489][T11407] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2740'. [ 296.829806][T11409] loop4: detected capacity change from 0 to 8192 [ 297.219592][ T28] audit: type=1400 audit(2000000525.091:1553): avc: denied { mounton } for pid=11420 comm="syz.5.2746" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 297.262560][T11421] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 297.275522][T11421] 0ªX¹¦Dö»: entered allmulticast mode [ 297.456461][T11431] loop4: detected capacity change from 0 to 512 [ 297.474256][T11431] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 297.564248][T11431] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 297.630348][T11431] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2742: bg 0: block 248: padding at end of block bitmap is not set [ 297.716852][T11431] loop4: lost filesystem error report for type 5 error -117 [ 297.717123][T11431] Quota error (device loop4): write_blk: dquota write failed [ 297.731910][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 297.731930][ C0] EXT4-fs (loop4): last error at time 2000000525: ext4_validate_block_bitmap:441 [ 297.796689][T11431] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 297.810613][T11460] __nla_validate_parse: 2 callbacks suppressed [ 297.810685][T11460] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2758'. [ 297.846594][T11431] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.2742: Failed to acquire dquot type 1 [ 297.876612][T11431] loop4: lost filesystem error report for type 5 error -117 [ 297.877523][T11431] EXT4-fs (loop4): 1 truncate cleaned up [ 297.906953][T11431] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 298.001940][ T28] audit: type=1400 audit(2000000525.871:1554): avc: denied { listen } for pid=11469 comm="syz.2.2761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 298.090731][T11473] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2763'. [ 298.098331][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 298.100125][T11473] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2763'. [ 298.132439][T11473] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2763'. [ 298.159005][T11473] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2763'. [ 298.182604][T11477] loop0: detected capacity change from 0 to 512 [ 298.190757][T11477] vfat: Unknown parameter 'ÿÿ' [ 298.196342][ T28] audit: type=1400 audit(2000000526.051:1555): avc: denied { read } for pid=11476 comm="syz.0.2764" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 298.286554][ T28] audit: type=1400 audit(2000000526.051:1556): avc: denied { append } for pid=11476 comm="syz.0.2764" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 298.290431][T11473] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2763'. [ 298.369995][T11473] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2763'. [ 298.407267][T11489] loop0: detected capacity change from 0 to 512 [ 298.435496][T11489] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.449897][T11489] ext4 filesystem being mounted at /540/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 299.094237][T11503] lo speed is unknown, defaulting to 1000 [ 299.168119][T11503] lo speed is unknown, defaulting to 1000 [ 299.189812][T11511] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2771'. [ 299.417300][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.653780][T11503] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2767'. [ 299.763169][T11524] loop0: detected capacity change from 0 to 256 [ 299.956965][T11524] FAT-fs (loop0): Directory bread(block 64) failed [ 299.963696][T11524] FAT-fs (loop0): Directory bread(block 65) failed [ 299.970458][T11524] FAT-fs (loop0): Directory bread(block 66) failed [ 299.977051][T11524] FAT-fs (loop0): Directory bread(block 67) failed [ 299.983742][T11524] FAT-fs (loop0): Directory bread(block 68) failed [ 299.990471][T11524] FAT-fs (loop0): Directory bread(block 69) failed [ 299.997153][T11524] FAT-fs (loop0): Directory bread(block 70) failed [ 300.003757][T11524] FAT-fs (loop0): Directory bread(block 71) failed [ 300.010487][T11524] FAT-fs (loop0): Directory bread(block 72) failed [ 300.017073][T11524] FAT-fs (loop0): Directory bread(block 73) failed [ 300.271772][T11527] veth0: entered promiscuous mode [ 300.286314][T11516] loop5: detected capacity change from 0 to 512 [ 300.662158][T11516] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 300.836540][ T28] audit: type=1326 audit(2000000528.561:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11531 comm="syz.2.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45bfdfc799 code=0x7ffc0000 [ 301.444551][ T28] audit: type=1326 audit(2000000528.561:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11531 comm="syz.2.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45bfdfc799 code=0x7ffc0000 [ 301.556280][T11516] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 301.612224][ T28] audit: type=1326 audit(2000000528.561:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11531 comm="syz.2.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45bfdfc799 code=0x7ffc0000 [ 301.862458][T11542] loop0: detected capacity change from 0 to 256 [ 301.881805][T11516] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2772: bg 0: block 248: padding at end of block bitmap is not set [ 301.896589][ T28] audit: type=1326 audit(2000000528.561:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11531 comm="syz.2.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45bfdfc799 code=0x7ffc0000 [ 301.951529][T11542] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 302.140425][ T28] audit: type=1326 audit(2000000528.561:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11531 comm="syz.2.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f45bfdfc799 code=0x7ffc0000 [ 302.232521][T11516] loop5: lost filesystem error report for type 5 error -117 [ 302.233213][T11516] Quota error (device loop5): write_blk: dquota write failed [ 302.240885][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 302.240902][ C1] EXT4-fs (loop5): last error at time 2000000530: ext4_validate_block_bitmap:441 [ 302.348642][T11546] 9pnet_virtio: no channels available for device 127.0.0.1 [ 302.407802][ T28] audit: type=1326 audit(2000000528.561:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11531 comm="syz.2.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45bfdfc799 code=0x7ffc0000 [ 302.461510][T11547] audit: audit_backlog=65 > audit_backlog_limit=64 [ 302.511631][T11547] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 302.574156][T11547] audit: backlog limit exceeded [ 303.060244][T11531] delete_channel: no stack [ 303.098525][T11516] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.2772: Failed to acquire dquot type 1 [ 303.117917][T11553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2782'. [ 303.157653][T11516] loop5: lost filesystem error report for type 5 error -117 [ 303.158261][T11516] EXT4-fs (loop5): 1 truncate cleaned up [ 303.231864][T11516] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 303.253494][T11555] loop4: detected capacity change from 0 to 512 [ 303.273994][T11557] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 303.377447][T11555] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 303.413044][T11516] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 303.427318][T11561] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2786'. [ 303.440343][T11526] veth0: left promiscuous mode [ 303.468734][T11555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.565045][T11567] loop0: detected capacity change from 0 to 512 [ 303.571737][T11555] ext4 filesystem being mounted at /576/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 303.606905][T11567] EXT4-fs: Ignoring removed nobh option [ 303.645884][T11567] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 303.727901][T11567] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 303.847367][T11567] EXT4-fs (loop0): 1 truncate cleaned up [ 303.853525][T11567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.093643][T11576] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2790'. [ 305.045314][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.058503][T11592] loop4: detected capacity change from 0 to 512 [ 306.092967][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.122408][T11592] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 306.182703][T11592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.220703][T11592] ext4 filesystem being mounted at /577/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 306.239413][T11601] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2797'. [ 306.285389][T11601] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2797'. [ 306.300182][T11601] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2797'. [ 306.309399][T11601] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2797'. [ 306.502840][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.602536][ T28] kauditd_printk_skb: 247 callbacks suppressed [ 306.602553][ T28] audit: type=1400 audit(2000000003.760:1809): avc: denied { cpu } for pid=11614 comm="syz.3.2803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 306.808342][T11623] xt_CT: You must specify a L4 protocol and not use inversions on it [ 306.916196][T11624] wireguard0: entered promiscuous mode [ 306.969589][T11624] wireguard0: entered allmulticast mode [ 307.006603][ T28] audit: type=1326 audit(2000000004.160:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11619 comm="syz.4.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11690c799 code=0x7ffc0000 [ 307.030281][ T28] audit: type=1326 audit(2000000004.190:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11619 comm="syz.4.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fd11690c799 code=0x7ffc0000 [ 307.054666][ T28] audit: type=1326 audit(2000000004.190:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11619 comm="syz.4.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11690c799 code=0x7ffc0000 [ 307.079309][ T28] audit: type=1326 audit(2000000004.190:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11619 comm="syz.4.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11690c799 code=0x7ffc0000 [ 307.151231][ T28] audit: type=1326 audit(2000000004.210:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11619 comm="syz.4.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd11690c799 code=0x7ffc0000 [ 307.212148][T11623] xt_hashlimit: size too large, truncated to 1048576 [ 307.255026][ T28] audit: type=1326 audit(2000000004.210:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11619 comm="syz.4.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11690c799 code=0x7ffc0000 [ 307.298062][T11637] loop4: detected capacity change from 0 to 164 [ 307.316290][ T28] audit: type=1326 audit(2000000004.210:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11619 comm="syz.4.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11690c799 code=0x7ffc0000 [ 307.381743][T11637] iso9660: Unknown parameter 'overriderockpB}2©‰erm' [ 307.398052][ T28] audit: type=1326 audit(2000000004.220:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11619 comm="syz.4.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd11690c799 code=0x7ffc0000 [ 307.478795][ T28] audit: type=1326 audit(2000000004.250:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11619 comm="syz.4.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11690c799 code=0x7ffc0000 [ 307.576933][T11644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2812'. [ 307.669523][T11654] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2815'. [ 307.803235][T11660] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2808'. [ 307.911210][T11636] loop4: detected capacity change from 0 to 8192 [ 308.023774][T11636] loop4: p1 p3 p4[EZD] [ 308.071878][T11636] loop4: p1 start 262144 is beyond EOD, truncated [ 308.120485][T11636] loop4: p3 start 331781 is beyond EOD, truncated [ 308.226430][T11636] loop4: p4 size 197376 extends beyond EOD, truncated [ 308.844182][T11684] syzkaller0: entered promiscuous mode [ 308.872139][T11684] syzkaller0: entered allmulticast mode [ 309.406914][T11699] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2827'. [ 309.501466][T11699] hub 8-0:1.0: USB hub found [ 309.506276][T11699] hub 8-0:1.0: 8 ports detected [ 309.700449][T11716] loop4: detected capacity change from 0 to 512 [ 309.709377][T11716] EXT4-fs: Ignoring removed nobh option [ 309.719137][T11716] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 309.741856][T11716] EXT4-fs (loop4): 1 truncate cleaned up [ 309.748246][T11716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.918890][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.006875][T11728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.040742][T11728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.179986][T11744] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2839'. [ 310.190490][T11744] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2839'. [ 310.242084][T11744] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2839'. [ 310.258248][T11744] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2839'. [ 310.318104][T11744] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2839'. [ 310.331215][T11726] loop4: detected capacity change from 0 to 512 [ 310.347644][T11744] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2839'. [ 310.350446][T11726] EXT4-fs: Ignoring removed nobh option [ 310.498673][T11726] EXT4-fs (loop4): 1 orphan inode deleted [ 310.505342][T11726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.629967][T11757] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2842'. [ 311.739524][T11771] loop0: detected capacity change from 0 to 256 [ 313.090591][T11773] loop5: detected capacity change from 0 to 512 [ 313.097754][T11773] EXT4-fs: Ignoring removed nobh option [ 313.119804][T11773] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 313.907568][T11771] FAT-fs (loop0): Directory bread(block 64) failed [ 313.914258][T11771] FAT-fs (loop0): Directory bread(block 65) failed [ 313.920882][T11771] FAT-fs (loop0): Directory bread(block 66) failed [ 313.927522][T11771] FAT-fs (loop0): Directory bread(block 67) failed [ 313.934123][T11771] FAT-fs (loop0): Directory bread(block 68) failed [ 313.940821][T11771] FAT-fs (loop0): Directory bread(block 69) failed [ 313.947415][T11771] FAT-fs (loop0): Directory bread(block 70) failed [ 313.953995][T11771] FAT-fs (loop0): Directory bread(block 71) failed [ 313.960686][T11771] FAT-fs (loop0): Directory bread(block 72) failed [ 313.967296][T11771] FAT-fs (loop0): Directory bread(block 73) failed [ 314.026539][T11773] EXT4-fs (loop5): 1 truncate cleaned up [ 314.095895][T11773] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.243843][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.330467][T11788] netlink: 'syz.4.2848': attribute type 10 has an invalid length. [ 314.342686][T11788] team0: Port device dummy0 added [ 314.384043][T11255] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.452784][T11802] loop4: detected capacity change from 0 to 512 [ 314.473109][T11803] gtp0: entered promiscuous mode [ 314.479371][T11803] gtp0: entered allmulticast mode [ 314.487067][T11802] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 314.508320][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 314.508337][ T28] audit: type=1400 audit(2000000011.670:1834): avc: denied { getopt } for pid=11804 comm="syz.3.2856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 314.538768][T11802] EXT4-fs (loop4): orphan cleanup on readonly fs [ 314.587394][T11802] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #3: comm syz.4.2855: corrupted inode contents [ 314.642247][T11802] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 314.642669][T11802] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #3: comm syz.4.2855: mark_inode_dirty error [ 314.651819][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 314.651846][ C1] EXT4-fs (loop4): initial error at time 2000000011: ext4_do_update_inode:5569: inode 3 [ 314.651902][ C1] EXT4-fs (loop4): last error at time 2000000011: ext4_do_update_inode:5569: inode 3 [ 314.691496][T11802] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 314.697587][T11802] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #3: comm syz.4.2855: corrupted inode contents [ 314.719116][T11802] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 314.719312][T11802] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #3: comm syz.4.2855: mark_inode_dirty error [ 314.739968][T11802] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 314.741125][T11802] Quota error (device loop4): write_blk: dquota write failed [ 314.758124][T11802] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 314.768448][T11802] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.2855: Failed to acquire dquot type 0 [ 314.779913][T11802] loop4: lost filesystem error report for type 5 error -117 [ 314.780515][T11802] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.2855: corrupted inode contents [ 314.805523][T11812] loop0: detected capacity change from 0 to 512 [ 314.809499][T11813] loop5: detected capacity change from 0 to 512 [ 314.817074][T11812] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 314.828215][T11802] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 314.830506][T11802] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #16: comm syz.4.2855: mark_inode_dirty error [ 314.831094][T11812] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2858: bg 0: block 104: invalid block bitmap [ 314.853921][T11802] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 314.864091][T11802] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.2855: corrupted inode contents [ 314.885647][T11802] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 314.885870][T11802] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.2855: mark_inode_dirty error [ 314.903720][T11813] EXT4-fs: dax option not supported [ 314.906443][T11802] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 314.921493][T11802] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.2855: corrupted inode contents [ 314.943248][T11802] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 314.943413][T11802] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 314.961254][T11802] loop4: lost filesystem error report for type 5 error -117 [ 314.961425][T11802] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.2855: corrupted inode contents [ 314.968440][T11812] loop0: lost filesystem error report for type 5 error -117 [ 314.968857][T11802] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 314.988457][T11802] EXT4-fs error (device loop4): ext4_truncate:4587: inode #16: comm syz.4.2855: mark_inode_dirty error [ 315.009059][T11802] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 315.018461][T11802] loop4: lost filesystem error report for type 5 error -117 [ 315.019109][T11802] EXT4-fs (loop4): 1 truncate cleaned up [ 315.033763][T11802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 315.055758][T11812] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 315.064574][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 315.064597][ C0] EXT4-fs (loop0): initial error at time 2000000012: ext4_validate_block_bitmap:432 [ 315.064621][ C0] EXT4-fs (loop0): last error at time 2000000012: ext4_validate_block_bitmap:432 [ 315.091672][T11812] loop0: lost filesystem error report for type 5 error -117 [ 315.091955][T11812] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2858: invalid indirect mapped block 1 (level 1) [ 315.126609][T11812] EXT4-fs (loop0): 1 truncate cleaned up [ 315.134523][T11812] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.187440][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.221700][T11825] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2864'. [ 315.344384][T11830] loop5: detected capacity change from 0 to 512 [ 315.362059][ T28] audit: type=1400 audit(2000000012.510:1835): avc: denied { setopt } for pid=11831 comm="syz.2.2860" lport=51112 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 315.369977][T11830] EXT4-fs: Ignoring removed nobh option [ 315.413187][T11830] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 315.427695][T11830] EXT4-fs (loop5): 1 truncate cleaned up [ 315.450073][T11830] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.471400][T11837] gretap0: entered promiscuous mode [ 315.486336][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.505015][T11837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.522358][T11841] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2868'. [ 315.539611][T11837] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 315.577737][T11255] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.652761][T11838] loop4: detected capacity change from 0 to 512 [ 315.700595][T11838] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 315.785945][T11838] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 315.809934][T11857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2873'. [ 315.820911][T11838] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2863: bg 0: block 248: padding at end of block bitmap is not set [ 315.863039][T11851] batadv_slave_0: Caught tx_queue_len zero misconfig [ 315.872348][T11851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2873'. [ 315.883730][T11851] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2873'. [ 315.932667][T11838] loop4: lost filesystem error report for type 5 error -117 [ 315.933117][T11838] Quota error (device loop4): write_blk: dquota write failed [ 315.940500][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 315.940539][ C0] EXT4-fs (loop4): last error at time 2000000013: ext4_validate_block_bitmap:441 [ 316.049499][T11838] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 316.099800][T11838] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.2863: Failed to acquire dquot type 1 [ 316.114106][T11838] loop4: lost filesystem error report for type 5 error -117 [ 316.114623][T11838] EXT4-fs (loop4): 1 truncate cleaned up [ 316.178014][T11838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 316.205319][T11867] loop5: detected capacity change from 0 to 512 [ 316.298720][T11867] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 316.417879][T11876] loop0: detected capacity change from 0 to 2048 [ 316.425308][T11867] EXT4-fs (loop5): 1 truncate cleaned up [ 316.439083][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 316.452468][T11867] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.478073][T11876] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 316.567423][T11861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5131 sclass=netlink_route_socket pid=11861 comm=syz.5.2874 [ 316.618052][T11255] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.779636][T11896] netlink: 'syz.5.2883': attribute type 4 has an invalid length. [ 316.787670][T11896] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2883'. [ 316.963333][T11896] loop5: detected capacity change from 0 to 8192 [ 317.048470][T11896] loop5: p1 < > p2 p4 < p5 > [ 317.053395][T11896] loop5: partition table partially beyond EOD, truncated [ 317.060971][T11896] loop5: p1 start 134217728 is beyond EOD, truncated [ 317.067895][T11896] loop5: p2 size 591360 extends beyond EOD, truncated [ 317.092451][T11896] loop5: p5 size 591360 extends beyond EOD, truncated [ 317.126851][ T28] audit: type=1400 audit(2000000014.240:1836): avc: denied { map } for pid=11891 comm="syz.5.2883" path="socket:[31323]" dev="sockfs" ino=31323 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 317.210764][ T7288] udevd[7288]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 317.225763][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 317.240859][ T5259] udevd[5259]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 317.266895][T11901] loop0: detected capacity change from 0 to 512 [ 317.314551][T11901] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 317.384556][T11901] EXT4-fs (loop0): 1 truncate cleaned up [ 317.415164][T11901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.447073][ T28] audit: type=1400 audit(2000000014.600:1837): avc: denied { getopt } for pid=11904 comm="syz.5.2889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 317.505389][T11901] EXT4-fs (loop0): Online resizing not supported with sparse_super2 [ 317.606940][ T28] audit: type=1326 audit(2000000014.770:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11900 comm="syz.0.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69e64c799 code=0x7ffc0000 [ 317.690268][ T28] audit: type=1326 audit(2000000014.770:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11900 comm="syz.0.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69e64c799 code=0x7ffc0000 [ 318.055907][T11914] 8021q: adding VLAN 0 to HW filter on device bond9 [ 318.066862][T11914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2891'. [ 318.076114][T11914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2891'. [ 318.085386][T11914] bond0: left allmulticast mode [ 318.092724][T11914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.118657][T11914] bond9: (slave bond0): Enslaving as an active interface with a down link [ 318.153631][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2891'. [ 318.208235][T11914] bond10: option lacp_rate: mode dependency failed, not supported in mode balance-xor(2) [ 318.232905][T11890] syz.2.2885 (11890) used greatest stack depth: 8448 bytes left [ 318.265365][T11914] bond10 (unregistering): Released all slaves [ 318.309194][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.335279][T11923] loop4: detected capacity change from 0 to 512 [ 318.394335][T11929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2894'. [ 318.470495][T11923] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 318.489645][T11929] loop0: detected capacity change from 0 to 512 [ 318.506896][T11929] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 318.570940][T11929] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 318.582058][T11929] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.2894: Corrupt directory, running e2fsck is recommended [ 318.613745][T11929] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 318.622292][T11929] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.2894: corrupted in-inode xattr: invalid ea_ino [ 318.642093][T11929] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2894: couldn't read orphan inode 15 (err -117) [ 318.654012][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 318.654040][ C1] EXT4-fs (loop0): initial error at time 2000000015: ext4_iget_extra_inode:5025: inode 15 [ 318.654078][ C1] EXT4-fs (loop0): last error at time 2000000015: ext4_iget_extra_inode:5025: inode 15 [ 318.667424][T11923] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2893: bg 0: block 104: invalid block bitmap [ 318.694041][T11923] loop4: lost filesystem error report for type 5 error -117 [ 318.694234][T11923] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 318.701655][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 318.701671][ C0] EXT4-fs (loop4): initial error at time 2000000015: ext4_validate_block_bitmap:432 [ 318.701711][ C0] EXT4-fs (loop4): last error at time 2000000015: ext4_validate_block_bitmap:432 [ 318.738685][T11929] loop0: lost filesystem error report for type 5 error -117 [ 318.739195][T11929] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.763629][T11929] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 318.775352][T11929] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 318.793889][T11923] loop4: lost filesystem error report for type 5 error -117 [ 318.794266][T11923] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2893: invalid indirect mapped block 1 (level 1) [ 318.815582][T11923] EXT4-fs (loop4): 1 truncate cleaned up [ 318.822166][T11939] netlink: 'syz.0.2894': attribute type 6 has an invalid length. [ 318.830127][T11929] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.2894: Corrupt directory, running e2fsck is recommended [ 318.844815][T11923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.023571][T11929] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 319.065568][T11929] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 319.131516][T11929] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.2894: Corrupt directory, running e2fsck is recommended [ 319.165077][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.185448][T11948] loop5: detected capacity change from 0 to 2048 [ 319.196663][T11929] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 3: comm syz.0.2894: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 319.307341][T11948] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.340445][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.433071][T11948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.453402][T11949] lo speed is unknown, defaulting to 1000 [ 319.474189][T11949] lo speed is unknown, defaulting to 1000 [ 319.660665][ T4445] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.729296][ T4445] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.751378][T11949] chnl_net:caif_netlink_parms(): no params data found [ 320.107646][ T4445] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.218739][T11949] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.268948][T11949] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.308375][T11949] bridge_slave_0: entered allmulticast mode [ 320.315150][T11949] bridge_slave_0: entered promiscuous mode [ 320.349310][ T4445] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.374299][T11949] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.428526][T11949] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.462563][T11949] bridge_slave_1: entered allmulticast mode [ 320.500207][T11949] bridge_slave_1: entered promiscuous mode [ 320.572160][T11949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.608210][T11949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.671213][T11949] team0: Port device team_slave_0 added [ 320.698732][T11949] team0: Port device team_slave_1 added [ 320.766980][T11949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.796451][T11949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.847734][T11949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.895081][ T4445] bridge_slave_1: left allmulticast mode [ 320.916525][ T4445] bridge_slave_1: left promiscuous mode [ 320.932725][ T4445] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.969114][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 320.969131][ T28] audit: type=1400 audit(2000000018.130:1852): avc: denied { getopt } for pid=12012 comm="syz.0.2915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 321.003718][ T4445] bridge_slave_0: left promiscuous mode [ 321.009797][ T4445] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.080985][T12019] FAULT_INJECTION: forcing a failure. [ 321.080985][T12019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.139218][T12019] CPU: 1 UID: 0 PID: 12019 Comm: syz.0.2916 Tainted: G W syzkaller #0 PREEMPT(full) [ 321.139260][T12019] Tainted: [W]=WARN [ 321.139267][T12019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 321.139355][T12019] Call Trace: [ 321.139362][T12019] [ 321.139369][T12019] __dump_stack+0x1d/0x30 [ 321.139398][T12019] dump_stack_lvl+0x95/0xd0 [ 321.139424][T12019] dump_stack+0x15/0x1b [ 321.139494][T12019] should_fail_ex+0x263/0x280 [ 321.139523][T12019] should_fail+0xb/0x20 [ 321.139547][T12019] should_fail_usercopy+0x1a/0x20 [ 321.139583][T12019] _copy_from_user+0x1c/0xb0 [ 321.139627][T12019] ___sys_sendmsg+0xc1/0x1e0 [ 321.139677][T12019] __x64_sys_sendmsg+0xd4/0x160 [ 321.139721][T12019] x64_sys_call+0x194c/0x3020 [ 321.139754][T12019] do_syscall_64+0x12c/0x370 [ 321.139890][T12019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.139919][T12019] RIP: 0033:0x7ff69e64c799 [ 321.139936][T12019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.139954][T12019] RSP: 002b:00007ff69d09f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.139976][T12019] RAX: ffffffffffffffda RBX: 00007ff69e8c5fa0 RCX: 00007ff69e64c799 [ 321.140016][T12019] RDX: 0000000000008800 RSI: 0000200000000140 RDI: 0000000000000003 [ 321.140033][T12019] RBP: 00007ff69d09f090 R08: 0000000000000000 R09: 0000000000000000 [ 321.140051][T12019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.140125][T12019] R13: 00007ff69e8c6038 R14: 00007ff69e8c5fa0 R15: 00007ffc27930d48 [ 321.140152][T12019] [ 321.522284][ T4445] bond7 (unregistering): (slave bridge1): Releasing backup interface [ 321.536814][ T4445] bridge1 (unregistering): left promiscuous mode [ 321.606735][ T4445] bond9 (unregistering): (slave bond0): Releasing active interface [ 321.635504][ T4445] bond0 (unregistering): Released all slaves [ 321.675285][ T4445] bond1 (unregistering): Released all slaves [ 321.684578][ T4445] bond2 (unregistering): Released all slaves [ 321.705460][ T4445] bond3 (unregistering): Released all slaves [ 321.755518][ T4445] bond4 (unregistering): Released all slaves [ 321.794251][ T4445] bond5 (unregistering): Released all slaves [ 321.820788][ T4445] bond6 (unregistering): Released all slaves [ 321.848335][ T4445] bond7 (unregistering): Released all slaves [ 321.886960][ T4445] bond8 (unregistering): Released all slaves [ 321.895999][ T4445] bond9 (unregistering): Released all slaves [ 321.944840][T11949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.959618][T11949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.069748][T11949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.184860][T12034] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2919'. [ 322.291212][ T4445] hsr_slave_0: left promiscuous mode [ 322.368746][ T4445] hsr_slave_1: left promiscuous mode [ 322.458921][ T4445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.592534][ T4445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.879759][ T4445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.042417][ T4445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.072465][ T4445] veth0_vlan: left promiscuous mode [ 323.748120][T12051] loop0: detected capacity change from 0 to 256 [ 324.062732][T12051] FAT-fs (loop0): Directory bread(block 64) failed [ 324.069617][T12051] FAT-fs (loop0): Directory bread(block 65) failed [ 324.076236][T12051] FAT-fs (loop0): Directory bread(block 66) failed [ 324.082857][T12051] FAT-fs (loop0): Directory bread(block 67) failed [ 324.089488][T12051] FAT-fs (loop0): Directory bread(block 68) failed [ 324.096047][T12051] FAT-fs (loop0): Directory bread(block 69) failed [ 324.102821][T12051] FAT-fs (loop0): Directory bread(block 70) failed [ 324.109498][T12051] FAT-fs (loop0): Directory bread(block 71) failed [ 324.116108][T12051] FAT-fs (loop0): Directory bread(block 72) failed [ 324.122781][T12051] FAT-fs (loop0): Directory bread(block 73) failed [ 324.177753][T12051] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2922'. [ 324.733745][T12064] loop5: detected capacity change from 0 to 128 [ 325.100115][ T4445] team0 (unregistering): Port device team_slave_1 removed [ 325.110875][ T4445] team0 (unregistering): Port device team_slave_0 removed [ 325.213084][T11949] hsr_slave_0: entered promiscuous mode [ 325.226692][T11949] hsr_slave_1: entered promiscuous mode [ 325.239303][T11949] debugfs: 'hsr0' already exists in 'hsr' [ 325.250612][T11949] Cannot create hsr debugfs directory [ 325.543308][ T4445] IPVS: stop unused estimator thread 0... [ 325.742086][T11949] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 325.765446][T11949] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 325.783310][T11949] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 325.806631][T11949] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 325.888569][T12134] loop4: detected capacity change from 0 to 512 [ 325.935680][T12134] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.987619][T12134] ext4 filesystem being mounted at /595/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 326.011747][T11949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.072921][T11949] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.106611][ T4445] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.113774][ T4445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.161810][ T7195] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.169034][ T7195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.234897][T11949] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 326.281299][T12162] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2937'. [ 326.322673][T12165] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2939'. [ 326.349895][T11949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 326.547174][T11949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.755423][T11949] veth0_vlan: entered promiscuous mode [ 326.764065][T11949] veth1_vlan: entered promiscuous mode [ 326.779607][T11949] veth0_macvtap: entered promiscuous mode [ 326.787785][T11949] veth1_macvtap: entered promiscuous mode [ 326.801018][T11949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.810906][T11949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.872306][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.913935][ T4452] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.924537][ T4452] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.933440][ T4452] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.946507][ T4452] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.970930][T12188] netlink: 'syz.4.2940': attribute type 29 has an invalid length. [ 327.026113][T12194] bond5 (unregistering): Released all slaves [ 327.121483][T12204] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2944'. [ 327.125341][T12207] SELinux: Context ›Y is not valid (left unmapped). [ 327.276825][T12220] loop4: detected capacity change from 0 to 128 [ 327.309774][T12223] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2951'. [ 327.411872][T12228] lo speed is unknown, defaulting to 1000 [ 327.639517][T12236] loop3: detected capacity change from 0 to 8192 [ 327.715333][T12211] loop0: detected capacity change from 0 to 512 [ 327.833371][T12211] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 327.883504][T12231] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2950'. [ 327.902901][T12247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2959'. [ 327.947415][T12247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2959'. [ 328.008113][ T28] audit: type=1400 audit(2000000025.170:1853): avc: denied { map } for pid=12253 comm="syz.2.2960" path="socket:[32566]" dev="sockfs" ino=32566 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 328.118670][T12254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2960'. [ 328.128735][ T28] audit: type=1400 audit(2000000025.290:1854): avc: denied { accept } for pid=12253 comm="syz.2.2960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 328.276349][T12261] loop5: detected capacity change from 0 to 512 [ 328.389964][ T28] audit: type=1400 audit(2000000025.530:1855): avc: denied { create } for pid=12209 comm="syz.0.2947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 328.441388][T12257] loop3: detected capacity change from 0 to 512 [ 328.571646][T12257] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 328.643615][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.682247][T12257] EXT4-fs (loop3): orphan cleanup on readonly fs [ 328.746205][T12257] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #3: comm syz.3.2962: corrupted inode contents [ 328.889710][T12257] fserror_report: 4 callbacks suppressed [ 328.889730][T12257] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 328.906408][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 328.921986][ C1] EXT4-fs (loop3): initial error at time 2000000026: ext4_do_update_inode:5569: inode 3 [ 328.931771][ C1] EXT4-fs (loop3): last error at time 2000000026: ext4_do_update_inode:5569: inode 3 [ 328.951685][T12257] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #3: comm syz.3.2962: mark_inode_dirty error [ 328.976500][ T28] audit: type=1400 audit(2000000026.130:1856): avc: denied { sys_module } for pid=12272 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 329.016506][T12257] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 329.018705][T12257] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #3: comm syz.3.2962: corrupted inode contents [ 329.097253][T12257] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 329.097418][T12257] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.2962: mark_inode_dirty error [ 329.872997][T12284] loop0: detected capacity change from 0 to 256 [ 330.003831][ T56] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.025633][T12284] FAT-fs (loop0): Directory bread(block 64) failed [ 330.032365][T12284] FAT-fs (loop0): Directory bread(block 65) failed [ 330.039676][T12284] FAT-fs (loop0): Directory bread(block 66) failed [ 330.046431][T12284] FAT-fs (loop0): Directory bread(block 67) failed [ 330.053420][T12284] FAT-fs (loop0): Directory bread(block 68) failed [ 330.060087][T12284] FAT-fs (loop0): Directory bread(block 69) failed [ 330.066843][T12284] FAT-fs (loop0): Directory bread(block 70) failed [ 330.073654][T12284] FAT-fs (loop0): Directory bread(block 71) failed [ 330.080618][T12284] FAT-fs (loop0): Directory bread(block 72) failed [ 330.087359][T12284] FAT-fs (loop0): Directory bread(block 73) failed [ 330.143182][T12284] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2965'. [ 330.156829][ T28] audit: type=1400 audit(2000000027.290:1857): avc: denied { write } for pid=12279 comm="syz.0.2965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 330.214047][T12257] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 330.215340][T12257] Quota error (device loop3): write_blk: dquota write failed [ 330.341635][ T56] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.468620][T12257] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 330.579245][ T56] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.616612][T12257] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.2962: Failed to acquire dquot type 0 [ 330.682934][T12272] lo speed is unknown, defaulting to 1000 [ 330.709174][T12257] loop3: lost filesystem error report for type 5 error -117 [ 330.709832][T12257] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.2962: corrupted inode contents [ 330.786543][ T30] kworker/u8:1: attempt to access beyond end of device [ 330.786543][ T30] loop4: rw=1, sector=138, nr_sectors = 2 limit=128 [ 330.802543][ T56] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.813097][T12257] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 330.813360][T12257] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #16: comm syz.3.2962: mark_inode_dirty error [ 330.876501][T12257] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 330.876780][T12257] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.2962: corrupted inode contents [ 330.969416][T12257] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 330.969793][T12257] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.2962: mark_inode_dirty error [ 331.017753][T12272] chnl_net:caif_netlink_parms(): no params data found [ 331.046925][ T56] bridge_slave_1: left allmulticast mode [ 331.056738][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.064711][ T56] bridge_slave_0: left allmulticast mode [ 331.076470][T12257] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 331.076749][T12257] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.2962: corrupted inode contents [ 331.106485][ T56] bridge_slave_0: left promiscuous mode [ 331.119689][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.160718][T12257] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 331.160948][T12257] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 331.246343][T12257] loop3: lost filesystem error report for type 5 error -117 [ 331.246642][T12257] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.2962: corrupted inode contents [ 331.322072][T12257] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 331.322241][T12257] EXT4-fs error (device loop3): ext4_truncate:4587: inode #16: comm syz.3.2962: mark_inode_dirty error [ 331.376671][T12257] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 331.393612][T12257] loop3: lost filesystem error report for type 5 error -117 [ 331.394285][T12257] EXT4-fs (loop3): 1 truncate cleaned up [ 331.408331][T12257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 331.472771][ T56] bond0 (unregistering): Released all slaves [ 331.481954][ T56] bond1 (unregistering): Released all slaves [ 331.498846][ T56] bond2 (unregistering): Released all slaves [ 331.520073][ T56] bond3 (unregistering): Released all slaves [ 331.540500][ T56] bond4 (unregistering): Released all slaves [ 331.561409][ T56] bond5 (unregistering): Released all slaves [ 331.582133][ T56] bond6 (unregistering): Released all slaves [ 331.601651][ T56] bond7 (unregistering): Released all slaves [ 331.621134][ T56] bond8 (unregistering): Released all slaves [ 331.641075][ T56] bond9 (unregistering): Released all slaves [ 331.701328][T11949] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.726280][T12317] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2970'. [ 331.765449][ T56] hsr_slave_0: left promiscuous mode [ 331.793209][ T56] hsr_slave_1: left promiscuous mode [ 331.805672][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.816519][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.827865][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.839778][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.864489][ T56] veth0_vlan: left promiscuous mode [ 332.026037][ T56] team0 (unregistering): Port device team_slave_1 removed [ 332.049725][ T56] team0 (unregistering): Port device team_slave_0 removed [ 332.119995][ T56] team0 (unregistering): Port device dummy0 removed [ 332.179570][ T23] lo speed is unknown, defaulting to 1000 [ 332.202051][ T23] infiniband syz2: ib_query_port failed (-19) [ 332.282396][T12272] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.306468][T12272] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.322545][T12272] bridge_slave_0: entered allmulticast mode [ 332.353220][T12272] bridge_slave_0: entered promiscuous mode [ 332.365102][T12272] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.373144][T12272] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.381595][T12272] bridge_slave_1: entered allmulticast mode [ 332.389063][T12272] bridge_slave_1: entered promiscuous mode [ 332.406777][ T28] audit: type=1326 audit(2000000029.570:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12358 comm="syz.0.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69e64c799 code=0x7ffc0000 [ 332.436348][T12272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.501466][ T28] audit: type=1326 audit(2000000029.590:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12358 comm="syz.0.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69e64c799 code=0x7ffc0000 [ 332.571911][ T28] audit: type=1326 audit(2000000029.590:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12358 comm="syz.0.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69e64c799 code=0x7ffc0000 [ 332.629375][T12272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.643539][T12371] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2980'. [ 332.655330][T12272] team0: Port device team_slave_0 added [ 332.664142][T12272] team0: Port device team_slave_1 added [ 332.692961][T12272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.700224][T12272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.726414][T12272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.738955][T12272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.746119][T12272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.780124][T12376] loop3: detected capacity change from 0 to 256 [ 332.881558][T12376] FAT-fs (loop3): Directory bread(block 64) failed [ 332.888413][T12376] FAT-fs (loop3): Directory bread(block 65) failed [ 332.895055][T12376] FAT-fs (loop3): Directory bread(block 66) failed [ 332.901776][T12376] FAT-fs (loop3): Directory bread(block 67) failed [ 332.908521][T12376] FAT-fs (loop3): Directory bread(block 68) failed [ 332.915122][T12376] FAT-fs (loop3): Directory bread(block 69) failed [ 332.922414][T12376] FAT-fs (loop3): Directory bread(block 70) failed [ 332.929115][T12376] FAT-fs (loop3): Directory bread(block 71) failed [ 332.935938][T12376] FAT-fs (loop3): Directory bread(block 72) failed [ 332.942592][T12376] FAT-fs (loop3): Directory bread(block 73) failed [ 333.044946][T12376] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2979'. [ 333.079641][T12272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.215356][T12380] openvswitch: netlink: Missing key (keys=40, expected=80) [ 333.291612][T12382] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2981'. [ 333.408825][T12272] hsr_slave_0: entered promiscuous mode [ 333.468186][T12272] hsr_slave_1: entered promiscuous mode [ 333.539385][T12272] debugfs: 'hsr0' already exists in 'hsr' [ 333.576821][T12272] Cannot create hsr debugfs directory [ 333.594085][T12388] loop0: detected capacity change from 0 to 512 [ 333.602407][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 333.602433][ T28] audit: type=1400 audit(2000000030.740:1889): avc: denied { setopt } for pid=12387 comm="syz.0.2983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 333.644018][T12388] msdos: Unknown parameter '' [ 333.686228][T12388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2983'. [ 333.799416][T12396] loop5: detected capacity change from 0 to 512 [ 333.879045][T12396] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.938843][T12396] ext4 filesystem being mounted at /45/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.288776][T11255] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.338017][T12272] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 334.350952][T12424] loop0: detected capacity change from 0 to 8192 [ 334.372929][T12272] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 334.491813][T12272] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 334.537036][T12272] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 334.653214][T12452] loop3: detected capacity change from 0 to 512 [ 334.752216][T12452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.766610][T12452] ext4 filesystem being mounted at /13/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.778214][T12272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.817830][T12272] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.876024][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.883236][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.900475][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.907617][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.049149][T12470] loop0: detected capacity change from 0 to 8192 [ 335.168103][T12272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.216258][T12490] loop5: detected capacity change from 0 to 8192 [ 335.309168][ T3318] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 335.317236][ T3318] FAT-fs (loop0): Filesystem has been set read-only [ 335.367434][T11949] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.511493][T12511] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2999'. [ 335.930331][T12510] loop3: detected capacity change from 0 to 8192 [ 335.980355][ T56] bridge_slave_1: left allmulticast mode [ 336.211104][T12519] netlink: 'syz.5.3006': attribute type 1 has an invalid length. [ 336.226783][ T56] bridge_slave_1: left promiscuous mode [ 336.256733][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.295810][ T56] bridge_slave_0: left promiscuous mode [ 336.319104][T12526] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3006'. [ 336.337095][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.531373][ T56] bond0 (unregistering): Released all slaves [ 336.557253][ T56] bond1 (unregistering): Released all slaves [ 336.585818][ T56] bond2 (unregistering): Released all slaves [ 336.613057][ T56] bond3 (unregistering): Released all slaves [ 336.642605][ T56] bond4 (unregistering): Released all slaves [ 336.797479][T12526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 336.852416][T12535] bond1: (slave gretap0): making interface the new active one [ 336.877576][T12535] bond1: (slave gretap0): Enslaving as an active interface with an up link [ 336.910829][T12539] macvlan2: entered promiscuous mode [ 336.922744][T12539] macvlan2: entered allmulticast mode [ 336.929207][T12539] bond1: entered promiscuous mode [ 336.934356][T12539] gretap0: entered promiscuous mode [ 336.940486][T12539] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 336.949783][T12539] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 336.966307][T12539] bond1: left promiscuous mode [ 336.971471][T12539] gretap0: left promiscuous mode [ 337.007407][ T56] hsr_slave_0: left promiscuous mode [ 337.027174][ T56] hsr_slave_1: left promiscuous mode [ 337.083743][ T56] team0 (unregistering): Port device team_slave_1 removed [ 337.094289][ T56] team0 (unregistering): Port device team_slave_0 removed [ 337.128908][ T56] team0 (unregistering): Port device dummy0 removed [ 337.294055][T12272] veth0_vlan: entered promiscuous mode [ 337.323113][T12272] veth1_vlan: entered promiscuous mode [ 337.349874][T12579] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3008'. [ 337.365317][T12272] veth0_macvtap: entered promiscuous mode [ 337.386038][T12272] veth1_macvtap: entered promiscuous mode [ 337.415064][T12272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.430249][T12272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.443040][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.452640][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.472008][T12524] chnl_net:caif_netlink_parms(): no params data found [ 337.504869][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.515250][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.678355][T12524] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.687193][T12524] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.710859][T12524] bridge_slave_0: entered allmulticast mode [ 337.726030][T12614] loop5: detected capacity change from 0 to 2048 [ 337.742462][T12524] bridge_slave_0: entered promiscuous mode [ 337.766686][T12524] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.780142][T12614] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.795973][T12524] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.805686][ T28] audit: type=1400 audit(2000000034.950:1890): avc: denied { mounton } for pid=12612 comm="syz.5.3014" path="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 337.842623][T12524] bridge_slave_1: entered allmulticast mode [ 337.858705][T12524] bridge_slave_1: entered promiscuous mode [ 337.894267][ T28] audit: type=1400 audit(2000000035.040:1891): avc: denied { ioctl } for pid=12620 comm="syz.4.2964" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=33686 ioctlcmd=0x5512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 337.920716][T12524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.953880][T12524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.964860][T11255] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.103580][T12630] loop3: detected capacity change from 0 to 8192 [ 338.180425][T12524] team0: Port device team_slave_0 added [ 338.248152][T12650] loop5: detected capacity change from 0 to 256 [ 338.306711][T12650] FAT-fs (loop5): Directory bread(block 64) failed [ 338.313548][T12650] FAT-fs (loop5): Directory bread(block 65) failed [ 338.320558][T12650] FAT-fs (loop5): Directory bread(block 66) failed [ 338.327419][T12650] FAT-fs (loop5): Directory bread(block 67) failed [ 338.334206][T12650] FAT-fs (loop5): Directory bread(block 68) failed [ 338.340864][T12650] FAT-fs (loop5): Directory bread(block 69) failed [ 338.347620][T12650] FAT-fs (loop5): Directory bread(block 70) failed [ 338.354224][T12650] FAT-fs (loop5): Directory bread(block 71) failed [ 338.361044][T12650] FAT-fs (loop5): Directory bread(block 72) failed [ 338.367792][T12650] FAT-fs (loop5): Directory bread(block 73) failed [ 338.440608][T12650] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3016'. [ 338.545243][ T28] audit: type=1400 audit(2000000035.700:1892): avc: denied { ioctl } for pid=12645 comm="syz.2.3021" path="socket:[33729]" dev="sockfs" ino=33729 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 339.145758][T12524] team0: Port device team_slave_1 added [ 339.248640][T12524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.265931][T12524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.452989][T12524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.207118][T12524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.334735][T12524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.582556][T12524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.657850][T12684] loop5: detected capacity change from 0 to 8192 [ 340.834972][T12524] hsr_slave_0: entered promiscuous mode [ 340.887403][T12524] hsr_slave_1: entered promiscuous mode [ 340.926920][T12524] debugfs: 'hsr0' already exists in 'hsr' [ 340.956727][T12524] Cannot create hsr debugfs directory [ 341.347912][T12524] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 341.373168][T12524] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 341.405484][T12524] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 341.429637][T12524] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 341.581641][T12524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.606117][T12718] loop5: detected capacity change from 0 to 8192 [ 341.620849][T12524] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.659321][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.666474][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.731043][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.738255][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.840647][T12524] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 341.882741][T12524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 342.006932][T12524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.297864][T12524] veth0_vlan: entered promiscuous mode [ 342.315997][T12524] veth1_vlan: entered promiscuous mode [ 342.347672][T12524] veth0_macvtap: entered promiscuous mode [ 342.360390][T12769] loop3: detected capacity change from 0 to 2048 [ 342.368490][T12524] veth1_macvtap: entered promiscuous mode [ 342.381063][T12524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.399792][T12524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.411415][ T7199] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.422890][T12769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.436094][ T7199] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.445497][ T7199] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.455198][ T7199] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.502747][T11949] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.113299][T12800] ref_ctr_offset mismatch. inode: 0x175 offset: 0x0 ref_ctr_offset(old): 0x2000000000c0 ref_ctr_offset(new): 0x1000000008 [ 343.331269][T12788] chnl_net:caif_netlink_parms(): no params data found [ 343.395642][T12788] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.474139][T12788] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.489802][T12815] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3049'. [ 343.580008][T12788] bridge_slave_0: entered allmulticast mode [ 343.604309][T12817] xt_recent: Unsupported userspace flags (000000b1) [ 343.668315][T12788] bridge_slave_0: entered promiscuous mode [ 343.855856][T12788] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.922349][T12788] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.979635][T12788] bridge_slave_1: entered allmulticast mode [ 343.986434][T12788] bridge_slave_1: entered promiscuous mode [ 344.006893][T12788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.033924][T12788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.115590][T12788] team0: Port device team_slave_0 added [ 344.154418][T12788] team0: Port device team_slave_1 added [ 344.227780][T12788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.235061][T12788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.269943][T12832] loop3: detected capacity change from 0 to 512 [ 344.297066][T12788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.316759][T12832] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 344.325953][T12788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.345313][T12788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.399421][T12832] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3051: bg 0: block 104: invalid block bitmap [ 344.403556][T12788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.425364][T12832] loop3: lost filesystem error report for type 5 error -117 [ 344.426393][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 344.440224][ C0] EXT4-fs (loop3): initial error at time 2000000041: ext4_validate_block_bitmap:432 [ 344.442733][T12832] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 344.449740][ C0] EXT4-fs (loop3): last error at time 2000000041: ext4_validate_block_bitmap:432 [ 344.480604][T12832] loop3: lost filesystem error report for type 5 error -117 [ 344.480808][T12832] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3051: invalid indirect mapped block 1 (level 1) [ 344.513483][T12788] hsr_slave_0: entered promiscuous mode [ 344.520093][T12788] hsr_slave_1: entered promiscuous mode [ 344.526022][T12788] debugfs: 'hsr0' already exists in 'hsr' [ 344.532283][T12788] Cannot create hsr debugfs directory [ 344.588074][T12832] fserror_report: 1 callbacks suppressed [ 344.588103][T12832] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 344.596902][T12832] EXT4-fs (loop3): 1 truncate cleaned up [ 344.633859][T12832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.713714][T12845] loop5: detected capacity change from 0 to 8192 [ 344.760735][T12849] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3062'. [ 344.804842][T11949] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.810384][T12849] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3062'. [ 344.871415][ T4452] team0: Port device xfrm0 removed [ 344.930343][ T28] audit: type=1400 audit(2000000042.090:1893): avc: denied { read } for pid=12855 comm="syz.5.3063" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 344.957951][ T4452] team0: Port device gtp0 removed [ 344.996410][ T28] audit: type=1400 audit(2000000042.110:1894): avc: denied { open } for pid=12855 comm="syz.5.3063" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 345.040867][T12861] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3064'. [ 345.056588][ T28] audit: type=1400 audit(2000000042.130:1895): avc: denied { ioctl } for pid=12855 comm="syz.5.3063" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 345.097900][ T4452] bond0 (unregistering): Released all slaves [ 345.123676][ T4452] bond1 (unregistering): Released all slaves [ 345.156329][ T4452] bond2 (unregistering): Released all slaves [ 345.165838][ T4452] bond3 (unregistering): Released all slaves [ 345.178593][ T4452] bond4 (unregistering): Released all slaves [ 345.257922][ T28] audit: type=1400 audit(2000000042.410:1896): avc: denied { create } for pid=12871 comm="syz.6.3066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 345.384454][ T28] audit: type=1400 audit(2000000042.410:1897): avc: denied { connect } for pid=12871 comm="syz.6.3066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 345.404355][ T28] audit: type=1400 audit(2000000042.410:1898): avc: denied { write } for pid=12871 comm="syz.6.3066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 345.473802][ T4452] hsr_slave_0: left promiscuous mode [ 345.495689][ T4452] hsr_slave_1: left promiscuous mode [ 346.252198][T12884] loop5: detected capacity change from 0 to 1024 [ 346.268010][T12884] EXT4-fs: Ignoring removed nomblk_io_submit option [ 346.378103][T12884] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.429920][T12884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.457328][T12788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 346.521784][T12788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 346.535618][T12890] netlink: 'syz.3.3069': attribute type 10 has an invalid length. [ 346.605159][ T28] audit: type=1400 audit(2000000043.760:1899): avc: denied { audit_write } for pid=12883 comm="syz.5.3068" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 346.661711][T12788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 346.691179][T12890] team0: Device veth1_vlan failed to register rx_handler [ 346.706564][T12788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 346.957201][T12788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.253055][T12902] loop3: detected capacity change from 0 to 128 [ 347.431314][T12788] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.498995][T12906] loop6: detected capacity change from 0 to 2048 [ 347.581207][T12906] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.692658][T12788] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 347.713661][T12788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.730099][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.737379][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.766640][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.773765][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.794195][T12912] loop4: detected capacity change from 0 to 512 [ 347.830189][T12912] EXT4-fs (loop4): 1 orphan inode deleted [ 347.856892][ T7199] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 347.870261][ T7199] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:16: Failed to release dquot type 1 [ 347.871885][T12912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.883068][ T7199] loop4: lost filesystem error report for type 5 error -117 [ 347.940047][ T56] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 64: padding at end of block bitmap is not set [ 347.975386][T12912] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.002866][T12919] loop5: detected capacity change from 0 to 8192 [ 348.019323][ T56] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 348.040189][T12788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.047241][ T56] EXT4-fs (loop6): This should not happen!! Data will be lost [ 348.047241][ T56] [ 348.058844][ T56] EXT4-fs (loop6): Total free blocks count 0 [ 348.065001][ T56] EXT4-fs (loop6): Free/Dirty block details [ 348.071096][ T56] EXT4-fs (loop6): free_blocks=0 [ 348.092418][ T56] EXT4-fs (loop6): dirty_blocks=512 [ 348.102295][ T56] EXT4-fs (loop6): Block reservation details [ 348.111418][ T28] audit: type=1400 audit(2000000045.260:1900): avc: denied { ioctl } for pid=12911 comm="syz.4.3070" path="socket:[36145]" dev="sockfs" ino=36145 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 348.116482][ T56] EXT4-fs (loop6): i_reserved_data_blocks=32 [ 348.146204][T12934] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3076'. [ 348.166645][ T28] audit: type=1400 audit(2000000045.300:1901): avc: denied { append } for pid=12911 comm="syz.4.3070" path="/7/file1/blkio.bfq.io_queued" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 348.207748][T12930] loop3: detected capacity change from 0 to 512 [ 348.216250][ T56] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 348.253064][T12930] EXT4-fs: Ignoring removed nomblk_io_submit option [ 348.311435][T12930] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.3076: iget: bad extended attribute block 262144 [ 348.329077][T12788] veth0_vlan: entered promiscuous mode [ 348.341494][T12788] veth1_vlan: entered promiscuous mode [ 348.355815][T12788] veth0_macvtap: entered promiscuous mode [ 348.363138][T12930] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 348.363333][T12930] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3076: couldn't read orphan inode 15 (err -117) [ 348.372554][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 348.372576][ C0] EXT4-fs (loop3): initial error at time 2000000000: ext4_orphan_get:1391: inode 15 [ 348.372617][ C0] EXT4-fs (loop3): last error at time 2000000000: ext4_orphan_get:1391: inode 15 [ 348.411274][T12788] veth1_macvtap: entered promiscuous mode [ 348.418849][T12955] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3074'. [ 348.419398][T12930] loop3: lost filesystem error report for type 5 error -117 [ 348.431035][T12930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.453453][T12788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.470321][T12788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.481970][ T56] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.518311][T12930] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 13: comm syz.3.3076: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 348.556282][ T56] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.570604][ T56] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.581280][T12272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.599786][ T56] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.633093][T11949] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.643391][T12964] loop6: detected capacity change from 0 to 2048 [ 348.686003][T12964] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.748980][T12964] EXT4-fs error (device loop6): ext4_iget_extra_inode:5025: inode #12: comm syz.6.3082: corrupted in-inode xattr: e_name out of bounds [ 348.766254][T12964] EXT4-fs (loop6): Remounting filesystem read-only [ 348.803185][T12524] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.824729][T12978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.855221][T12972] loop5: detected capacity change from 0 to 512 [ 348.868848][T12978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.877380][T12972] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 348.889520][T12983] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3086'. [ 348.943827][T12987] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3085'. [ 348.944118][T12978] netlink: 'syz.2.3044': attribute type 2 has an invalid length. [ 348.970673][T12972] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 349.010138][T12987] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3085'. [ 349.019332][T12987] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3085'. [ 349.032772][T12972] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3080: bg 0: block 248: padding at end of block bitmap is not set [ 349.041159][T12991] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3088'. [ 349.048263][T12972] loop5: lost filesystem error report for type 5 error -117 [ 349.059594][T12972] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.3080: Failed to acquire dquot type 1 [ 349.066999][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 349.067026][ C1] EXT4-fs (loop5): last error at time 2000000000: ext4_validate_block_bitmap:441 [ 349.094408][T12972] loop5: lost filesystem error report for type 5 error -117 [ 349.096793][T12972] EXT4-fs (loop5): 1 truncate cleaned up [ 349.110893][T12972] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 349.198941][T12987] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3085'. [ 349.217964][T12987] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3085'. [ 349.242076][T11255] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 349.251181][T12987] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3085'. [ 349.321380][T13001] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3090'. [ 349.349745][T12987] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3085'. [ 349.498729][T13007] loop4: detected capacity change from 0 to 4096 [ 349.718193][T13009] loop6: detected capacity change from 0 to 512 [ 349.727934][T13009] EXT4-fs: Ignoring removed nobh option [ 349.751632][T13009] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 349.821752][T13007] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.855050][T13015] EXT4-fs: Ignoring removed nobh option [ 349.915794][T13015] EXT4-fs: Mount option(s) incompatible with ext2 [ 349.956539][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 349.956556][ T28] audit: type=1400 audit(2000000001.570:1933): avc: denied { create } for pid=13006 comm="syz.4.3093" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 350.176330][T13020] program syz.2.3096 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 350.423898][ T28] audit: type=1400 audit(2000000002.060:1934): avc: denied { ioctl } for pid=13011 comm="syz.5.3095" path="socket:[35805]" dev="sockfs" ino=35805 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 350.476688][T13012] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 351.024328][T13027] iso9660: Unknown parameter 'utF8' [ 352.572581][ T1034] IPVS: starting estimator thread 0... [ 352.768647][T13031] IPVS: using max 2208 ests per chain, 110400 per kthread [ 352.779913][T13034] geneve2: entered promiscuous mode [ 352.789244][ T7195] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 352.802676][ T7195] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 352.812471][ T7195] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 352.821935][ T7195] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 353.398623][T12272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.032170][T13057] __nla_validate_parse: 4 callbacks suppressed [ 354.032193][T13057] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3106'. [ 354.922878][T13081] set_capacity_and_notify: 3 callbacks suppressed [ 354.922925][T13081] loop2: detected capacity change from 0 to 256 [ 357.593747][T13081] FAT-fs (loop2): Directory bread(block 64) failed [ 357.600452][T13081] FAT-fs (loop2): Directory bread(block 65) failed [ 357.607045][T13081] FAT-fs (loop2): Directory bread(block 66) failed [ 357.613619][T13081] FAT-fs (loop2): Directory bread(block 67) failed [ 357.620347][T13081] FAT-fs (loop2): Directory bread(block 68) failed [ 357.626918][T13081] FAT-fs (loop2): Directory bread(block 69) failed [ 357.633470][T13081] FAT-fs (loop2): Directory bread(block 70) failed [ 357.640029][T13081] FAT-fs (loop2): Directory bread(block 71) failed [ 357.646602][T13081] FAT-fs (loop2): Directory bread(block 72) failed [ 357.653175][T13081] FAT-fs (loop2): Directory bread(block 73) failed [ 357.825594][T13097] FAULT_INJECTION: forcing a failure. [ 357.825594][T13097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.856573][T13097] CPU: 1 UID: 0 PID: 13097 Comm: syz.5.3113 Tainted: G W syzkaller #0 PREEMPT(full) [ 357.856622][T13097] Tainted: [W]=WARN [ 357.856631][T13097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 357.856677][T13097] Call Trace: [ 357.856683][T13097] [ 357.856690][T13097] __dump_stack+0x1d/0x30 [ 357.856726][T13097] dump_stack_lvl+0x95/0xd0 [ 357.856759][T13097] dump_stack+0x15/0x1b [ 357.856788][T13097] should_fail_ex+0x263/0x280 [ 357.856909][T13097] should_fail+0xb/0x20 [ 357.856948][T13097] should_fail_usercopy+0x1a/0x20 [ 357.857061][T13097] _copy_from_user+0x1c/0xb0 [ 357.857102][T13097] do_sock_getsockopt+0xf1/0x210 [ 357.857154][T13097] __x64_sys_getsockopt+0x11d/0x1a0 [ 357.857282][T13097] x64_sys_call+0x2dcf/0x3020 [ 357.857320][T13097] do_syscall_64+0x12c/0x370 [ 357.857407][T13097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.857438][T13097] RIP: 0033:0x7f78782dc799 [ 357.857458][T13097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.857483][T13097] RSP: 002b:00007f7876d2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 357.857510][T13097] RAX: ffffffffffffffda RBX: 00007f7878555fa0 RCX: 00007f78782dc799 [ 357.857529][T13097] RDX: 0000000000000043 RSI: 0000000000000000 RDI: 000000000000000a [ 357.857590][T13097] RBP: 00007f7876d2f090 R08: 0000200000000080 R09: 0000000000000000 [ 357.857609][T13097] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 357.857694][T13097] R13: 00007f7878556038 R14: 00007f7878555fa0 R15: 00007ffcb0dffbc8 [ 357.857722][T13097] [ 358.103889][T13116] loop5: detected capacity change from 0 to 512 [ 358.127523][T13118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 358.161585][T13116] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.185924][T13116] ext4 filesystem being mounted at /88/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.370725][T11255] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.492204][T13148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3124'. [ 358.516095][T13153] loop5: detected capacity change from 0 to 512 [ 358.610069][T13161] loop4: detected capacity change from 0 to 8192 [ 358.703385][T13173] loop2: detected capacity change from 0 to 2048 [ 358.799533][T13173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.831537][T13185] IPv6: NLM_F_CREATE should be specified when creating new route [ 358.870162][T13185] loop6: detected capacity change from 0 to 256 [ 358.879379][T13185] vfat: Unknown parameter '' [ 358.918516][T12788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.959995][T12788] ================================================================== [ 358.968152][T12788] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 358.975759][T12788] [ 358.978116][T12788] read-write to 0xffff888237c26668 of 1 bytes by task 13179 on cpu 0: [ 358.986294][T12788] folio_add_lru+0xa4/0x1e0 [ 358.990939][T12788] shmem_get_folio_gfp+0x7b0/0xd60 [ 358.996133][T12788] shmem_write_begin+0xfc/0x1f0 [ 359.001044][T12788] generic_perform_write+0x183/0x490 [ 359.006487][T12788] shmem_file_write_iter+0xc5/0xf0 [ 359.011670][T12788] __kernel_write_iter+0x319/0x590 [ 359.016868][T12788] dump_user_range+0xa7d/0xdb0 [ 359.021681][T12788] elf_core_dump+0x21a2/0x2330 [ 359.026523][T12788] coredump_write+0xacc/0xdd0 [ 359.031269][T12788] vfs_coredump+0x26c7/0x3130 [ 359.036006][T12788] get_signal+0xd80/0xf60 [ 359.040395][T12788] arch_do_signal_or_restart+0x96/0x450 [ 359.046098][T12788] irqentry_exit+0xf7/0x520 [ 359.050668][T12788] asm_exc_page_fault+0x26/0x30 [ 359.055742][T12788] [ 359.058108][T12788] read to 0xffff888237c26668 of 1 bytes by task 12788 on cpu 1: [ 359.065771][T12788] __lru_add_drain_all+0x17e/0x450 [ 359.070941][T12788] lru_add_drain_all+0x10/0x20 [ 359.075768][T12788] invalidate_bdev+0x47/0x70 [ 359.080408][T12788] ext4_put_super+0x624/0x7d0 [ 359.085129][T12788] generic_shutdown_super+0xee/0x220 [ 359.090476][T12788] kill_block_super+0x2a/0x70 [ 359.095215][T12788] ext4_kill_sb+0x42/0x80 [ 359.099585][T12788] deactivate_locked_super+0x75/0x1c0 [ 359.105019][T12788] deactivate_super+0x97/0xa0 [ 359.109841][T12788] cleanup_mnt+0x2bb/0x330 [ 359.114303][T12788] __cleanup_mnt+0x19/0x20 [ 359.118852][T12788] task_work_run+0x130/0x1a0 [ 359.123486][T12788] exit_to_user_mode_loop+0x1f4/0x6f0 [ 359.128895][T12788] do_syscall_64+0x249/0x370 [ 359.133542][T12788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.139477][T12788] [ 359.141828][T12788] value changed: 0x05 -> 0x08 [ 359.146536][T12788] [ 359.148887][T12788] Reported by Kernel Concurrency Sanitizer on: [ 359.155073][T12788] CPU: 1 UID: 0 PID: 12788 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 359.166223][T12788] Tainted: [W]=WARN [ 359.170056][T12788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 359.180156][T12788] ================================================================== [ 359.197846][T13194] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3136'. [ 359.257914][T13198] loop2: detected capacity change from 0 to 512 [ 359.407140][ T28] audit: type=1326 audit(2000000011.050:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13197 comm="syz.2.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faebee6c799 code=0x7ffc0000 [ 359.438113][ T28] audit: type=1326 audit(2000000011.070:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13197 comm="syz.2.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faebee6c799 code=0x7ffc0000 [ 359.462100][ T28] audit: type=1326 audit(2000000011.070:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13197 comm="syz.2.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faebee6c799 code=0x7ffc0000 [ 359.489021][ T28] audit: type=1326 audit(2000000011.070:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13197 comm="syz.2.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7faebee6c799 code=0x7ffc0000 [ 359.512977][ T28] audit: type=1326 audit(2000000011.070:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13197 comm="syz.2.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faebee6c502 code=0x7ffc0000 [ 359.536819][ T28] audit: type=1326 audit(2000000011.070:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13197 comm="syz.2.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faebee6c502 code=0x7ffc0000 [ 359.560609][ T28] audit: type=1326 audit(2000000011.070:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13197 comm="syz.2.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faebee6c799 code=0x7ffc0000 [ 359.584558][ T28] audit: type=1326 audit(2000000011.070:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13197 comm="syz.2.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faebee6c799 code=0x7ffc0000 [ 359.608408][ T28] audit: type=1326 audit(2000000011.070:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13197 comm="syz.2.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faebee6c799 code=0x7ffc0000 [ 359.632297][ T28] audit: type=1326 audit(2000000011.070:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13197 comm="syz.2.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faebee6c799 code=0x7ffc0000