last executing test programs: 6m59.910175131s ago: executing program 32 (id=44): r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x50000048) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="070001f6763d70000f000500", @ANYRES32=0x0, @ANYBLOB="2b03000000000000"], 0x20}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xe0, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xb4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&%\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4b}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\\%\x03.#-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '[\x99)]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x78}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0xe0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0xd, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}}, &(0x7f0000000040)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x24}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0xfffffffffffffffc, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r4, 0x2, &(0x7f0000000080)={0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000000000000000000d385700000000000001000006"], 0x0, 0x3c, 0x0, 0x6, 0xfffffffa}, 0x28) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2, &(0x7f0000000040), 0x7, 0x4eb, &(0x7f0000000140)="$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") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) r7 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/softnet_stat\x00') pread64(r7, &(0x7f0000000280)=""/177, 0xb1, 0xb0) setsockopt$sock_int(r6, 0x1, 0x2a, &(0x7f0000000000), 0x4) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) getdents(r8, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) getdents(r8, &(0x7f0000000280)=""/237, 0xed) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000e06010400000000000000000200000905000100070000000500010007000000050001000700000005000100070000e90800020073797a3000000000"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 6m0.846024712s ago: executing program 33 (id=570): setresuid(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) 5m55.37824967s ago: executing program 34 (id=634): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 5m54.076203313s ago: executing program 35 (id=644): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0)=[{{0x4}, {0x0, 0x0, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x0, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x1}}], 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000180), 0x12) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x9}, 0x2000, 0x37, 0x9, 0x7, 0x0, 0x0, 0xefff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==") 5m40.485669171s ago: executing program 36 (id=726): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x7) (async, rerun: 32) r1 = accept(r0, 0x0, 0x0) (async, rerun: 32) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000580)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0xabe33e5d, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0xff37) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) (async) r4 = socket$inet6(0xa, 0x6, 0x7) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) (async) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) getpeername$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000780)=0x14) (async, rerun: 32) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000006000000000000000700000d000000000b000086d700050000000b0000000500000000000000010000000a000000000000000400000001000000000000000500000003000000020000000e000000000000090000000000613030"], &(0x7f0000000880)=""/129, 0x6e, 0x81, 0x1, 0x9}, 0x28) (rerun: 32) r10 = syz_open_dev$vcsa(&(0x7f0000000a00), 0x5608, 0x0) (async, rerun: 32) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000a40), 0x101000, 0x0) (async, rerun: 32) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000a80), 0x8) (async) r13 = syz_open_dev$vcsa(&(0x7f0000000ac0), 0x6, 0x880) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x50, r4, 0xb2721000) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x3b, 0x4, 0x9, 0x1, 0x6040, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) (async) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x1a, 0x1, 0x1, 0x7, 0x28, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x1a, 0x15, &(0x7f0000000500)=@raw=[@alu={0x7, 0x1, 0x7, 0x7, 0x7, 0xffffffffffffffe0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xd}, @alu={0x7, 0x1, 0x7, 0x7, 0x0, 0x100, 0xfffffffffffffffc}, @map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xa}, @jmp={0x5, 0x1, 0x9, 0x7, 0x7, 0x40}], &(0x7f0000000600)='syzkaller\x00', 0xf961, 0xe2, &(0x7f0000000640)=""/226, 0x40f00, 0x40, '\x00', r8, @fallback=0x1f, r9, 0x8, &(0x7f0000000980)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000009c0)={0xffff0000, 0xd, 0x8001, 0x477}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r10, 0x1, r11, r12, r13, r14, r15, r16], 0x0, 0x10, 0x4}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) (async) syz_clone3(0x0, 0x0) 5m32.0208454s ago: executing program 37 (id=774): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x3e) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x84002, 0x0) ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f00000001c0)) r1 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioprio_set$uid(0x3, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc010000000000000000000000000001ac1414bb00000000000000000000000000000400100000000200201084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000dffff7ffffffffff00000000"], 0xb8}}, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x188}, 0x1, 0x300}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r7 = syz_open_dev$usbfs(0x0, 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x5, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860b, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x6, 0x80000001, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x2, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x6, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000700000000440012800b0001006272696467650000340002800c00230006000000000000000c002100030000000000000005002500010000000500170001000000080024"], 0x64}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800) 5m31.321325732s ago: executing program 38 (id=776): perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x292ca90c, 0xffffffffffffb2eb}, 0x119b10, 0x1, 0xe, 0x1, 0x8, 0x6, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40, 0x1) file_getattr(r1, 0x0, &(0x7f0000000040), 0x18, 0x1000) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x404c080) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@initdev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}}}, &(0x7f00000000c0)=0xe8) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0}, &(0x7f0000000780)=0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x2010004, &(0x7f00000007c0)={[{@bh}, {@abort}, {@nomblk_io_submit}], [{@fowner_lt={'fowner<', r2}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'ext4\x00'}}]}, 0x3, 0x50a, &(0x7f0000000840)="$eJzs3E1sFdUeAPD/3Pb2Ax7Qx+PxHohSQGNjYgsFhYWJwcTEhSZGXMiyKZUgBQztQgiRkhhck7g1xKVxp4lbXRpXJm5x4cLEEIlhw0diMmbunWl7v9peuG0t9/dL2nvOzJk558zMmXvuOfdOAF1rOPuXRPwrIm5FxLZqtDbBcPXl/t0rkw/uXpmMuTQ98WdSSXcvi+eK7TbnkZFSROmTpG6HVTOXLp+dmJ6eupjHx2bPfTg2c+nyi2fOTZyeOj11fvzYsSOHDx19efyl9ivVJL+sXvd2f3xhz643Tt54a7K3WD6Qvy6uR0u97RVjeIl1z7W3q3+8LYvCSeNxurqmhWHFBvLLupy1/yvT+0+ud4GANZOmadrfevVcWu9awxJgw0pivUsArI/ijT77/Hvvbnlln4OfIHeOZx+Akkq97+d/1TW9UcrTlOs+33bScES8N/fw5mA8vBlLjUP8ukoFAAC6zvfHi55g1v+r/lXXlGLnonRb8zmUoYj4d0Rsj4j/RMSOiPhvRCXt/yLi/4u2qYwrJRHpEvnvqIsv5P9NPotQut2RiraQ9f9eyee2avt/Re8vhnry2JaIosM8dTA/JiNR7n//zPTUoRb771sm/6L/V/xl+WevCylKt3vrBuhOTcxOPFptG925FrG7t77+SW924oppnCQidkXE7jb2O7QofOaFL/fMR8q16Zavf0XaZEqv7fm4ZtIvIp6vnv+5qDn/CzkmS89Pjg3E9NTBsewqONg0jx9/uv52q/yXrf+3v9Vv8vrR7048brXnZed/U7X+5cjrXpm/Xaj/UBKRzM/XzkSkPe3lcf2XTyv7HT7QuO4Rrv++mJid6EvezSNVH03Mzl48FNGXvNm4fHxh4yJepM/qP3Kgefvfnm+THYmnIiK7iJ+OiGciYm9e9n0RsT8iGqv28x9F6IfXnv2g1bGprf/WVtf//Dx1p2X1P9X0/ldz/hfm61cYKDbOlvSc3XfrQYubx8rO/5FKaCRf0vz+l9TcIlZa0sc7egAAALAxlKLy3f/S6Hy4VBodrY4B7YhNpekLM7N7I+L8qepvBIaiXCpGuqrjweWkGP8cWhQfr4sfzseNP+sZrMRHJy8sNzQKrLLNlTaflIovARftP/N7m+O8wAbUgXk0YINarv3vvLFGBQHWnPd/6F6L2v9ciyRzvikDTybv/9C9mrX/q/HVkhN07hmw8aXaMnQ17R+6V2+8Mx+u/Oy56a9ta5VXtUTAWvH+D12p3d/1txdI+6enXo2I+lUDDUsuXY6B1SnGYJO8zkbE3OpUuXUg61l1cIdZB2xliQcfJYuiC9j6CQ+l9nbYH42remKprZIln+PwV5qmjauyo7JseU7v7PjFXzwTpdOXzdcL7bRcecjS/KrPt62gpo8RWJfbEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMf9HQAA//9gCtDm") mkdir(&(0x7f0000000080)='./bus\x00', 0x3) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./bus\x00', 0x0, &(0x7f0000000200)={[{@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x1b}}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@norecovery}]}, 0xfe, 0x27e, &(0x7f00000002c0)="$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") (async) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0x6, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) 5m27.582155758s ago: executing program 39 (id=799): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)={0x148, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xf0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1b}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, @CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x48800}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 5m26.568831147s ago: executing program 40 (id=807): set_mempolicy(0x1, &(0x7f0000000e80)=0x1ff, 0x7582) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x80, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x6}, @FRA_DST={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) ftruncate(0xffffffffffffffff, 0x51a9497) (async) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) (async) r1 = io_uring_setup(0x3c2a, &(0x7f0000000040)={0x0, 0xa542, 0x2000, 0x1, 0x1b7}) syz_io_uring_setup(0x2f1c, &(0x7f00000000c0)={0x0, 0x1747, 0x2000, 0x2, 0x292, 0x0, r1}, &(0x7f0000000140), &(0x7f0000000180)) (async) syz_clone(0xc30e3400, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 5m25.427582177s ago: executing program 41 (id=810): r0 = socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000114a73a"], 0x5c}}, 0x0) 5m22.050751212s ago: executing program 4 (id=816): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40800, 0x0) lseek(r0, 0x104, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000080)=[@ioring_restriction_register_op={0x0, 0x1d}], 0x1) r2 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f0000000080)=""/4066, &(0x7f0000001100)=0xfe2) 5m21.227786074s ago: executing program 4 (id=818): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x10550, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0007}]}) r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000002c0)=0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000300)=r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0)='#', 0x1) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x1405, 0x400, 0x70bd25, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x2091}, 0x8040) ioctl$TCFLSH(r1, 0x5608, 0x3) 5m21.204576296s ago: executing program 42 (id=818): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x10550, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0007}]}) r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000002c0)=0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000300)=r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0)='#', 0x1) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x1405, 0x400, 0x70bd25, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x2091}, 0x8040) ioctl$TCFLSH(r1, 0x5608, 0x3) 5m18.5196939s ago: executing program 43 (id=831): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x3, 0x0, &(0x7f0000002000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80e093, 0x0, @perf_config_ext={0x3, 0x7}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x100, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = semget$private(0x0, 0x5, 0x60d) semctl$GETNCNT(r4, 0x3, 0xe, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000080) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x810) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@orlov}]}, 0x82, 0x499, &(0x7f0000000840)="$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") rename(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r5, 0x0, 0x4000010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0x1, 0x4) read$watch_queue(r8, &(0x7f0000000100)=""/97, 0x61) vmsplice(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r9, 0x541b, 0x0) write(r6, 0x0, 0x0) 4m0.944451418s ago: executing program 44 (id=1441): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44814}, 0x2004c8c9) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) setns(0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) sendmsg$netlink(r2, 0x0, 0x4004040) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60010c6a00142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a000001cd"], 0x0) 1m10.815389153s ago: executing program 45 (id=2717): perf_event_open(&(0x7f0000000340)={0x2, 0xffffffffffffffc1, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffeffe, 0x1, @perf_bp={&(0x7f0000000140), 0x6}, 0x2, 0x5, 0x4da, 0x6, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x2, 0xffffffffffffffff, 0xa) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp0\x00', 0x2}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000100)) kcmp(r1, r1, 0x0, 0xffffffffffffffff, r2) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r6 = socket$inet_sctp(0x2, 0x1041d0fd9547058e, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000200)={0xffff, 0x1, 0x5, 0x1000}, 0x8) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x4000, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92143b, 0x100000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100001a, 0x12, r7, 0x8000000) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x100, &(0x7f0000000700)=0xd, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x110, &(0x7f0000000080)=0x10004, 0x0, 0x4) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79ad, 0x3180, 0x7ffd, 0x32c, 0x0, r9}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r9, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) 47.62046169s ago: executing program 9 (id=2799): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x401, &(0x7f0000000040)) syslog(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x48030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_bp={0x0, 0xa}, 0x4, 0x6, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, r0, 0xdfffffffffbfffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x40) preadv(r1, &(0x7f0000000480)=[{0x0}], 0x1, 0xfffffe01, 0x800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x20075}, 0x38) epoll_create1(0x80000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$eJzs281rXFUbAPDn3nz2M3n79v1orRotQlBMmrRqF24UBZGKgi7qMk6mJXTaSBPBfmCjiCtBCroWl6J/gbgRQdSV4Epw5UoKRbNp6ypyZ+5NMpNM2iSTTO38fjCZc+aemXueOffce+45kwA61lD2J4nYHRG/RsRALVtfYKj2dHP+cunW/OVSEgsLr/6RVMvdmL9cKooW79uVZ4bTiPT9JN9JvZkLF89MVCrl83l+dPZsX56cOF0+XT43fvz4saNjTz05/kRL4sziunHwnelDB154/epLpZNX3/jhy6y+u/Pty+NYp19Gm2wYygL/c6GqcdsjG9zZ3WrPsnTS3caKsC5dEZE1V0+1/w9EVyw13kA8/15bKwdsqeza1Nd889wCcA9Lot01ANqjuNDvnO8qZffAK++DB7Zy+NF215+p3QBlcd/MH7Ut3ZHmZXoa7m9baSgiTs799Wn2iM3NQwAA3JEPS5+c6I2IS7e+eDEbeyyN9tLu/1aff6v+3ZuPBAcj4l8RsS8i/h0R+yPiPxGRlf1fRPx/k/VZOf5Jr23yI9eUjf+ezte26sd/xegvBrvy3J5q/D3JqalK+Uj+nQxHT1+WH1tjH9889/NHzbYtH/9lj2z/xVgwr8e17oYJusmJ2YnqoLQFrr8bcbA7SVbGnyyuBCQRcSAiDq7vo/cWialHPz/UrNDt419DC9aZFj7LwpvL2n8uGuIvJLX1yTdHZy5cfHzqbOP65Gh/VMpHRoujYqUff/rglWb7r8Xfn+dWj3/H5sNs6nq59rys/ZdtXewDS+u1M63d/waP/7Q3ea26ztybv/b2xOzs+bGI3uRENV/3+vjSe4t8UT47/ocPr97/9+Xvydr/vojIDuL7I+KBiHgwr/tDEfFwRBxeI8bvn719/JFu4PhvgSz+yVXPf4vH/2BS1/7rT3Sd+e6rZvu/s/Y/Vk0N569Uz38Nkob8atXpjuhrrOBmvz8AAAD4J0irv4FP0pHFdJqOjNR+w78/dqaV6ZnZx05Nv3VusvZb+cHoSYuZroF8PrQyVSmPJXP5J9bmR8fzueJivvRoPm/8cdeOan6kNF2ZbHPs0Ol2Nen/md+72l07YIvVLy8VC8DjvW2pDLDNGtfR0/rslZfDyQDuVf5fGzrXbfp/ul31ALaf6z90rtX6/5WGvLUAuDe5/kPn0v+hQ6Xfrvry19teEaAdXP+hI23m//q3MNF/d1SjPYntbpRYV+EoEmnbv6hWJfrjrqjGxhOX8t7cyk9u84kJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgRf4OAAD//+Nr2uw=") r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0100000007000000080000000800000040000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000500), 0xce, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r6, &(0x7f00000006c0), 0x0}, 0x20) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x11) 45.618484295s ago: executing program 9 (id=2805): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 45.469928307s ago: executing program 9 (id=2806): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = memfd_secret(0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x292ca90c, 0xffffffffffffb2eb}, 0x119b10, 0x1, 0xe, 0x4, 0x8, 0x6, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) pipe2(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000000000)='V', 0x1}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x5) ftruncate(r2, 0x51a9497) waitid(0x2, 0x0, &(0x7f0000001280), 0x8, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000600)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc008e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29103"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r4, 0xee01, 0xee00) keyctl$read(0xb, r4, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair(0x22, 0x2, 0x22, &(0x7f00000006c0)) 44.801242626s ago: executing program 9 (id=2812): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xe, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4, 0x13}}]}, 0x30}}, 0x4008024) r2 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xf1, 0x4, 0x2, 0xc, 0x0, 0x7, 0x800, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0xf}, 0x101400, 0x6, 0x8, 0x3, 0x1, 0x7a14, 0x2, 0x0, 0x6, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r3 = perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, r2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x54a, &(0x7f0000000fc0)="$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") ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5, {0x10001}}, './file0\x00'}) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x1, '\x00', 0x0, r7, 0x1, 0x5, 0x5}, 0x50) r8 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) 42.651930064s ago: executing program 9 (id=2815): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x106200, 0x10004, 0x81, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00921dfb9400000000000000000000000000000000f50000000000001e69236c80d20b786e832eed3e869d4b6de406d922c87f2206247d4349beb2e6b24a4c00e1251c8ea4226f1e2090aa6280d3644e2671"], 0x50) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) close(r0) 40.955315262s ago: executing program 9 (id=2827): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x401, &(0x7f0000000040)) syslog(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x48030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_bp={0x0, 0xa}, 0x4, 0x6, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, r0, 0xdfffffffffbfffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x40) preadv(r1, &(0x7f0000000480)=[{0x0}], 0x1, 0xfffffe01, 0x800) epoll_create1(0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$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") r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0100000007000000080000000800000040000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000500), 0xce, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r6, &(0x7f00000006c0), 0x0}, 0x20) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x11) 40.888595778s ago: executing program 46 (id=2827): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x401, &(0x7f0000000040)) syslog(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x48030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_bp={0x0, 0xa}, 0x4, 0x6, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, r0, 0xdfffffffffbfffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x40) preadv(r1, &(0x7f0000000480)=[{0x0}], 0x1, 0xfffffe01, 0x800) epoll_create1(0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$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") r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0100000007000000080000000800000040000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000500), 0xce, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r6, &(0x7f00000006c0), 0x0}, 0x20) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x11) 32.770841687s ago: executing program 2 (id=2867): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x3, 0x0, &(0x7f0000002000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80e093, 0x0, @perf_config_ext={0x3, 0x7}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x100, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = semget$private(0x0, 0x5, 0x60d) semctl$GETNCNT(r2, 0x3, 0xe, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000080) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x810) rename(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r3, 0x0, 0x4000010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x1, 0x4) read$watch_queue(r6, &(0x7f0000000100)=""/97, 0x61) syz_usb_connect$uac1(0x0, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902960003010070000904000000010100000a24010800000201020d2406000003080000000800000c24020601010608000010000c24020300000300000000040924060506010100000924030601030005000904010000010200000904010101010200000905010900004000000725010000800009040200000101010200000905820908000900000725"], 0x0) vmsplice(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, 0x0) write(r4, 0x0, 0x0) 31.071663676s ago: executing program 2 (id=2879): r0 = memfd_create(&(0x7f0000000700)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\xae\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xac\b\x003\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\x06\x00\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x9c\xce\xf5|q+\t\x11G\x1c\xe7\x9e\x88\xfb\x96\xbe\v:0', 0x2) r1 = syz_io_uring_setup(0x133d, &(0x7f0000000340)={0x0, 0x7af1, 0x80, 0x4, 0x3da}, 0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000003c0)=[r0], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index, 0x400000080001001, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x47f3, 0xfffffffe, 0x0, 0x0, 0x0) 30.880970543s ago: executing program 2 (id=2880): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = memfd_secret(0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x292ca90c, 0xffffffffffffb2eb}, 0x119b10, 0x1, 0xe, 0x4, 0x8, 0x6, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) pipe2(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000000000)='V', 0x1}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x5) ftruncate(r2, 0x51a9497) waitid(0x2, 0x0, &(0x7f0000001280), 0x8, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000600)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc008e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29103"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r4, 0xee01, 0xee00) keyctl$read(0xb, r4, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair(0x22, 0x2, 0x22, &(0x7f00000006c0)) 30.718957826s ago: executing program 6 (id=2882): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x18, 0x2, 0x200, &(0x7f00000002c0)}) 29.011608946s ago: executing program 6 (id=2887): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 28.858239419s ago: executing program 6 (id=2889): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x401, &(0x7f0000000040)) syslog(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x48030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_bp={0x0, 0xa}, 0x4, 0x6, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, r0, 0xdfffffffffbfffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x20075}, 0x38) epoll_create1(0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$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") r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0100000007000000080000000800000040000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000500), 0xce, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r6, &(0x7f00000006c0), 0x0}, 0x20) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x11) 27.615651607s ago: executing program 2 (id=2895): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x54a, &(0x7f0000000fc0)="$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") ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x1, '\x00', 0x0, r2, 0x1, 0x5, 0x5}, 0x50) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) 27.537743964s ago: executing program 6 (id=2896): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xe, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4, 0x13}}]}, 0x30}}, 0x4008024) r2 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xf1, 0x4, 0x2, 0xc, 0x0, 0x7, 0x800, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0xf}, 0x101400, 0x6, 0x8, 0x3, 0x1, 0x7a14, 0x2, 0x0, 0x6, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r3 = perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, r2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x54a, &(0x7f0000000fc0)="$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") ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5, {0x10001}}, './file0\x00'}) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x1, '\x00', 0x0, r7, 0x1, 0x5, 0x5}, 0x50) r8 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) 27.029018819s ago: executing program 2 (id=2899): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 26.895863791s ago: executing program 6 (id=2901): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4008055}, 0x814) 24.585073902s ago: executing program 2 (id=2907): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x401, &(0x7f0000000040)) syslog(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x48030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_bp={0x0, 0xa}, 0x4, 0x6, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, r0, 0xdfffffffffbfffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) preadv(r1, &(0x7f0000000480)=[{0x0}], 0x1, 0xfffffe01, 0x800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x20075}, 0x38) epoll_create1(0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$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") 24.584889132s ago: executing program 47 (id=2907): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x401, &(0x7f0000000040)) syslog(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x48030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_bp={0x0, 0xa}, 0x4, 0x6, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, r0, 0xdfffffffffbfffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) preadv(r1, &(0x7f0000000480)=[{0x0}], 0x1, 0xfffffe01, 0x800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x20075}, 0x38) epoll_create1(0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$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") 24.568656994s ago: executing program 6 (id=2909): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x54a, &(0x7f0000000fc0)="$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") ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 23.665266513s ago: executing program 48 (id=2909): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x54a, &(0x7f0000000fc0)="$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") ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 22.353894107s ago: executing program 7 (id=2921): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = memfd_secret(0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x292ca90c, 0xffffffffffffb2eb}, 0x119b10, 0x1, 0xe, 0x4, 0x8, 0x6, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) pipe2(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000000000)='V', 0x1}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x5) ftruncate(r2, 0x51a9497) waitid(0x2, 0x0, &(0x7f0000001280), 0x8, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000600)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc008e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29103"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r4, 0xee01, 0xee00) keyctl$read(0xb, r4, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair(0x22, 0x2, 0x22, &(0x7f00000006c0)) 22.238341007s ago: executing program 7 (id=2924): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000380)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) sendmmsg$inet(r0, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000880)}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000700)='n', 0x1}], 0x1}}], 0x2, 0x119e75c40673edef) 22.20555037s ago: executing program 7 (id=2925): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, 0x0) 22.111114719s ago: executing program 7 (id=2926): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x54a, &(0x7f0000000fc0)="$eJzs3c9vI1cdAPDvTH52mza70ANUwBYoLGi19sbbrqpeunsBoaoSouKAOGxD4o3C2usldkoTIpH+DSCBxAn+BA5IHJB64sCNIxIHhFQOSAEi0AYJJKMZT1I3sbvuxrFp/PlIo3lv3ni+723W856fk3kBTKznImI3ImYj4o2IWCyOJ8UWtzpbdt7D/Z2Vg/2dlSTa7df/nuTl2bHoek3myeKa8xHxja9GfCc5Gbe5tX1vuVarbhT5cqv+oNzc2r62Xl9eq65V71cqN5duXn/pxouVobX1cv2Xe19Zf/Wbv/n1p9/9/e6Xf5BVa6Eo627HMHWaPnMUJzMdEa+eRbAxmCr2s2OuB48njYiPRcTn8vf/Ykzl/zsBgPOs3V6M9mJ3HgA479J8DixJS8VcwEKkaanUmcN7Ji6ktUazdfVuY/P+ameu7GLMpHfXa9Xrl+b++L18xDCTZPmlvCwvz/OVY/kbEXEpIn4890SeL600aqvjG/YAwER78lj//6+5Tv8/gB7f6gEAHxnz464AADBy+n8AmDz6fwCYPAP0/8WX/btnXhcAYDR8/geAyaP/B4DJo/8HgIny9ddey7b2QfH869U3tzbvNd68tlpt3ivVN1dKK42NB6W1RmMtf2ZP/VHXqzUaD5ZeiM23yq1qs1Vubm3fqTc277fu5M/1vlOdGUmrAIAPcunyO39IImL35SfyLbrWctBXw/mWjrsCwNhMjbsCwNhY7Qsm1+Cf8X93pvUAxqfnw7zneybf76cfIojfM4L/K1c+Ofj8vzWe4Xwx/w+T6/Hm/18Zej2A0TP/D5Or3U6Or/k/e1QEAJxLp/gd//YPhzUIAcbqUYt5D+X7fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhnFiLiu5GkpWIt8IVI01Ip4qmIuBgzyd31WvV6RDwdlyNiZi7LL4270gDAKaV/TYr1v64sPr9wvHQ2+fdcvo+I7//s9Z+8tdxqbSxlx/9xdHzucPmwynuvO8W6ggDAgJ4b8Ly8/64U+64P8g/3d1YOt+7z0yHX87i92/HfYinilYP9nXzrlEzHdL6fz8cSF/6ZFPnOWqTPRsTUEOLvvh0Rn+jV/iSfG7lYrHzaHT+K2E+NNH76vvhpXtbZZ4Ovjw+hLjBp3rkdEbd6vf/S4p7a+/0/n9+hTm/vdudih/e+g674h/e/qR7xkw9xz9974bdfO3Gwvdgpezvi2ele8ZOj+Emf+M8PGP9Pn/rMj17pU9b+ecSV6B2/O1a5VX9Qbm5tX1uvL69V16r3K5WbSzevv3TjxUo5n6MuH85Un/S3l68+3a9uWfsv9Ik/37P9s0ev/cKA7f/Ff9749mc/IP6XPt/75/9Mz/gdWZ/4xQHjL1/4Vd/lu7P4qyfbn3f7vX/+nRFBduzqgPHf/cv26oCnAgAj0Nzavrdcq1U3Tiay4j5FxxPZmOBR5zxWIqtD/3PmBq/hgIk/xzBbcet0L585q3/VM09MH41Vh3vlb2VXHHFz0qG34lSJh51EnHmssd6WgBF4700/7poAAAAAAAAAAAAAAAD9jOJPl8bdRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM6v/wUAAP//es3IjQ==") ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x1, '\x00', 0x0, r2, 0x1, 0x5, 0x5}, 0x50) r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 21.485101203s ago: executing program 7 (id=2929): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 18.880890011s ago: executing program 7 (id=2935): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x500, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0xe4ff}) 18.880716861s ago: executing program 49 (id=2935): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x500, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0xe4ff}) 18.637557262s ago: executing program 4 (id=2908): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, 0x0, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000140)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x361301, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, 0x0) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSETD(r4, 0x541b, &(0x7f0000000ec0)=0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="4001000016000100000000000000000000000000000000000000000000000000ac1e00010000000000000000000000000000000000030000000080803a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000003d000004d633000000e00000010002000000000000000000000000000000000000000000000000000080000000000000000000000000000000ffffffffffffffff01000000000000000600000000000000d306000000000000000000000000000000000000000000000200000000000000fcfffffffffffbff000000000000000006000000000000000000000000000002be0000000000000000000000b1a001004800d2"], 0x140}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 18.479114576s ago: executing program 4 (id=2938): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x54a, &(0x7f0000000fc0)="$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") ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x1, '\x00', 0x0, r2, 0x1, 0x5, 0x5}, 0x50) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) 18.240340987s ago: executing program 4 (id=2940): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000041401000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4008055}, 0x814) 12.864922356s ago: executing program 4 (id=2953): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x18, 0x2, 0x200, 0x0}) 12.860816447s ago: executing program 50 (id=2953): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x18, 0x2, 0x200, 0x0}) 9.570749974s ago: executing program 8 (id=2966): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 9.484732032s ago: executing program 8 (id=2967): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000000000)='V', 0x1}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x5) ftruncate(0xffffffffffffffff, 0x51a9497) waitid(0x2, 0x0, &(0x7f0000001280), 0x8, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000600)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc008e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29103"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0xee01, 0xee00) keyctl$read(0xb, r3, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair(0x22, 0x2, 0x22, &(0x7f00000006c0)) 9.316236447s ago: executing program 8 (id=2970): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000002180), 0x0) 9.017173723s ago: executing program 8 (id=2971): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x54a, &(0x7f0000000fc0)="$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") ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 8.481382919s ago: executing program 8 (id=2975): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7.088852411s ago: executing program 8 (id=2978): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="01002bbd7000ffdbdf2503000000280001800d0001007564703a73787a30000000001400028008000100bb34f2"], 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000040) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0xc5ec3, 0x0) io_setup(0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000000), 0x1, 0x4ee, &(0x7f0000001100)="$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") socket(0xa, 0x3, 0x3a) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) 7.039115645s ago: executing program 51 (id=2978): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="01002bbd7000ffdbdf2503000000280001800d0001007564703a73787a30000000001400028008000100bb34f2"], 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000040) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0xc5ec3, 0x0) io_setup(0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000000), 0x1, 0x4ee, &(0x7f0000001100)="$eJzs3VFrHFsdAPD/TLL3pm2um4si14L3XmwkvWh3kxvvbRCpFUSfCmp9jzHZhJBNNmQ3tQlFU/wAgogKPvnki+AHEKQfQYSCvosWRbTVBx+0Izs7sW26m6Qkzaab3w9O95w5s/M/Z5o9s7NzmAngzHo3Iq5HxFBEvBcR5WJ5WqTZIrXXe/Twznw7JZFlN/+eRFIs291WuzwcERciYiciRiLiG1+N+HbyfNzm1vbKXL1e2yjK1dbqerW5tX1leXVuqbZUW5uenvpw5urMBzOTWeFI/bwYEde+/ODHP/jFV6795rPf+ePsXy9/t92sL3y80+6ImD9SgB462y7l+2JXex9tvIxgfTBU9KfU74YAAHAo4xFxKSI+lX//L8dQ/m0OAAAAGCTZF0fjP0lEBgAAAAysNCJGI0krxXzf0UjTSqUzh/djcT6tN5qtzyw2NtcW2nURY1FKF5frtclirvBYlJJ2eSrPPym/v6c8HRFvRsSPyufycmW+UV/o948fAAAAcEZceOfZ8/9/ldM8DwAAAAyYsZ4FAAAAYFA45QcAAIDB5/wfAAAABtrXbtxop2z3Od4Lt7Y2Vxq3rizUmiuV1c35ynxjY72y1Ggs5ffsWz1oe/VGY/1zsbZ5u9qqNVvV5tb27Gpjc601u/zMI7ABAACAE/TmO/f+kETEzufP5SmK+wDuNXTiLQNOlT/3uwHAcXJch7NruN8NAPqmdOAaRggYdMkB9T0n7/z2+NsCAAC8HBOfeP76/2tF3cG/DQCvsm5zfQCAwebqHpxdJTMA4cwb77y83qv+6Nf/s+yFGwUAAByr0TwlaaW4FjgaaVqpRLyRPxaglCwu12uTEfGRiPh9ufR6uzyVvzM5cM4wAAAAAAAAAAAAAAAAAAAAAAAAANCRZUlk3SRdlwIAAACvoIj0L0l+N/+IifL46N7fB15L/l2OB0XhZzd/cnuu1dqYai//Rzmvj4jWT4vl72ceCQAAAACnQOc8vXid6ndrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg0jx7emd9NJxn3b1+KiLFu8YdjJH8diVJEnP9nEsNPvS+JiKFjiL9zNyLe6hY/icdZlo0VregW/9xLjj+W75ru8dOIuHAM8eEsu9cef653+/yl8W7+2v3zN1yko+o9/qX/H/+Geow/bxwyxsX7v6r2jH834uJw9/FnN37SI/6lQ8b/1je3t3vVZT+PmOh6/EmeiVVtra5Xm1vbV5ZX55ZqS7W16empD2euznwwM1ldXK7Xin+7xvjhJ3/9eL/+n+8Rf+yA/o8fsv//vX/74Uc72VK3+JcvdT/+vtUjfloc+z5d5Nv1E7v5nU7+aW//8ndv79f/hR79P+j///Ih+//e17//p0OuCgCcgObW9spcvV7b2Cczcoh1ZF4kUzodzThFmex7nb/Ho23niG9/LpP1e7f0MdPvkQkAADhuT77097slAAAAAAAAAAAAAAAAAAAAcHadxO3E9sbc6U9XAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD29b8AAAD//3iP3Ow=") socket(0xa, 0x3, 0x3a) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) 6.440480928s ago: executing program 1 (id=2936): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x8000000004) setresuid(0x0, 0xee01, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) r4 = syz_open_dev$evdev(&(0x7f0000001100), 0x3, 0x103101) write$evdev(r4, &(0x7f00000011c0)=[{{0x0, 0x2710}, 0x2, 0xff1e, 0xffffffff}, {{0x0, 0x2710}, 0x3, 0x2, 0x5}], 0x30) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x1, 0x0, 0x3, r7, 0x72fb2cc9}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x691]}}, 0x5c) 6.124694035s ago: executing program 1 (id=2986): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.002279286s ago: executing program 1 (id=2987): setfsgid(0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000040000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x80) 5.877658397s ago: executing program 1 (id=2990): socket$inet(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) pwritev2(r0, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0x1}], 0x1, 0x2fff, 0x0, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB="0000000000000000ffe100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0xfd, 0x0, 0x0, 0x0, 0xf8c, 0xa518, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xabca, 0x5, 0xa, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r2) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c000081", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf251c0000000800040000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xa3) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x194, r3, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x2}, @NFC_ATTR_VENDOR_DATA={0xe3, 0x1f, "827a0d42ad79db99474cde23dac05b715ec33260683ed3d66be63682baa6e8bfe607de0e2ac061b0151578e839ae1661ff3148f8ebbd1d9464d0e1347e2de705cbf4692acdc7a7679257a98e8cc8b210147d51c79e2661cb5dda1fa5bcd35f9e314e6086399deba0b5cd883a6c1060732655e8dc00aba5d5ed191378b938c93ba1070150776872a98c73cc60d042e1e1525de35ca31640722e63f76079cd151a01b3c140aecca3e62bc28c556763cb0c0e3d957fb0fccdd3cd0504a0ab9385e1e63fb648f54f0e4f42ea0e5f3939147fd727b10d3f3975d32026378b1b5851"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x2}, @NFC_ATTR_VENDOR_DATA={0x58, 0x1f, "76ee2971a32287c924c7a7eb04dc1ea73f391b6a8dd363d8b56306f82bd6230009cfaeaa91657adb8016c1a7853b499d43231aad5ea7856bd8b797545fada3d190d0a0b0af25a09850331fef858017380a9ef2f6"}, @NFC_ATTR_VENDOR_DATA={0x12, 0x1f, "202cba8e1e86cc58f2c34d48874c"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xffffffff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x3}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}]}, 0x194}, 0x1, 0x0, 0x0, 0xc000}, 0x10) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x10) fspick(r9, &(0x7f0000000040)='./file0\x00', 0x1) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x8181) syz_open_dev$evdev(&(0x7f0000000000), 0xaa1, 0x101002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) 4.371773128s ago: executing program 3 (id=2999): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0xa0, 0x6, 0x5268, 0x2, 0xe0, 0x4, 0x0}) 4.365444149s ago: executing program 3 (id=3001): getpeername(0xffffffffffffffff, 0x0, &(0x7f0000001e40)) 3.44351256s ago: executing program 3 (id=3003): r0 = memfd_create(&(0x7f0000000700)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\xae\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xac\b\x003\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\x06\x00\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x9c\xce\xf5|q+\t\x11G\x1c\xe7\x9e\x88\xfb\x96\xbe\v:0', 0x2) r1 = syz_io_uring_setup(0x133d, &(0x7f0000000340)={0x0, 0x7af1, 0x80, 0x4, 0x3da}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000003c0)=[r0], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index, 0x400000080001001, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x47f3, 0xfffffffe, 0x0, 0x0, 0x0) 3.379866665s ago: executing program 3 (id=3004): r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001180)={0x0, 0x48, &(0x7f0000001200)=[@in6={0xa, 0x4e24, 0x7, @mcast2, 0x6}, @in6={0xa, 0x4e22, 0x1, @private2, 0xb9}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2f}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x89c4c63c74665915, 0x8, 0x5}, &(0x7f0000000080)=0x10) getsockopt$netlink(r1, 0x10e, 0x2, &(0x7f00000010c0)=""/46, &(0x7f0000001140)=0x2e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='c'], 0xa) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000000080)=""/4066, &(0x7f0000001100)=0xfe2) 3.32108669s ago: executing program 3 (id=3005): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) syz_usb_connect(0x5, 0x34, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xaa, 0xe1, 0x63, 0x40, 0x1371, 0x9032, 0xf62, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x1, 0x0, 0x10, 0x4, [{{0x9, 0x4, 0x70, 0x0, 0x1, 0x83, 0xee, 0x12, 0x0, [], [{{0x9, 0x5, 0x4, 0x3, 0x10, 0x1, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7fff}]}}]}}]}}]}}, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r2) memfd_secret(0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @private0, 0x10}}, {{0xa, 0x4e21, 0x8, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xffffffff, @mcast1={0xff, 0x7}, 0xc1e1}}, {{0xa, 0x4001, 0x0, @mcast1}}}, 0x108) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20060090}, 0x0) close(0x3) 2.619322102s ago: executing program 1 (id=3007): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.510607061s ago: executing program 1 (id=3009): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') writev(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="83", 0x1}, {0x0}], 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000300000000000000000e0000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0000008500000006000000950000000000000000255a873ba4d860aacde11b2b9827395c02198e84f479009d3c1e13b7124d99d1132ca122fee8ff01805080cee93f7b94bae424d5d6bc0720a1b4bcc385a271ba11d6c78387e4a735f69cf0ee56"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r6 = socket$netlink(0x10, 0x3, 0x8) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000940)=""/29, 0x1d}], 0x1, 0x3, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r8}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2, {r7}}, './file0\x00'}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r12, r11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120800", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r0, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1d, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f0000000980), 0x8, 0xc5, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000c80)={0x0, 0x0}) syz_pidfd_open(r15, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f0000000b80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000001880)=@deltclass={0x16e4, 0x29, 0x8, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0xffff, 0xffe0}, {0xe, 0x4}, {0x6}}, [@c_cbq={{0x8}, {0x14, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x2, 0xb}, 0x4, 0x3}}]}}, @c_cbq={{0x8}, {0x44, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x4, 0x3, 0x1, 0x7f, 0x8, 0xa}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x2, 0x5, 0x7, 0xa, 0x9, 0x1abe}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xf9, 0x0, 0xf, 0x5c, 0xdd, 0x1574}}, @TCA_CBQ_RATE={0x10, 0x5, {0x84, 0x2, 0x6, 0x7ab, 0x2}}]}}, @c_atm={{0x8}, {0xf8, 0x2, [@TCA_ATM_HDR={0x18, 0x3, "52dbecaea19fd7cd37027b093667b97c33b32da8"}, @TCA_ATM_HDR={0x20, 0x3, "af2f3d183f54c770020363a01e4335598bd2d7dee483e265412844cf"}, @TCA_ATM_HDR={0x3a, 0x3, "36abc87e57ceef33a585f93f32100a5414b32f199f44f6a6e856fd97f3f002016b9a903ea359f576781272ba8549df267cee4446bff4"}, @TCA_ATM_FD={0x8, 0x1, r14}, @TCA_ATM_HDR={0x1d, 0x3, "14ee466a21548913022b18d5170c6bd29863a278bf4a710a55"}, @TCA_ATM_HDR={0x7, 0x3, "d72160"}, @TCA_ATM_HDR={0x9, 0x3, "98429007f3"}, @TCA_ATM_FD={0x0, 0x1, r7}]}}, @c_cbq={{0x8}, {0x82c, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x6, 0x8, 0x52, 0x1, 0xd, 0x6}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x1, 0x0, 0x8, 0x8, 0x40, 0xc, 0xffffffff, 0x3, 0x0, 0x10001, 0x5, 0x47, 0x1, 0xff, 0xb, 0x60, 0x9, 0x0, 0x7, 0x1f8, 0x10, 0x3c, 0x0, 0x6, 0xfffffffd, 0x10, 0x7, 0x5, 0x1, 0x6, 0x6, 0xadb2, 0x31, 0x6, 0x0, 0x10, 0x80, 0x3, 0x7fffffff, 0x2, 0x1, 0x7, 0x1, 0x5, 0x4, 0x10001, 0x7fffffff, 0x8, 0x7fff, 0x10001, 0x4c286764, 0xc0, 0x40, 0x345, 0x10, 0x1, 0xfffffffe, 0x4b, 0x200, 0x7, 0x6, 0x7, 0x6, 0x3, 0x0, 0x401, 0x400, 0xffffffff, 0x80, 0x7, 0x7, 0x7, 0x3, 0x8, 0x7, 0x1, 0x8, 0x6, 0x80000000, 0x4, 0x7, 0x7ff, 0x4, 0x6, 0x7, 0x2, 0x75, 0xff, 0x4, 0x3, 0xda, 0x6, 0x4, 0x9, 0x9, 0x2, 0x1, 0xffffffff, 0x2, 0x611c9eca, 0x393e, 0x0, 0x3, 0x401, 0x1, 0x6, 0x6, 0x4, 0x4, 0x7fff, 0x40, 0x5, 0xfffffff9, 0x3ff, 0x9, 0x3, 0x3, 0x40, 0x2, 0x5, 0x80, 0x1ff, 0xfffffffe, 0x0, 0x8, 0x2, 0x1, 0x8001, 0xb, 0x3, 0x80000001, 0xfffffffa, 0x3, 0x5, 0x5, 0xfffff000, 0xf, 0xb, 0x32, 0x4, 0x800, 0x10000, 0x5, 0x6, 0xc9, 0x15d0, 0x4, 0x2a, 0x0, 0x3, 0x0, 0x9, 0x6, 0x22, 0x1, 0x1, 0x80, 0x6, 0x81, 0x7, 0x200, 0x4a68, 0x0, 0x40, 0x1ff, 0x5, 0x9, 0x2, 0x73e4, 0x8000, 0x3, 0x7, 0x96da, 0x9, 0xca1a, 0x8, 0xf, 0xffff7a22, 0x3, 0xffffff77, 0x5, 0x5, 0x200, 0x6, 0x1, 0x2, 0x8, 0xf, 0x1, 0x53, 0x3, 0x23, 0x69d220eb, 0x0, 0x6, 0x2, 0x2, 0x4, 0x0, 0x0, 0xd, 0x1, 0x5, 0x5, 0x9, 0x7, 0x2, 0x7, 0x2, 0x6, 0x24000, 0x4, 0xffffff01, 0x7f, 0x100, 0x9, 0xfffffff7, 0x1, 0x9, 0x5c, 0x3, 0x1, 0xc40c, 0x4, 0xfff, 0xfff, 0x49, 0xffffffca, 0x6, 0x9, 0x1, 0xffffffff, 0x18e, 0x8, 0x5, 0x8, 0x8, 0x1, 0x6, 0x7200, 0x1d9, 0x2, 0x2, 0x9, 0x6, 0x1, 0x80, 0x5, 0x40, 0xffffff9f, 0x20000, 0x5, 0x1, 0x7, 0xfff, 0xb]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x3a, 0x1b4, 0x9, 0x5, 0x1f, 0x7, 0x21b, 0xca3d, 0x10001, 0x1000, 0x12, 0xc4, 0x1, 0xe2, 0x140000, 0x3, 0x7fffffff, 0x5, 0xb, 0x5dc, 0xffffffff, 0x6, 0x80000000, 0x84, 0xf4f, 0x27a, 0x7, 0x0, 0x8, 0x6, 0x4, 0x8, 0x6, 0xffff, 0x10000, 0x6, 0x4000, 0xc4, 0x0, 0xfffffffc, 0x6, 0x0, 0x10000, 0x7, 0x1, 0x5, 0x400, 0xb, 0x0, 0x5, 0x6, 0x5, 0x10, 0x8, 0x10000, 0x33c, 0xfffffffd, 0x8, 0xf, 0x1, 0x7fff, 0x0, 0x3, 0x1e, 0x1, 0x82, 0x0, 0x4, 0x1, 0x6, 0x6, 0xaa9d, 0xb, 0x7, 0x8001, 0x1, 0x3, 0x1000, 0xffffffff, 0x5, 0x4, 0x0, 0x678, 0x9, 0x3, 0x3, 0x0, 0x403c6add, 0x3, 0x6, 0x100, 0x80000001, 0x1, 0x9, 0x7ff, 0x1c, 0x8, 0x9, 0x7fffffff, 0xffffffff, 0x9, 0x6, 0x80, 0x3, 0x6, 0x2, 0xa, 0xc0000, 0x4, 0x0, 0x2, 0x5, 0x5, 0x8, 0x9, 0x3ff, 0x1, 0x7, 0xe, 0x0, 0x8, 0xc, 0x8, 0x4, 0xa6, 0x5, 0x6, 0xfff, 0x3, 0xfffffff8, 0x0, 0xffffffff, 0xea, 0x8, 0x5, 0xffff, 0x100, 0x7, 0xffff, 0x2, 0x2, 0x5, 0xe5f, 0x4, 0x8000, 0x1, 0x7, 0xfff, 0xfffffffa, 0x744, 0xd9c, 0xafb, 0x800, 0x5, 0x36b97553, 0xdb, 0x101, 0x2a3f20bb, 0x0, 0x2, 0xf56, 0x0, 0x3, 0x101, 0xe263, 0x80, 0x7, 0x3, 0x1, 0x5, 0xea5, 0x3, 0x2, 0x3, 0xfffffff2, 0x5, 0x9, 0xe, 0x9, 0x1, 0xffffffff, 0x2, 0xffffff00, 0x5, 0x3, 0xa438, 0x2, 0xb, 0x6, 0xfffffff9, 0xee2, 0x4, 0x7, 0x2, 0x0, 0xffffff69, 0x5, 0x5, 0x61, 0x80000001, 0x81, 0x3, 0xffffffff, 0x2, 0x298c, 0x6, 0x10, 0x401, 0xfffffff7, 0x4, 0x2, 0xa05, 0xfb5d, 0xec0, 0x6, 0xfffffffb, 0xdc2, 0x2, 0x6c0, 0x0, 0x5, 0x4, 0x6, 0xe1b0, 0xfffffffc, 0x6, 0xe9, 0x8001, 0xa, 0xb2f, 0x2, 0xfffffffa, 0x1, 0x2, 0x401, 0x3, 0x4, 0x690a, 0x0, 0xd9fc, 0x9, 0x8, 0x862, 0xc003, 0x9, 0x8, 0x4, 0x899, 0xffffe934, 0x1, 0x3, 0xe, 0x9, 0x7, 0xff, 0x35]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x2, 0xb}, 0x10, 0x8001}}]}}, @c_cbq={{0x8}, {0x894, 0x2, [@TCA_CBQ_LSSOPT={0x61, 0x1, {0x22, 0x2, 0x1e, 0x9, 0x8, 0x3, 0x934b, 0xd65}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x1, 0x4}, 0x2, 0x8}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xe}, 0x6, 0x1}}, @TCA_CBQ_RATE={0x10, 0x5, {0x4, 0x1, 0x17, 0xfffe, 0x3, 0x7}}, @TCA_CBQ_RATE={0x10, 0x5, {0x2, 0x2, 0xfffc, 0x1ff, 0x6, 0x5}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x88, 0x6, 0x22, 0x3b, 0x6, 0x6, 0x0, 0x2, 0xf03c, 0x3, 0x7, 0x6f5d, 0x7, 0xfffffff8, 0x6, 0x2, 0x8, 0x2, 0x0, 0x5, 0x5, 0x1, 0x259, 0x5, 0x4, 0x1, 0xa4f, 0x1, 0xc8a0, 0x5, 0x7fffffff, 0x1, 0x6, 0x1, 0xfffffff1, 0x7, 0xfffffbd7, 0x8000, 0x1, 0x9, 0x5, 0x0, 0x4, 0x58, 0x5, 0x9, 0x0, 0x5, 0xd37, 0x2, 0x67, 0xa, 0x0, 0x0, 0x2, 0xfffffffe, 0x8, 0x81, 0x100, 0x6, 0xb, 0x1, 0x9, 0xffffff80, 0x8, 0x5fe, 0xd, 0xa000, 0x0, 0x0, 0x0, 0x8, 0x7, 0x6c07, 0x400, 0x673, 0x80, 0x5, 0x7, 0x5, 0x8, 0xffff, 0x0, 0x3, 0x7774, 0x7, 0x7, 0x13ae, 0x0, 0x8, 0x1, 0x9, 0x8, 0x9, 0x4, 0x6, 0x9, 0x5, 0x2, 0x1, 0x6, 0x5a, 0xb6, 0x5, 0xc, 0xb, 0x3, 0x2, 0xe9e9, 0x946, 0x5, 0x664, 0xeb, 0xca65, 0x6, 0x0, 0xe8, 0x8, 0xffffffc2, 0x8, 0x0, 0x10, 0x4, 0x25, 0xe367, 0xef91, 0x1, 0x5bca, 0x9, 0x5, 0x7, 0x2, 0xffffffae, 0xfffffffc, 0x6, 0xe, 0x5, 0x1, 0x0, 0x3, 0x8, 0x40, 0x4144a318, 0x3, 0x0, 0x6, 0x4, 0x2, 0x7, 0x8, 0x1, 0x2, 0xc73d, 0x7a6, 0xd, 0x9, 0x9, 0xb6f, 0x4, 0x6, 0x4, 0x6, 0xa6, 0x8, 0x8, 0x8000, 0x1, 0x5, 0x24, 0x10000, 0xfffffffc, 0x695, 0x5, 0x4, 0x80000000, 0x44, 0xd, 0x10000, 0x380, 0x0, 0x8, 0x7fe000, 0x5, 0x7, 0x68, 0x8, 0x2, 0x0, 0xfff, 0x1, 0x5, 0x3, 0x0, 0x101, 0x2, 0x101, 0xa, 0x0, 0x6, 0x101, 0x4, 0x5, 0x8, 0xee3, 0xd, 0x0, 0x8, 0x0, 0x2, 0x2, 0x930, 0x1, 0x7, 0x9, 0x3, 0x5, 0x8, 0xc8c2, 0x4, 0xffffffff, 0x0, 0x9, 0x10, 0xe3, 0x10000, 0x9, 0x7fffffff, 0x5, 0x2, 0x3, 0x2, 0x2, 0x6, 0x7fffffff, 0xffffff80, 0x6, 0x3, 0x7, 0x7f80, 0x7, 0x4, 0x2, 0x9, 0x8, 0x5, 0x7fffffff, 0xfffffffb, 0x9, 0x2, 0x101, 0x954, 0x5, 0x10, 0x7, 0xfffffff8, 0x3]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x6, 0xffff}, 0x0, 0xffffff00}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x6, 0x3}, 0xc, 0x2}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x2, 0x0, 0x8, 0x4, 0x2, 0x44, 0xa, 0x7ff, 0x3, 0x3, 0x3ff, 0x4, 0x3ff, 0x4, 0xc, 0x5, 0x9, 0x0, 0x5, 0x4, 0x9, 0xd3, 0x3, 0x8, 0x3, 0x9, 0x23, 0x40, 0x3, 0x1, 0x400, 0x5, 0x1c00, 0xb92, 0x6d9c, 0x9, 0x401, 0x0, 0x5, 0x4, 0x8, 0xa, 0x8, 0x0, 0x1, 0x40, 0x800, 0x0, 0x1, 0x8000, 0xfff, 0x8, 0xd73d, 0x5, 0x9, 0x9, 0x9, 0x8, 0x3, 0xafe, 0x6466, 0x7f, 0x4, 0x9, 0x0, 0x3, 0xff, 0x9, 0x8, 0xd38, 0xe, 0x1d, 0x1, 0xfff, 0x1, 0x5, 0xb3, 0x3, 0x7f, 0xfff, 0x9, 0x80, 0xfffffff0, 0x9, 0xff, 0xe, 0x0, 0x8, 0x5, 0x7, 0x0, 0xf, 0xff50, 0x30000, 0x5, 0xfc000000, 0x3, 0x4, 0x5, 0x8, 0x9, 0x8001, 0x8, 0xf, 0xb2ec, 0x10000, 0xe, 0x4, 0x6, 0x3ff, 0x6, 0xffffffff, 0x1ff, 0x371aa154, 0xb34, 0x7348, 0x6, 0x7fffffff, 0x6, 0x6, 0x200, 0x2, 0x7, 0x8, 0x9, 0x6, 0x9, 0xed50, 0x3, 0x7, 0xb0ad, 0x6a, 0x6623, 0x9, 0xfff, 0xffff, 0x3ff, 0x7fffffff, 0x1, 0x9, 0xffffffb2, 0x3, 0x7, 0x100, 0x100, 0x2, 0xfffffff3, 0xffffffff, 0x5, 0x5, 0xf, 0x1, 0x3, 0x6, 0x0, 0x8001, 0x80, 0x4, 0xfffffff2, 0xd4, 0x4, 0x10001, 0x101, 0x6, 0xf, 0xeb, 0x7, 0xd5, 0x8000, 0x7, 0x9, 0x8, 0x2, 0x7, 0x9, 0xe8, 0x7, 0x6, 0x3c2c, 0x9, 0x0, 0x9, 0x2, 0x20, 0x9, 0x1, 0x3ff, 0x100, 0x5, 0x1, 0x4, 0x7f, 0x2, 0x8, 0x5, 0x5, 0xffff, 0x200, 0x7, 0x0, 0xb, 0x6, 0x4, 0x2, 0x1a, 0xca39, 0x9e3, 0x1, 0x7, 0xd, 0x7, 0x4db, 0xe49c1fea, 0x4, 0x7, 0x80000000, 0x2, 0xb, 0x5, 0x977b, 0x6, 0x81, 0x87, 0x3, 0xad3, 0x1, 0x81, 0xfffffffe, 0x9, 0x6, 0x9, 0xff, 0x5, 0x9, 0x0, 0x9, 0xfffffeff, 0x80000000, 0x4, 0x3, 0x3, 0x4, 0x8, 0xffffffff, 0x5, 0xfff, 0x7, 0x6, 0x40, 0xff, 0x400, 0x4, 0x925, 0x8, 0xfffff801, 0x80000001]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x6, 0xfff3}, 0x2, 0x8001}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5}}}, @c_cbq={{0x8}, {0x34, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x7, 0x4, 0x3a, 0x7, 0x2, 0x6f2}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xb, 0x3, 0x0, 0xbd, 0x5, 0x8000}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xfc, 0x0, 0x0, 0x7, 0x9, 0x9}}]}}, @c_cbq={{0x8}, {0x418, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x2, 0xa}, 0x10000, 0xbe}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x2, 0x6, 0x3, 0x80000000, 0x8, 0x7fff, 0x9b, 0x5, 0xfe, 0x4, 0x2, 0xb, 0x7b3, 0x8deb, 0x3, 0x3507, 0x40, 0x9, 0xfffffffc, 0x0, 0x3, 0x2, 0x9, 0x401, 0x9, 0x0, 0x8, 0xffffffff, 0x9, 0x3, 0x0, 0x0, 0x81, 0xfffffffc, 0x4, 0x7, 0x1000, 0x41, 0x4, 0xc, 0x7, 0x0, 0x5, 0x5, 0x0, 0x8, 0x5, 0x6, 0x81, 0x0, 0x851, 0x4, 0x3ff, 0x2, 0x5, 0x6, 0x5, 0x1, 0x56b, 0x401, 0x4, 0x1000000, 0x4, 0x0, 0xff, 0xff, 0xdfc, 0x0, 0x758, 0x7fff, 0xb9, 0x8, 0x8, 0x7, 0x2, 0x3, 0x5, 0x9, 0x8, 0x5, 0x3, 0x6, 0xfffffc01, 0x5, 0x9, 0x2, 0x1, 0x3, 0x1, 0x80, 0x9, 0x80000001, 0x100, 0xf, 0x6, 0xfb5, 0xfffffff7, 0x9, 0x5, 0x5, 0x800, 0x5, 0x8, 0x400, 0x7ff, 0x0, 0x1, 0xbea, 0x8, 0x7, 0x5, 0x1, 0x4, 0x0, 0x6, 0x8, 0x9, 0x0, 0x6, 0x7ff, 0x200, 0x2, 0x1, 0x4, 0x7, 0x62, 0xfff, 0x3c8, 0x6, 0x9, 0x1e9d9c8b, 0xffffffff, 0x80000000, 0x6, 0xff, 0x2, 0x1000000, 0x8001, 0xc, 0x8, 0x7, 0x2, 0x3, 0x3, 0x9, 0x40, 0x1000, 0x388d, 0x8, 0x6, 0x9, 0x2, 0x6, 0xfff, 0xf, 0xe164, 0x8, 0x33, 0x3, 0x2, 0x2, 0xa, 0x400, 0xd, 0x3, 0x8fa26b8, 0x6, 0x9b, 0xffffffc0, 0x5, 0xd7bf, 0x0, 0xfff, 0x600000, 0x0, 0x1400, 0x0, 0x8, 0xd, 0x8, 0x8, 0x1aa42, 0x7, 0x9, 0x6, 0x4be, 0x8, 0x8, 0xfff, 0x8, 0x5, 0xf, 0x2695, 0x2, 0x9, 0x5, 0x4b4, 0x6, 0xc, 0xfffffffb, 0xe, 0xfffffffb, 0x3502656f, 0x1ff, 0xfffffff9, 0x2, 0x4, 0x7, 0x200, 0xe, 0x8000, 0x7f, 0x1, 0x8000, 0x2, 0x7ff, 0x1, 0x10001, 0x80, 0x400, 0x400, 0xe72, 0x7, 0x800, 0x40, 0xa, 0x0, 0x3, 0x2, 0x3, 0x28, 0x6, 0xa10, 0x101, 0x200, 0x1, 0x6, 0xd0e, 0x81, 0xff, 0x2a, 0x7f, 0x2, 0x0, 0xc, 0x0, 0x3, 0x2, 0x2, 0x180, 0x1ff, 0xf39a, 0xfffffffa, 0xffffffff, 0x9]}]}}, @c_atm={{0x8}, {0xc, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xffe6, 0xe}}]}}]}, 0x16e4}, 0x1, 0x0, 0x0, 0x10}, 0x20000880) 2.247626864s ago: executing program 5 (id=3013): r0 = memfd_create(&(0x7f0000000700)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\xae\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xac\b\x003\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\x06\x00\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x9c\xce\xf5|q+\t\x11G\x1c\xe7\x9e\x88\xfb\x96\xbe\v:0', 0x2) r1 = syz_io_uring_setup(0x133d, &(0x7f0000000340)={0x0, 0x7af1, 0x80, 0x4, 0x3da}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000003c0)=[r0], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index, 0x400000080001001, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x47f3, 0xfffffffe, 0x0, 0x0, 0x0) 2.223489236s ago: executing program 5 (id=3014): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x401, &(0x7f0000000040)) syslog(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x48030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_bp={0x0, 0xa}, 0x4, 0x6, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, r0, 0xdfffffffffbfffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$nl_netfilter(0x10, 0x3, 0xc) preadv(r1, &(0x7f0000000480)=[{0x0}], 0x1, 0xfffffe01, 0x800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x20075}, 0x38) epoll_create1(0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$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") r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0100000007000000080000000800000040000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000500), 0xce, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r5, &(0x7f00000006c0), 0x0}, 0x20) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) 1.123904682s ago: executing program 0 (id=3015): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000020000003c000180060001000a00000008000500"], 0x50}}, 0x0) 1.097014285s ago: executing program 5 (id=3016): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x14, &(0x7f0000001940)=ANY=[@ANYBLOB="180000005403000000000000010000000907a1000a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b303000000000000850000ecdf000000b700000000000000181100019ca6dd6164975f31939a4b05457415960cc20f29812620c6c5931f1c4c068ab5ba218e83cf534a91728f9320cfe8a3514c5813b9a7", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000850000002a000000184900000000000000000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x63, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r2, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040), 0x200000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, 0x0, &(0x7f0000000040)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0x4e22, 0xb, 0xffff, 0x0, 0xa, 0x0, 0x0, 0x3c, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1, 0x9, 0x6}}, [@tmpl={0x104, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@remote, 0x34ff, 0x0, 0x2, 0x0, 0x0, 0x7, 0x1}, {{@in=@local, 0x0, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0xfffffffd, 0x0, 0x3, 0x0, 0x800, 0x800}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x34ff, 0x1, 0x0, 0x0, 0x8}, {{@in=@dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x2b}, 0xa, @in6=@mcast1, 0x0, 0x1, 0x2, 0x0, 0x10000}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0xc000}, 0x0) getsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_emit_ethernet(0x83, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x4d, 0x6, 0x0, @local, @local, {[], {{0x3, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2}, {"56802cfa5ff701f202de08691e12a9ec0c6f997ed174dfc76032d8e0205da3076fc2152b03eda2936768545d5e4d7573f00ddddee3348eacf2"}}}}}}}, 0x0) 1.075955627s ago: executing program 0 (id=3017): unshare(0x8000280) syz_clone(0x6140500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.001082483s ago: executing program 0 (id=3018): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 964.981766ms ago: executing program 0 (id=3019): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000000000000095000000000000009e574bffff1729aba9b39a58e3cd8757e44cf3611b8e327a0279acba1f7791408d1efa421239728e2e5cc319b58520609dfd4a1a021d000000000000efffff75c3d894d99aef659f8b0000c515d8c219fbd9da31fc3ce3e9a2653000aec385a84a3d3f466bba30ac1486a70037fb03adef1a427fb0f4cb"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f00000000c0)={0x18}) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000000000000000000000a01010100000000000000000000000000000003000000000a00000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffffffffffff0000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000001e0000000000000001000000040000000000000000000000fdffffffffffffff0600000000000000040000000000000000000100000000008401050020010000000000000000000000000001000000002b00000000000000fc010000000000000000000000000001000000000000ff000000000000000000000000000000000000000000000000000000000100000000320000000000000000000000000000000000ffffac1e0001feffbfff0000000000000000000000000700000000000000000000000000000000000001000000003c00000002000000fe8800000000000000000000000001010100000001030000000000000000000009000000ff020000000000000000000000000001000000003200000002000000200100000000000000000000000000010000000000000000000000000300000000000000e0000002000000000000000000000000000000002b0000000200000064010100000000000000000000000000ffffffff0002"], 0x23c}}, 0x8000000) setsockopt$sock_int(r1, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) close(0x3) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040)=0x80000000, 0x4) recvmmsg(r1, &(0x7f0000006a00)=[{{0x0, 0x0, 0x0}, 0x80000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/125, 0x7d}, 0x1ff}], 0x2, 0x40010020, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000002c0)={0x0, @generic={0x6, "44c03fb8af04ed0712290cbcabca"}, @tipc=@id={0x1e, 0x3, 0x1, {0x4e23, 0x2}}, @llc={0x1a, 0x3, 0x9, 0x5, 0x4d, 0x7f, @multicast}, 0x9351, 0x0, 0x0, 0x0, 0xdfa5, &(0x7f0000000200)='ipvlan1\x00', 0x6, 0x3, 0x81}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3cf6ffff0f000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800500060005000000"], 0x3c}, 0x1, 0x2000000000000000}, 0x40000) socket$isdn_base(0x22, 0x3, 0x0) 964.429276ms ago: executing program 5 (id=3020): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$FITHAW(r0, 0xc0045878) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x4, 0x20da, 0x1, 0xa, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000076000d0b00000000ffdbdf25030000df0000000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x83, 0xffffffff, 0x40}) lchown(&(0x7f0000000040)='.\x00', 0xee00, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x100, 0xc2) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000380)={0x9, 0x0, 0x5fe, 0xffffffff, 0xdae}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000030000000100000000000a040000000c0000000000000802000010001e0000"], &(0x7f0000000040)=""/77, 0x33, 0x4d, 0x1, 0x9, 0x10000, @value=r2}, 0x28) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$selinux_access(r3, 0x0, 0x0) 477.651298ms ago: executing program 5 (id=3021): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, 0x0, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000140)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x361301, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, 0x0) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSETD(r4, 0x541b, &(0x7f0000000ec0)=0x18) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="4001000016000100000000000000000000000000000000000000000000000000ac1e00010000000000000000000000000000000000030000000080803a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000003d000004d633000000e00000010002000000000000000000000000000000000000000000000000000080000000000000000000000000000000ffffffffffffffff01000000000000000600000000000000d306000000000000000000000000000000000000000000000200000000000000fcfffffffffffbff000000000000000006000000000000000000000000000002be0000000000000000000000b1a001004800d2"], 0x140}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 420.070684ms ago: executing program 5 (id=3022): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd7000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 12.935019ms ago: executing program 0 (id=3023): r0 = memfd_create(&(0x7f0000000700)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\xae\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xac\b\x003\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\x06\x00\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x9c\xce\xf5|q+\t\x11G\x1c\xe7\x9e\x88\xfb\x96\xbe\v:0', 0x2) r1 = syz_io_uring_setup(0x133d, &(0x7f0000000340)={0x0, 0x7af1, 0x80, 0x4, 0x3da}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000003c0)=[r0], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index, 0x400000080001001, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x47f3, 0xfffffffe, 0x0, 0x0, 0x0) 8.95033ms ago: executing program 0 (id=3024): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x401, &(0x7f0000000040)) syslog(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x48030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_bp={0x0, 0xa}, 0x4, 0x6, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, r0, 0xdfffffffffbfffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) preadv(r1, &(0x7f0000000480)=[{0x0}], 0x1, 0xfffffe01, 0x800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x20075}, 0x38) epoll_create1(0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$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") r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0100000007000000080000000800000040000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000500), 0xce, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r5, &(0x7f00000006c0), 0x0}, 0x20) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) 0s ago: executing program 3 (id=3025): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x3e) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x84002, 0x0) ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f00000001c0)) r1 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc010000000000000000000000000001ac1414bb00000000000000000000000000000400100000000200201084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000dffff7ffffffffff00000000"], 0xb8}}, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x300}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x5, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860b, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x6, 0x80000001, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x2, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x6, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000700000000440012800b0001006272696467650000340002800c00230006000000000000000c002100030000000000000005002500010000000500170001000000080024"], 0x64}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800) kernel console output (not intermixed with test programs): 057][ T7203] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /346/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 396.175764][ T28] audit: type=1326 audit(1771827259.308:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15273 comm="syz.2.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357fc8c629 code=0x7ffc0000 [ 396.200532][ T28] audit: type=1326 audit(1771827259.308:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15273 comm="syz.2.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357fc8c629 code=0x7ffc0000 [ 396.237685][ T28] audit: type=1326 audit(1771827259.308:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15273 comm="syz.2.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f357fc8c629 code=0x7ffc0000 [ 396.262916][ T28] audit: type=1326 audit(1771827259.308:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15273 comm="syz.2.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357fc8c629 code=0x7ffc0000 [ 396.289608][ T28] audit: type=1326 audit(1771827259.308:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15273 comm="syz.2.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357fc8c629 code=0x7ffc0000 [ 396.314135][ T7203] EXT4-fs error (device loop0): ext4_readdir:265: inode #12: block 32: comm syz-executor: path /346/file0/file0: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 396.348050][ T7203] EXT4-fs error (device loop0): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 396.376372][ T28] audit: type=1326 audit(1771827259.308:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15273 comm="syz.2.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357fc8c629 code=0x7ffc0000 [ 396.405502][ T7203] EXT4-fs warning (device loop0): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 396.429980][ T7203] EXT4-fs error (device loop0): ext4_readdir:265: inode #12: block 32: comm syz-executor: path /346/file0/file0: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 396.438489][T15288] delete_channel: no stack [ 396.468648][ T28] audit: type=1326 audit(1771827259.308:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15273 comm="syz.2.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f357fc8c629 code=0x7ffc0000 [ 396.506115][ T28] audit: type=1326 audit(1771827259.308:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15273 comm="syz.2.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357fc8c629 code=0x7ffc0000 [ 396.530690][T15288] delete_channel: no stack [ 396.530756][ T7203] EXT4-fs error (device loop0): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 396.571761][ T7203] EXT4-fs warning (device loop0): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 396.584619][ T7203] EXT4-fs error (device loop0): ext4_readdir:265: inode #12: block 32: comm syz-executor: path /346/file0/file0: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 396.608108][ T7203] EXT4-fs error (device loop0): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 396.620134][T15295] delete_channel: no stack [ 396.632618][ T7203] EXT4-fs warning (device loop0): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 396.646411][ T7203] EXT4-fs warning (device loop0): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 396.659131][ T7203] EXT4-fs warning (device loop0): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 396.671318][ T7203] EXT4-fs warning (device loop0): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 396.684277][ T7203] EXT4-fs warning (device loop0): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 396.693609][T15295] delete_channel: no stack [ 396.703023][ T7203] EXT4-fs warning (device loop0): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 396.723966][ T7203] EXT4-fs warning (device loop0): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 396.738898][ T7203] EXT4-fs warning (device loop0): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 396.773351][T15300] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2703'. [ 396.812969][T15302] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2704'. [ 396.822333][T15302] tipc: Enabling of bearer rejected, failed to enable media [ 396.835496][T15302] loop2: detected capacity change from 0 to 512 [ 396.859810][T15302] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2704: couldn't read orphan inode 26 (err -116) [ 396.879911][T15308] delete_channel: no stack [ 396.886202][T15308] delete_channel: no stack [ 396.917592][T15302] loop2: lost filesystem error report for type 5 error -116 [ 396.921141][T15302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.941822][T15302] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.953065][T15302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.099080][T15312] loop8: detected capacity change from 0 to 512 [ 397.129588][T15312] EXT4-fs: Ignoring removed nobh option [ 397.211450][T15312] EXT4-fs (loop8): 1 orphan inode deleted [ 397.229770][T15312] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.317439][T15312] can0: slcan on ttyS3. [ 397.545546][T15312] can0 (unregistered): slcan off ttyS3. [ 397.654331][T15321] loop6: detected capacity change from 0 to 1024 [ 397.681454][T15321] EXT4-fs (loop6): stripe (2568) is not aligned with cluster size (4096), stripe is disabled [ 397.704587][T15321] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 2: comm syz.6.2711: lblock 2 mapped to illegal pblock 2 (length 1) [ 397.761433][T15321] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 397.764567][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 397.780130][ C0] EXT4-fs (loop6): initial error at time 1771827260: ext4_map_blocks:776: inode 3: block 2 [ 397.790206][ C0] EXT4-fs (loop6): last error at time 1771827260: ext4_map_blocks:776: inode 3: block 2 [ 397.797634][ T7203] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.808871][T15321] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 48: comm syz.6.2711: lblock 0 mapped to illegal pblock 48 (length 1) [ 397.808955][T15321] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 397.814267][T15328] loop2: detected capacity change from 0 to 128 [ 397.838146][T15310] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #2: block 13: comm syz.8.2707: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 397.841464][T15328] vfat: Unknown parameter 'ÿÿÿÿ' [ 397.863188][T15321] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.2711: Failed to acquire dquot type 0 [ 397.886868][T15330] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2715'. [ 397.898565][T15321] loop6: lost filesystem error report for type 5 error -117 [ 397.898730][T15321] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 397.915859][T15321] loop6: lost filesystem error report for type 5 error -117 [ 397.916016][T15321] EXT4-fs error (device loop6): ext4_evict_inode:255: inode #11: comm syz.6.2711: mark_inode_dirty error [ 397.926527][ T7049] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.936251][T15321] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 397.943985][T15330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2715'. [ 397.962706][T15321] EXT4-fs warning (device loop6): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 397.976704][ T70] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.994093][T15321] EXT4-fs (loop6): 1 orphan inode deleted [ 398.006079][ T108] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 398.019364][T15321] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.036483][ T108] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 398.036720][ T108] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:5: Failed to release dquot type 0 [ 398.061134][ T108] loop6: lost filesystem error report for type 5 error -117 [ 398.081181][T15328] batadv_slave_1: entered promiscuous mode [ 398.119580][T15333] delete_channel: no stack [ 398.127798][ T70] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.133345][T15333] delete_channel: no stack [ 398.153570][T15327] batadv_slave_1: left promiscuous mode [ 398.159931][ T6889] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.177621][ T36] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 398.194813][ T70] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.210568][ T36] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 398.210749][ T36] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:2: Failed to release dquot type 0 [ 398.231733][ T36] loop6: lost filesystem error report for type 5 error -117 [ 398.232012][ T6889] EXT4-fs error (device loop6): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 398.254392][ T6889] loop6: lost filesystem error report for type 5 error -117 [ 398.263314][T15345] loop2: detected capacity change from 0 to 2048 [ 398.290560][ T6889] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 398.300437][ T6889] loop6: lost filesystem error report for type 5 error -117 [ 398.305583][ T6889] EXT4-fs error (device loop6): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 398.324331][ T6889] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 398.343816][T15345] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.365036][T15345] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.383726][T15353] loop8: detected capacity change from 0 to 1024 [ 398.389282][ T70] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.391653][T15353] ext4: Bad value for 'resuid' [ 398.405369][T15353] ext4: Bad value for 'resuid' [ 398.433899][T15357] loop6: detected capacity change from 0 to 128 [ 398.470211][T15361] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2724'. [ 398.479443][T15361] tipc: Enabling of bearer rejected, failed to enable media [ 398.507657][T15361] loop3: detected capacity change from 0 to 512 [ 398.616552][ T70] bridge0: port 3(team0) entered disabled state [ 398.629527][T10552] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.639679][ T70] bridge_slave_0: left allmulticast mode [ 398.649134][ T70] bridge_slave_0: left promiscuous mode [ 398.664855][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.719059][T15377] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2729'. [ 398.728238][T15377] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2729'. [ 398.740531][T15378] loop3: detected capacity change from 0 to 512 [ 398.867401][T15380] loop2: detected capacity change from 0 to 512 [ 398.879759][T15380] EXT4-fs: Ignoring removed nobh option [ 398.984765][T15380] EXT4-fs (loop2): 1 orphan inode deleted [ 399.012671][T15380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.534769][T15380] slcan: can't register candev [ 399.540631][T15375] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.2727: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 399.575812][T10552] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.787656][T15386] EXT4-fs: Ignoring removed nobh option [ 399.808850][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.917977][T15386] EXT4-fs (loop2): 1 orphan inode deleted [ 399.935364][T15386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.213619][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.224730][ T70] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 400.237478][ T70] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 400.246991][ T70] bond0 (unregistering): Released all slaves [ 400.254861][ T70] bond1 (unregistering): Released all slaves [ 400.263764][ T70] bond2 (unregistering): Released all slaves [ 400.273104][T15372] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2728'. [ 400.283259][T15372] tipc: Enabling of bearer rejected, failed to enable media [ 400.353679][T15386] can0: slcan on ttyS3. [ 400.369397][ T70] tipc: Left network mode [ 400.369451][T15391] netlink: 'syz.6.2732': attribute type 1 has an invalid length. [ 400.382085][T15341] lo speed is unknown, defaulting to 1000 [ 400.388705][T15391] netlink: 'syz.6.2732': attribute type 1 has an invalid length. [ 400.396884][T15391] netlink: 'syz.6.2732': attribute type 1 has an invalid length. [ 400.405130][T15391] netlink: 'syz.6.2732': attribute type 1 has an invalid length. [ 400.412904][T15391] netlink: 'syz.6.2732': attribute type 1 has an invalid length. [ 400.420974][T15391] netlink: 'syz.6.2732': attribute type 1 has an invalid length. [ 400.459079][T15392] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2732'. [ 400.467047][T15391] netlink: 'syz.6.2732': attribute type 1 has an invalid length. [ 400.479263][T15391] netlink: 'syz.6.2732': attribute type 1 has an invalid length. [ 400.487418][T15391] netlink: 'syz.6.2732': attribute type 1 has an invalid length. [ 400.496401][T15391] netlink: 'syz.6.2732': attribute type 1 has an invalid length. [ 400.542976][ T70] hsr_slave_0: left promiscuous mode [ 400.548509][T15383] can0 (unregistered): slcan off ttyS3. [ 400.558907][ T70] hsr_slave_1: left promiscuous mode [ 400.559228][T15384] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.2730: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 400.575492][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.605059][T15396] delete_channel: no stack [ 400.614995][T15396] delete_channel: no stack [ 400.620053][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.621688][T10552] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.636913][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.644344][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.657089][ T70] veth1_macvtap: left promiscuous mode [ 400.662606][ T70] veth0_macvtap: left promiscuous mode [ 400.711370][ T70] veth1_vlan: left promiscuous mode [ 400.716986][T15405] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2734: couldn't read orphan inode 26 (err -116) [ 400.728502][ T70] veth0_vlan: left promiscuous mode [ 400.754615][T15405] loop6: lost filesystem error report for type 5 error -116 [ 400.755197][T15405] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.828382][T15405] ext4 filesystem being mounted at /396/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.846095][ T70] macvlan1 (unregistering): left promiscuous mode [ 400.855758][ T70] team0 (unregistering): Port device macvlan1 removed [ 400.865424][T15405] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.903159][ T70] team_slave_1 (unregistering): left promiscuous mode [ 400.921220][ T70] team_slave_1 (unregistering): left allmulticast mode [ 400.929422][ T70] team0 (unregistering): Port device team_slave_1 removed [ 400.941062][ T70] team_slave_0 (unregistering): left promiscuous mode [ 400.948075][ T70] team_slave_0 (unregistering): left allmulticast mode [ 400.955993][ T70] team0 (unregistering): Port device team_slave_0 removed [ 400.993481][T15400] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2734'. [ 401.002521][T15400] tipc: Enabling of bearer rejected, failed to enable media [ 401.011027][ T3421] infiniband syz1: ib_query_port failed (-19) [ 401.091611][T15341] chnl_net:caif_netlink_parms(): no params data found [ 401.150865][T15341] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.158215][T15341] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.166126][T15341] bridge_slave_0: entered allmulticast mode [ 401.172708][T15341] bridge_slave_0: entered promiscuous mode [ 401.180037][T15341] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.187215][T15341] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.194463][T15341] bridge_slave_1: entered allmulticast mode [ 401.201930][T15341] bridge_slave_1: entered promiscuous mode [ 401.220974][T15341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.232912][T15341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.256274][T15341] team0: Port device team_slave_0 added [ 401.263091][T15341] team0: Port device team_slave_1 added [ 401.279767][T15341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.287560][T15341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.313625][T15341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.325993][T15341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.332944][T15341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.361567][T15341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.394918][T15341] hsr_slave_0: entered promiscuous mode [ 401.401194][T15341] hsr_slave_1: entered promiscuous mode [ 401.407290][T15341] debugfs: 'hsr0' already exists in 'hsr' [ 401.413018][T15341] Cannot create hsr debugfs directory [ 401.662488][T15341] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 401.671723][T15341] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 401.681194][T15341] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 401.691787][T15341] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 401.739179][T15341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.754940][T15341] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.764357][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.771452][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.796508][ T108] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.803610][ T108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.831427][T15341] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 401.842613][T15341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 401.909587][T15341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.054127][T15341] veth0_vlan: entered promiscuous mode [ 402.062984][T15341] veth1_vlan: entered promiscuous mode [ 402.081050][T15341] veth0_macvtap: entered promiscuous mode [ 402.090529][T15341] veth1_macvtap: entered promiscuous mode [ 402.103138][T15341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.115515][T15341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.127598][ T36] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.137793][ T36] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.149859][ T36] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.158788][ T36] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.471534][T15570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.480219][T15570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.659337][T15672] set_capacity_and_notify: 2 callbacks suppressed [ 407.659353][T15672] loop2: detected capacity change from 0 to 764 [ 407.864577][T15680] loop8: detected capacity change from 0 to 512 [ 407.889781][T15682] validate_nla: 40 callbacks suppressed [ 407.889799][T15682] netlink: 'syz.3.2739': attribute type 36 has an invalid length. [ 407.910835][T15682] bridge15: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 407.920953][T15682] bridge15: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 407.935006][T15682] netlink: 'syz.3.2739': attribute type 10 has an invalid length. [ 407.945130][T15680] EXT4-fs: Ignoring removed nobh option [ 407.994698][T15681] hub 8-0:1.0: USB hub found [ 407.999750][T15681] hub 8-0:1.0: 8 ports detected [ 408.098534][T15680] EXT4-fs (loop8): 1 orphan inode deleted [ 408.119532][T15680] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.206425][T15680] can0: slcan on ttyS3. [ 408.674836][T15666] can0 (unregistered): slcan off ttyS3. [ 408.720804][T15674] loop6: detected capacity change from 0 to 8192 [ 408.768936][T15674] FAT-fs (loop6): error, clusters badly computed (2 != 1) [ 408.794757][T15674] FAT-fs (loop6): Filesystem has been set read-only [ 408.947203][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 408.947220][ T28] audit: type=1400 audit(1771827272.138:1558): avc: denied { setcheckreqprot } for pid=15693 comm="syz.2.2747" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 409.022076][ T7049] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.081532][ T28] audit: type=1400 audit(1771827272.268:1559): avc: denied { write } for pid=15696 comm="syz.6.2749" path="socket:[44735]" dev="sockfs" ino=44735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 409.153919][T15706] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20004 [ 409.171715][ T28] audit: type=1400 audit(1771827272.358:1560): avc: denied { getopt } for pid=15707 comm="syz.3.2751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 409.181158][T15716] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20004 [ 409.462353][T15730] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2756'. [ 409.536731][T15730] tipc: Enabling of bearer rejected, failed to enable media [ 409.549692][T15730] loop3: detected capacity change from 0 to 512 [ 409.702960][T15736] loop2: detected capacity change from 0 to 512 [ 409.715640][T15736] EXT4-fs: Ignoring removed nobh option [ 409.805477][T15737] loop8: detected capacity change from 0 to 512 [ 409.900962][T15736] EXT4-fs (loop2): 1 orphan inode deleted [ 409.932768][T15736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.025451][T15736] can0: slcan on ttyS3. [ 410.047648][T15737] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 410.134933][T15736] can0 (unregistered): slcan off ttyS3. [ 410.200152][T15737] EXT4-fs error (device loop8): xattr_find_entry:337: inode #15: comm syz.8.2758: corrupted xattr entries [ 410.212716][T15737] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 410.213771][T15737] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 410.223044][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 410.223082][ C0] EXT4-fs (loop8): initial error at time 1771827273: xattr_find_entry:337: inode 15 [ 410.223121][ C0] EXT4-fs (loop8): last error at time 1771827273: xattr_find_entry:337: inode 15 [ 410.262416][T15737] EXT4-fs (loop8): 1 orphan inode deleted [ 410.270471][T15737] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.322717][T15737] syz_tun: entered promiscuous mode [ 410.540481][T15747] loop3: detected capacity change from 0 to 512 [ 410.569691][T15747] EXT4-fs: Ignoring removed nobh option [ 410.650212][T15747] can0: slcan on ttyS3. [ 410.661106][T15733] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.2757: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 411.045537][T10552] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.103003][ T7049] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.194759][T15743] can0 (unregistered): slcan off ttyS3. [ 411.311032][T15768] loop2: detected capacity change from 0 to 512 [ 411.324193][T15768] EXT4-fs: Ignoring removed nobh option [ 411.542700][T15768] EXT4-fs (loop2): 1 orphan inode deleted [ 411.559418][T15768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.649120][T15768] can0: slcan on ttyS3. [ 411.855143][T15766] FAULT_INJECTION: forcing a failure. [ 411.855143][T15766] name failslab, interval 1, probability 0, space 0, times 0 [ 411.884931][T15768] can0 (unregistered): slcan off ttyS3. [ 411.889744][T15766] CPU: 0 UID: 0 PID: 15766 Comm: syz.9.2762 Tainted: G W syzkaller #0 PREEMPT(full) [ 411.889882][T15766] Tainted: [W]=WARN [ 411.889912][T15766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 411.889961][T15766] Call Trace: [ 411.889975][T15766] [ 411.890005][T15766] __dump_stack+0x1d/0x30 [ 411.890106][T15766] dump_stack_lvl+0x95/0xd0 [ 411.890231][T15766] dump_stack+0x15/0x1b [ 411.890304][T15766] should_fail_ex+0x263/0x280 [ 411.890377][T15766] should_failslab+0x8c/0xb0 [ 411.890491][T15766] __kmalloc_noprof+0xb8/0x4e0 [ 411.890563][T15766] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 411.890689][T15766] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 411.890851][T15766] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 411.891085][T15766] ? selinux_capable+0x31/0x40 [ 411.891144][T15766] ? security_capable+0x7b/0x90 [ 411.891174][T15766] ? ns_capable+0x7c/0xb0 [ 411.891207][T15766] genl_rcv_msg+0x432/0x470 [ 411.891332][T15766] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 411.891389][T15766] netlink_rcv_skb+0x123/0x220 [ 411.891423][T15766] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.891621][T15766] genl_rcv+0x28/0x40 [ 411.891756][T15766] netlink_unicast+0x5c0/0x690 [ 411.891838][T15766] netlink_sendmsg+0x5c8/0x6f0 [ 411.891976][T15766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.892065][T15766] ____sys_sendmsg+0x5af/0x600 [ 411.892139][T15766] ___sys_sendmsg+0x195/0x1e0 [ 411.892267][T15766] __x64_sys_sendmsg+0xd4/0x160 [ 411.892450][T15766] x64_sys_call+0x194c/0x3020 [ 411.892589][T15766] do_syscall_64+0x12c/0x370 [ 411.892704][T15766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.892777][T15766] RIP: 0033:0x7fc568a4c629 [ 411.892830][T15766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.892892][T15766] RSP: 002b:00007fc5674a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.893038][T15766] RAX: ffffffffffffffda RBX: 00007fc568cc5fa0 RCX: 00007fc568a4c629 [ 411.893090][T15766] RDX: 0000000000000030 RSI: 0000200000000140 RDI: 0000000000000007 [ 411.893132][T15766] RBP: 00007fc5674a7090 R08: 0000000000000000 R09: 0000000000000000 [ 411.893175][T15766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.893285][T15766] R13: 00007fc568cc6038 R14: 00007fc568cc5fa0 R15: 00007ffe569a9038 [ 411.893349][T15766] [ 412.194893][T10552] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.297857][T15786] loop2: detected capacity change from 0 to 256 [ 412.338688][T15786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2765'. [ 412.410019][T15794] loop9: detected capacity change from 0 to 512 [ 412.417252][T15794] EXT4-fs: Ignoring removed nobh option [ 413.153847][T15794] EXT4-fs (loop9): 1 orphan inode deleted [ 413.161388][T15794] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.438713][T15788] EXT4-fs error (device loop9): ext4_find_dest_de:2050: inode #2: block 13: comm syz.9.2766: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 413.503606][T15341] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.658005][T15815] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2769'. [ 413.699800][T15815] tipc: Enabling of bearer rejected, failed to enable media [ 413.812964][T15829] loop9: detected capacity change from 0 to 512 [ 413.839959][T15829] EXT4-fs: Ignoring removed nobh option [ 413.894830][T15815] loop2: detected capacity change from 0 to 512 [ 413.992619][T15829] EXT4-fs (loop9): 1 orphan inode deleted [ 414.008497][T15829] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.047249][T15815] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2769: couldn't read orphan inode 26 (err -116) [ 414.165598][T15839] loop6: detected capacity change from 0 to 512 [ 414.175505][T15815] loop2: lost filesystem error report for type 5 error -116 [ 414.183244][T15815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.235637][T15841] usb usb8: usbfs: process 15841 (syz.3.2774) did not claim interface 0 before use [ 414.254281][T15839] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 414.503566][T15848] loop8: detected capacity change from 0 to 512 [ 414.525600][T15848] EXT4-fs: Ignoring removed nobh option [ 414.547108][T15819] EXT4-fs error (device loop9): ext4_find_dest_de:2050: inode #2: block 13: comm syz.9.2770: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 414.564371][T15815] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.594797][T15798] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 64: padding at end of block bitmap is not set [ 414.713012][T15848] EXT4-fs (loop8): 1 orphan inode deleted [ 414.730982][T15848] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.836952][T15848] can0: slcan on ttyS3. [ 414.914869][T15839] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 414.935695][T15341] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.962143][T15815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.975714][T15848] can0 (unregistered): slcan off ttyS3. [ 414.986340][T15839] System zones: 0-1, 15-15, 18-18, 34-34 [ 414.992300][T15839] EXT4-fs (loop6): orphan cleanup on readonly fs [ 415.005475][T15839] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 415.024765][T15839] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 415.093887][ T7049] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.252413][T15863] loop3: detected capacity change from 0 to 512 [ 415.265918][T15863] EXT4-fs: Ignoring removed nobh option [ 415.297882][T15839] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 415.396969][T15839] EXT4-fs (loop6): 1 truncate cleaned up [ 415.474853][T15839] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 416.228664][T15870] delete_channel: no stack [ 416.271515][T15870] delete_channel: no stack [ 416.356875][T15881] loop8: detected capacity change from 0 to 512 [ 416.364121][T15881] EXT4-fs: Ignoring removed nobh option [ 416.468374][ T6889] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.492498][T15883] loop3: detected capacity change from 0 to 256 [ 416.586508][T15881] EXT4-fs (loop8): 1 orphan inode deleted [ 416.593735][T15881] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.678377][T15883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2782'. [ 416.963374][T15895] hub 8-0:1.0: USB hub found [ 416.968541][T15895] hub 8-0:1.0: 8 ports detected [ 416.983326][T15895] netlink: 'syz.2.2785': attribute type 36 has an invalid length. [ 416.995829][T15895] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 417.006940][T15895] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 417.021562][T15895] netlink: 'syz.2.2785': attribute type 10 has an invalid length. [ 417.251659][T15875] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #2: block 13: comm syz.8.2778: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 417.341414][ T7049] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.562414][T15907] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2789'. [ 417.572281][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2789'. [ 417.691295][T15916] delete_channel: no stack [ 417.701183][T15916] delete_channel: no stack [ 419.481326][T15927] loop2: detected capacity change from 0 to 512 [ 419.495979][T15927] EXT4-fs: Ignoring removed nobh option [ 419.592342][T15927] EXT4-fs (loop2): 1 orphan inode deleted [ 419.620087][T15927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.673100][T15923] can0: slcan on ttyS3. [ 419.852681][T15944] ipt_REJECT: ECHOREPLY no longer supported. [ 421.008520][T15948] loop8: detected capacity change from 0 to 512 [ 421.016213][T15948] EXT4-fs: Ignoring removed nobh option [ 421.054889][T15951] loop3: detected capacity change from 0 to 512 [ 421.061655][T15951] EXT4-fs: Ignoring removed nobh option [ 421.074631][T15919] can0 (unregistered): slcan off ttyS3. [ 421.087046][T15920] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.2791: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 421.090016][T15951] can0: slcan on ttyS3. [ 421.145118][T10552] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.165367][T15948] EXT4-fs (loop8): 1 orphan inode deleted [ 421.174701][T15951] can0 (unregistered): slcan off ttyS3. [ 421.174868][T15948] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.228217][T15941] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #2: block 13: comm syz.8.2793: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 422.274307][T15981] loop6: detected capacity change from 0 to 256 [ 422.465735][T15981] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2800'. [ 422.620940][T15982] loop9: detected capacity change from 0 to 512 [ 422.648532][T15982] EXT4-fs: Ignoring removed nobh option [ 422.821209][T15982] EXT4-fs (loop9): 1 orphan inode deleted [ 422.837055][T15982] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.918887][T15982] can0: slcan on ttyS3. [ 423.155700][ T7049] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.214587][T15971] can0 (unregistered): slcan off ttyS3. [ 423.224063][T15972] EXT4-fs error (device loop9): ext4_find_dest_de:2050: inode #2: block 13: comm syz.9.2799: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 423.272113][T15341] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.296747][T15990] usb usb8: usbfs: process 15990 (syz.8.2802) did not claim interface 0 before use [ 423.468688][T15998] delete_channel: no stack [ 423.474026][T15998] delete_channel: no stack [ 423.492226][T16003] delete_channel: no stack [ 423.514644][T16003] delete_channel: no stack [ 423.666347][T16010] loop6: detected capacity change from 0 to 512 [ 423.681610][T16010] EXT4-fs: Ignoring removed nobh option [ 423.795286][T16010] EXT4-fs (loop6): 1 orphan inode deleted [ 423.811862][T16010] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.913021][T16010] can0: slcan on ttyS3. [ 424.192233][T16022] loop9: detected capacity change from 0 to 512 [ 424.238286][T16022] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.256287][T16022] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.222745][T16022] EXT4-fs error (device loop9): ext4_readdir:265: inode #2: block 3: comm syz.9.2812: path /19/file0: bad entry in directory: directory entry overrun - offset=60, inode=113, rec_len=2048, size=2048 fake=0 [ 425.360320][T16022] EXT4-fs error (device loop9): ext4_readdir:265: inode #2: block 12: comm syz.9.2812: path /19/file0: bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 426.201230][T16022] EXT4-fs error (device loop9): ext4_readdir:265: inode #2: block 13: comm syz.9.2812: path /19/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 426.238384][T15341] EXT4-fs error (device loop9): ext4_readdir:265: inode #2: block 3: comm syz-executor: path /19/file0: bad entry in directory: directory entry overrun - offset=60, inode=113, rec_len=2048, size=2048 fake=0 [ 426.404629][T16001] can0 (unregistered): slcan off ttyS3. [ 426.639113][T16033] loop8: detected capacity change from 0 to 512 [ 426.647276][T16034] loop3: detected capacity change from 0 to 512 [ 426.653627][T16033] EXT4-fs: Ignoring removed nobh option [ 426.680141][T16034] EXT4-fs: Ignoring removed nobh option [ 426.770284][T16034] can0: slcan on ttyS3. [ 426.816639][T16002] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 13: comm syz.6.2808: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 426.867311][T15341] EXT4-fs error (device loop9): ext4_readdir:265: inode #2: block 12: comm syz-executor: path /19/file0: bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 426.895657][ T6889] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.924982][T16034] can0 (unregistered): slcan off ttyS3. [ 426.927551][T16033] EXT4-fs (loop8): 1 orphan inode deleted [ 426.942309][T16042] usb usb8: usbfs: process 16042 (syz.2.2817) did not claim interface 0 before use [ 426.942723][T16033] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.025555][T16031] can0: slcan on ttyS3. [ 427.098013][T15341] EXT4-fs error (device loop9): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /19/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 427.145483][T16031] can0 (unregistered): slcan off ttyS3. [ 427.210882][T16023] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #2: block 13: comm syz.8.2813: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 427.263844][ T7049] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.307796][T15341] EXT4-fs error (device loop9): ext4_readdir:265: inode #12: block 32: comm syz-executor: path /19/file0/file0: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 427.337067][T15341] EXT4-fs error (device loop9): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 427.375420][T15341] EXT4-fs warning (device loop9): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 427.401384][T15341] EXT4-fs error (device loop9): ext4_readdir:265: inode #12: block 32: comm syz-executor: path /19/file0/file0: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 427.443076][T15341] EXT4-fs error (device loop9): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 427.480265][T15341] EXT4-fs warning (device loop9): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 427.511925][T15341] EXT4-fs warning (device loop9): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 427.539101][T15341] EXT4-fs warning (device loop9): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 427.565685][T15341] EXT4-fs warning (device loop9): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 427.595580][T15341] EXT4-fs warning (device loop9): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 427.611415][T15341] EXT4-fs warning (device loop9): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 427.623763][T15341] EXT4-fs warning (device loop9): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 427.637338][T15341] EXT4-fs warning (device loop9): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 427.649666][T15341] EXT4-fs warning (device loop9): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 427.818348][T16067] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2818'. [ 427.893408][T16067] vlan2: entered promiscuous mode [ 427.903327][T15341] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.940037][T16067] veth1_to_bridge: entered promiscuous mode [ 428.117803][T16086] loop2: detected capacity change from 0 to 512 [ 428.298968][T16089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.307524][T16089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.565244][T16086] EXT4-fs: Ignoring removed nobh option [ 428.664808][T16086] EXT4-fs (loop2): 1 orphan inode deleted [ 428.680200][T16086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.765329][T13670] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.016125][T10552] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.054095][T13670] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.121246][T13670] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.190247][T16093] lo speed is unknown, defaulting to 1000 [ 429.242308][T13670] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.277327][T16093] chnl_net:caif_netlink_parms(): no params data found [ 429.319770][T16093] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.326960][T16093] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.334225][T16093] bridge_slave_0: entered allmulticast mode [ 429.342129][T16093] bridge_slave_0: entered promiscuous mode [ 429.351340][T16093] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.358645][T16093] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.366630][T16093] bridge_slave_1: entered allmulticast mode [ 429.374698][T16093] bridge_slave_1: entered promiscuous mode [ 429.394144][T16110] tipc: Failed to remove unknown binding: 66,0,0/0:165563816/165563818 [ 429.402568][T16110] tipc: Failed to remove unknown binding: 66,0,0/0:165563816/165563817 [ 429.466722][T16093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.529729][T16093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.602450][T16093] team0: Port device team_slave_0 added [ 429.613309][T16093] team0: Port device team_slave_1 added [ 429.658126][T16093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.665589][T16093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.692364][T16093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.709942][T16093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.718480][T16093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.748337][T16093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.828134][T16093] hsr_slave_0: entered promiscuous mode [ 429.840486][T16093] hsr_slave_1: entered promiscuous mode [ 429.847770][T16093] debugfs: 'hsr0' already exists in 'hsr' [ 429.853656][T16093] Cannot create hsr debugfs directory [ 429.865767][T13670] bridge_slave_1: left allmulticast mode [ 429.871802][T13670] bridge_slave_1: left promiscuous mode [ 429.879214][T13670] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.909355][T13670] bridge_slave_0: left allmulticast mode [ 429.915111][T13670] bridge_slave_0: left promiscuous mode [ 429.920885][T13670] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.028761][T13670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.041019][T13670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.051144][T13670] bond0 (unregistering): Released all slaves [ 430.134108][T13670] hsr_slave_0: left promiscuous mode [ 430.148814][T13670] hsr_slave_1: left promiscuous mode [ 430.154902][T13670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.162483][T13670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.177791][T13670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.194799][T13670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.206725][T13670] veth1_macvtap: left promiscuous mode [ 430.213939][T13670] veth0_macvtap: left promiscuous mode [ 430.224681][T13670] veth1_vlan: left promiscuous mode [ 430.242402][T13670] veth0_vlan: left promiscuous mode [ 430.254211][T16133] loop6: detected capacity change from 0 to 512 [ 430.401984][T16139] loop2: detected capacity change from 0 to 512 [ 430.413084][T16139] EXT4-fs: Ignoring removed nobh option [ 430.502396][T16133] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 430.552040][T16139] EXT4-fs (loop2): 1 orphan inode deleted [ 430.574186][T16139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.612080][T16133] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 430.675429][T16133] System zones: 0-1, 15-15, 18-18, 34-34 [ 430.728354][T16133] EXT4-fs (loop6): orphan cleanup on readonly fs [ 430.741323][T16133] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 430.779413][T16133] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 430.824574][T16133] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 430.872444][T16133] EXT4-fs (loop6): 1 truncate cleaned up [ 430.912182][T16133] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 430.938781][T13670] team0 (unregistering): Port device team_slave_1 removed [ 430.972492][T16133] FAULT_INJECTION: forcing a failure. [ 430.972492][T16133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.991923][T13670] team0 (unregistering): Port device team_slave_0 removed [ 431.006642][T16133] CPU: 0 UID: 0 PID: 16133 Comm: syz.6.2836 Tainted: G W syzkaller #0 PREEMPT(full) [ 431.006683][T16133] Tainted: [W]=WARN [ 431.006691][T16133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 431.006706][T16133] Call Trace: [ 431.006766][T16133] [ 431.006774][T16133] __dump_stack+0x1d/0x30 [ 431.006807][T16133] dump_stack_lvl+0x95/0xd0 [ 431.006834][T16133] dump_stack+0x15/0x1b [ 431.006859][T16133] should_fail_ex+0x263/0x280 [ 431.006884][T16133] should_fail+0xb/0x20 [ 431.006907][T16133] should_fail_usercopy+0x1a/0x20 [ 431.006950][T16133] _copy_to_user+0x20/0xa0 [ 431.006993][T16133] simple_read_from_buffer+0xb5/0x130 [ 431.007061][T16133] proc_fail_nth_read+0x10e/0x150 [ 431.007103][T16133] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 431.007134][T16133] vfs_read+0x1ab/0x7f0 [ 431.007165][T16133] ? __rcu_read_unlock+0x4e/0x70 [ 431.007244][T16133] ? __fget_files+0x184/0x1c0 [ 431.007269][T16133] ? mutex_lock+0x57/0x90 [ 431.007338][T16133] ksys_read+0xdc/0x1a0 [ 431.007432][T16133] __x64_sys_read+0x40/0x50 [ 431.007466][T16133] x64_sys_call+0x2886/0x3020 [ 431.007514][T16133] do_syscall_64+0x12c/0x370 [ 431.007560][T16133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.007665][T16133] RIP: 0033:0x7f7ba585cece [ 431.007684][T16133] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 431.007705][T16133] RSP: 002b:00007f7ba42f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 431.007727][T16133] RAX: ffffffffffffffda RBX: 00007f7ba42f76c0 RCX: 00007f7ba585cece [ 431.007742][T16133] RDX: 000000000000000f RSI: 00007f7ba42f70a0 RDI: 0000000000000005 [ 431.007787][T16133] RBP: 00007f7ba42f7090 R08: 0000000000000000 R09: 0000000000000000 [ 431.007801][T16133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.007814][T16133] R13: 00007f7ba5b16038 R14: 00007f7ba5b15fa0 R15: 00007ffc64530618 [ 431.007836][T16133] [ 431.273058][ T6889] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.309779][T10552] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.209469][T16157] loop6: detected capacity change from 0 to 512 [ 433.216247][T16157] EXT4-fs: Ignoring removed nobh option [ 433.237642][T16157] EXT4-fs (loop6): 1 orphan inode deleted [ 433.243638][T16155] loop8: detected capacity change from 0 to 512 [ 433.244160][T16157] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.250883][T16155] EXT4-fs: Ignoring removed nobh option [ 433.284993][T16155] EXT4-fs (loop8): 1 orphan inode deleted [ 433.291282][T16155] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.314995][T16157] can0: slcan on ttyS3. [ 433.411187][T16168] loop2: detected capacity change from 0 to 1024 [ 433.451037][T16152] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #2: block 13: comm syz.8.2839: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 433.488727][T16168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.505685][T16168] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.2841: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 433.505904][ T7049] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.533664][T16173] netlink: 'syz.2.2841': attribute type 12 has an invalid length. [ 433.550355][T16173] netlink: 'syz.2.2841': attribute type 29 has an invalid length. [ 433.558399][T16173] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2841'. [ 433.569232][T16168] netlink: 'syz.2.2841': attribute type 12 has an invalid length. [ 433.577931][T16168] netlink: 'syz.2.2841': attribute type 29 has an invalid length. [ 433.586054][T16168] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2841'. [ 433.595206][T16150] can0 (unregistered): slcan off ttyS3. [ 433.621503][ T6889] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.653099][ T28] audit: type=1400 audit(1771827296.838:1561): avc: denied { load_policy } for pid=16178 comm="syz.3.2844" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 433.653120][T16179] SELinux: failed to load policy [ 433.692896][T16173] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.2841: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 433.717860][T16183] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.2841: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 433.805776][ T28] audit: type=1400 audit(1771827296.998:1562): avc: denied { listen } for pid=16191 comm="syz.6.2848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 433.826368][ T28] audit: type=1400 audit(1771827296.998:1563): avc: denied { write } for pid=16191 comm="syz.6.2848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 433.891517][T16197] loop3: detected capacity change from 0 to 4096 [ 433.911940][T16197] ext2: Unknown parameter 'pcr' [ 433.928375][T16197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.950846][T16197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.048499][ T28] audit: type=1400 audit(1771827297.228:1564): avc: denied { bind } for pid=16195 comm="syz.3.2846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 434.075433][T16093] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 434.083348][T16211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.086616][T16093] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 434.092446][T16211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.108809][ T28] audit: type=1400 audit(1771827297.268:1565): avc: denied { remount } for pid=16208 comm="syz.6.2851" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 434.133934][T16093] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 434.146836][T16093] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 434.183423][ T28] audit: type=1400 audit(1771827297.368:1566): avc: denied { ioctl } for pid=16224 comm="syz.6.2852" path="socket:[45942]" dev="sockfs" ino=45942 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 434.221241][T16093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.233747][T16093] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.246602][ T6342] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.253758][ T6342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.267355][T10552] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.277761][ T6342] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.284867][ T6342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.384760][T16239] loop2: detected capacity change from 0 to 128 [ 434.522848][T16239] FAULT_INJECTION: forcing a failure. [ 434.522848][T16239] name failslab, interval 1, probability 0, space 0, times 0 [ 434.535927][T16239] CPU: 1 UID: 0 PID: 16239 Comm: syz.2.2855 Tainted: G W syzkaller #0 PREEMPT(full) [ 434.536011][T16239] Tainted: [W]=WARN [ 434.536021][T16239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 434.536035][T16239] Call Trace: [ 434.536041][T16239] [ 434.536049][T16239] __dump_stack+0x1d/0x30 [ 434.536141][T16239] dump_stack_lvl+0x95/0xd0 [ 434.536166][T16239] dump_stack+0x15/0x1b [ 434.536189][T16239] should_fail_ex+0x263/0x280 [ 434.536266][T16239] should_failslab+0x8c/0xb0 [ 434.536287][T16239] kmem_cache_alloc_noprof+0x66/0x400 [ 434.536371][T16239] ? do_getname+0x2e/0x1c0 [ 434.536460][T16239] do_getname+0x2e/0x1c0 [ 434.536482][T16239] user_path_at+0x28/0x100 [ 434.536558][T16239] __se_sys_mount+0x25b/0x2e0 [ 434.536580][T16239] ? fput+0x8f/0xc0 [ 434.536607][T16239] __x64_sys_mount+0x67/0x80 [ 434.536629][T16239] x64_sys_call+0x2d61/0x3020 [ 434.536703][T16239] do_syscall_64+0x12c/0x370 [ 434.536792][T16239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.536815][T16239] RIP: 0033:0x7f357fc8c629 [ 434.536831][T16239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.536892][T16239] RSP: 002b:00007f357e6df028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 434.536914][T16239] RAX: ffffffffffffffda RBX: 00007f357ff05fa0 RCX: 00007f357fc8c629 [ 434.536929][T16239] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000000 [ 434.536943][T16239] RBP: 00007f357e6df090 R08: 0000000000000000 R09: 0000000000000000 [ 434.537004][T16239] R10: 0000000000249020 R11: 0000000000000246 R12: 0000000000000001 [ 434.537017][T16239] R13: 00007f357ff06038 R14: 00007f357ff05fa0 R15: 00007ffff3ca2678 [ 434.537051][T16239] [ 434.787667][T16258] lo speed is unknown, defaulting to 1000 [ 434.894939][T16258] loop6: detected capacity change from 0 to 1024 [ 434.901798][T16258] EXT4-fs: Ignoring removed nobh option [ 434.908192][T16258] EXT4-fs: Ignoring removed nomblk_io_submit option [ 434.924128][T16093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.083118][T16258] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.104679][ T28] audit: type=1400 audit(1771827298.288:1567): avc: denied { map } for pid=16240 comm="syz.6.2856" path="/421/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 435.225603][T16262] delete_channel: no stack [ 435.230699][T16262] delete_channel: no stack [ 435.264048][ T28] audit: type=1400 audit(1771827298.288:1568): avc: denied { execute } for pid=16240 comm="syz.6.2856" path="/421/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 435.808769][ T6889] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.994080][T16294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2862'. [ 436.123040][T16093] veth0_vlan: entered promiscuous mode [ 436.152686][T16093] veth1_vlan: entered promiscuous mode [ 436.187768][T16093] veth0_macvtap: entered promiscuous mode [ 436.198263][T16093] veth1_macvtap: entered promiscuous mode [ 436.211195][T16093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.223652][T16093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.236748][ T4581] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.262777][ T4581] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.294254][ T4581] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.303419][ T4581] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.313906][T16322] delete_channel: no stack [ 436.324603][T16322] delete_channel: no stack [ 436.423411][T16336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.432054][T16336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.494291][T16343] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2873'. [ 438.040603][T16392] delete_channel: no stack [ 438.057829][T16392] delete_channel: no stack [ 438.273502][T16406] loop3: detected capacity change from 0 to 512 [ 438.287922][T16406] EXT4-fs: Ignoring removed nobh option [ 438.346636][T16406] can0: slcan on ttyS3. [ 438.933801][T16429] loop8: detected capacity change from 0 to 512 [ 438.943951][T16429] EXT4-fs: Ignoring removed nobh option [ 439.194479][T16429] EXT4-fs (loop8): 1 orphan inode deleted [ 439.222825][T16429] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.439652][T16397] can0 (unregistered): slcan off ttyS3. [ 439.640550][T16422] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #2: block 13: comm syz.8.2884: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 439.711512][ T7049] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.218750][T16479] loop6: detected capacity change from 0 to 512 [ 440.230831][T16479] EXT4-fs: Ignoring removed nobh option [ 440.308601][T16479] EXT4-fs (loop6): 1 orphan inode deleted [ 440.336586][T16479] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.443751][T16479] can0: slcan on ttyS3. [ 440.900195][T16488] lo speed is unknown, defaulting to 1000 [ 441.059033][T16489] loop7: detected capacity change from 0 to 1024 [ 441.066193][T16489] EXT4-fs: Ignoring removed nobh option [ 441.071832][T16489] EXT4-fs: Ignoring removed nomblk_io_submit option [ 441.117820][T16489] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.295338][T16472] can0 (unregistered): slcan off ttyS3. [ 441.412153][ T6889] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.437074][T16502] loop2: detected capacity change from 0 to 512 [ 441.480839][T16505] loop6: detected capacity change from 0 to 512 [ 441.499378][T16502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.558405][T16505] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.571855][T16502] ext4 filesystem being mounted at /307/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.604915][T16505] ext4 filesystem being mounted at /432/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.665782][T16093] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.728848][T16521] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 3: comm syz.6.2896: path /432/file0: bad entry in directory: directory entry overrun - offset=60, inode=113, rec_len=2048, size=2048 fake=0 [ 441.751612][T16520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2891'. [ 441.761565][T10552] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 3: comm syz-executor: path /307/file0: bad entry in directory: directory entry overrun - offset=60, inode=113, rec_len=2048, size=2048 fake=0 [ 441.786507][T16520] loop3: detected capacity change from 0 to 512 [ 441.793429][T16521] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 12: comm syz.6.2896: path /432/file0: bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 441.827231][T16521] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 13: comm syz.6.2896: path /432/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 441.864857][T10552] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 12: comm syz-executor: path /307/file0: bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 441.980844][ T6889] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 3: comm syz-executor: path /432/file0: bad entry in directory: directory entry overrun - offset=60, inode=113, rec_len=2048, size=2048 fake=0 [ 441.981852][ T6889] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 12: comm syz-executor: path /432/file0: bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 441.982385][ T6889] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /432/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 441.988866][ T6889] EXT4-fs error (device loop6): ext4_readdir:265: inode #12: block 32: comm syz-executor: path /432/file0/file0: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 441.990677][ T6889] EXT4-fs error (device loop6): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 441.993460][ T6889] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 441.995547][ T6889] EXT4-fs error (device loop6): ext4_readdir:265: inode #12: block 32: comm syz-executor: path /432/file0/file0: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 441.997071][ T6889] EXT4-fs error (device loop6): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 441.997511][ T6889] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 441.998950][ T6889] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 442.000486][ T6889] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 442.060919][ T6889] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 442.062669][ T6889] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 442.072225][ T6889] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 442.082439][ T6889] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 442.089770][ T6889] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 442.091432][ T6889] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 442.097329][T10552] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /307/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 442.101352][T10552] EXT4-fs error (device loop2): ext4_readdir:265: inode #12: block 32: comm syz-executor: path /307/file0/file0: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 442.103673][T10552] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 442.109818][T10552] EXT4-fs warning (device loop2): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 442.110112][T10552] EXT4-fs error (device loop2): ext4_readdir:265: inode #12: block 32: comm syz-executor: path /307/file0/file0: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 442.113193][T10552] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 442.128832][T10552] EXT4-fs warning (device loop2): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 442.129154][T10552] EXT4-fs error (device loop2): ext4_readdir:265: inode #12: block 32: comm syz-executor: path /307/file0/file0: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 442.448610][T16533] loop3: detected capacity change from 0 to 512 [ 442.456463][T16533] EXT4-fs: Ignoring removed nobh option [ 442.576422][T10552] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 442.581854][T10552] EXT4-fs warning (device loop2): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 442.582185][T10552] EXT4-fs error (device loop2): ext4_readdir:265: inode #12: block 32: comm syz-executor: path /307/file0/file0: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 442.586625][T10552] EXT4-fs warning (device loop2): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 442.595429][T10552] EXT4-fs warning (device loop2): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 442.600696][T10552] EXT4-fs warning (device loop2): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 442.602654][T10552] EXT4-fs warning (device loop2): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 442.608366][T10552] EXT4-fs warning (device loop2): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 442.609280][T10552] EXT4-fs warning (device loop2): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 442.621503][T10552] EXT4-fs warning (device loop2): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 443.073220][ T8776] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.557521][T16568] loop3: detected capacity change from 0 to 512 [ 443.595951][ T28] audit: type=1400 audit(1771827306.788:1569): avc: denied { unmount } for pid=6645 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 443.759382][T16574] loop8: detected capacity change from 0 to 512 [ 443.774849][T16574] EXT4-fs: Ignoring removed nobh option [ 443.787605][T10552] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.879742][T16574] EXT4-fs (loop8): 1 orphan inode deleted [ 443.893682][T16574] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.994631][T16574] can0: slcan on ttyS3. [ 444.299329][T16583] delete_channel: no stack [ 444.304478][T16583] delete_channel: no stack [ 444.568899][T16596] loop3: detected capacity change from 0 to 512 [ 444.580858][T16596] EXT4-fs: Ignoring removed nobh option [ 445.255367][T16569] can0 (unregistered): slcan off ttyS3. [ 445.261801][T16570] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #2: block 13: comm syz.8.2902: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 445.294473][T16606] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2911'. [ 445.295684][T16603] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 445.323789][T16606] loop7: detected capacity change from 0 to 512 [ 445.365180][T16606] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2911: couldn't read orphan inode 26 (err -116) [ 445.378864][ T7049] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.396339][T16606] loop7: lost filesystem error report for type 5 error -116 [ 445.406774][T16606] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.472969][T16606] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.525127][T16606] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.816446][T16607] lo speed is unknown, defaulting to 1000 [ 445.982715][T16607] chnl_net:caif_netlink_parms(): no params data found [ 446.080995][T16607] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.091743][T16607] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.101221][T16607] bridge_slave_0: entered allmulticast mode [ 446.109435][T16607] bridge_slave_0: entered promiscuous mode [ 446.157440][T16607] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.178494][T16607] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.189913][T16655] loop3: detected capacity change from 0 to 512 [ 446.196291][T16607] bridge_slave_1: entered allmulticast mode [ 446.197484][T16607] bridge_slave_1: entered promiscuous mode [ 446.223338][T16607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.234212][T16607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.278359][T16609] lo speed is unknown, defaulting to 1000 [ 446.295408][T16607] team0: Port device team_slave_0 added [ 446.302229][T16607] team0: Port device team_slave_1 added [ 446.342734][T16607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.350107][T16607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.376546][T16607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.388072][T16607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.395508][T16607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.421819][T16607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.460979][T16607] hsr_slave_0: entered promiscuous mode [ 446.467483][T16607] hsr_slave_1: entered promiscuous mode [ 446.478182][T16607] debugfs: 'hsr0' already exists in 'hsr' [ 446.484078][T16607] Cannot create hsr debugfs directory [ 446.506688][T16665] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2919'. [ 446.583518][T16667] delete_channel: no stack [ 446.606720][T16667] delete_channel: no stack [ 446.729989][T16609] chnl_net:caif_netlink_parms(): no params data found [ 446.791913][T16684] loop7: detected capacity change from 0 to 512 [ 446.828244][T16684] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.892204][T16684] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.926398][T16689] loop8: detected capacity change from 0 to 1024 [ 446.934019][T16689] EXT4-fs: Ignoring removed nobh option [ 446.939958][T16689] EXT4-fs: Ignoring removed nomblk_io_submit option [ 446.986679][T16689] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.156427][T16609] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.164602][T16684] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 3: comm syz.7.2926: path /18/file0: bad entry in directory: directory entry overrun - offset=60, inode=113, rec_len=2048, size=2048 fake=0 [ 447.193063][T16609] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.205730][T16695] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2927'. [ 447.219532][T16609] bridge_slave_0: entered allmulticast mode [ 447.226697][T16609] bridge_slave_0: entered promiscuous mode [ 447.233214][T16684] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 12: comm syz.7.2926: path /18/file0: bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 447.280005][T16688] lo speed is unknown, defaulting to 1000 [ 447.330826][T16609] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.346747][T16609] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.354052][T16684] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 13: comm syz.7.2926: path /18/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 447.375777][T16609] bridge_slave_1: entered allmulticast mode [ 447.382696][T16609] bridge_slave_1: entered promiscuous mode [ 447.404201][T16093] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 3: comm syz-executor: path /18/file0: bad entry in directory: directory entry overrun - offset=60, inode=113, rec_len=2048, size=2048 fake=0 [ 447.426549][T16609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.436190][T16093] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 12: comm syz-executor: path /18/file0: bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 447.460945][T16093] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /18/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 447.503645][T16093] EXT4-fs error (device loop7): ext4_readdir:265: inode #12: block 32: comm syz-executor: path /18/file0/file0: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 447.527899][T16609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.550692][T16093] EXT4-fs error (device loop7): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 447.551046][T16609] team0: Port device team_slave_0 added [ 447.577179][T16609] team0: Port device team_slave_1 added [ 447.607267][T16609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.614405][T16609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.642014][T16609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.653492][T16609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.660626][T16609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.696893][T16093] EXT4-fs warning (device loop7): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 447.708435][T16609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.719204][T16093] EXT4-fs error (device loop7): ext4_readdir:265: inode #12: block 32: comm syz-executor: path /18/file0/file0: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 447.747439][T16093] EXT4-fs error (device loop7): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 447.785663][ T7049] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.801864][T16093] EXT4-fs warning (device loop7): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 447.852930][T16609] hsr_slave_0: entered promiscuous mode [ 447.866054][T16609] hsr_slave_1: entered promiscuous mode [ 447.988092][T16722] loop3: detected capacity change from 0 to 512 [ 448.005473][T16722] EXT4-fs: Ignoring removed nobh option [ 448.616097][T16609] debugfs: 'hsr0' already exists in 'hsr' [ 448.635471][T16609] Cannot create hsr debugfs directory [ 448.681175][T16722] can0: slcan on ttyS3. [ 448.780313][T16093] EXT4-fs warning (device loop7): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 448.810634][T16607] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 448.920059][T16093] EXT4-fs warning (device loop7): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 448.984669][T16093] EXT4-fs warning (device loop7): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 449.002696][T16093] EXT4-fs warning (device loop7): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 449.059035][T16093] EXT4-fs warning (device loop7): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 449.098562][T16093] EXT4-fs warning (device loop7): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 449.140645][T16607] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 449.149424][T16093] EXT4-fs warning (device loop7): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 449.163350][T16607] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 449.170308][T16713] can0 (unregistered): slcan off ttyS3. [ 449.185072][T16093] EXT4-fs warning (device loop7): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 449.256582][T16607] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 449.353382][T16607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.370801][T16607] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.381102][ T579] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.388415][ T579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.413782][ T579] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.420922][ T579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.440594][T16607] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 449.476261][T16093] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.522072][T16607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.642856][T16609] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 449.663656][T16609] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 449.677807][T16609] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 449.697929][T16609] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 449.740193][T16607] veth0_vlan: entered promiscuous mode [ 449.756647][T16607] veth1_vlan: entered promiscuous mode [ 449.780947][T16607] veth0_macvtap: entered promiscuous mode [ 449.812728][T16607] veth1_macvtap: entered promiscuous mode [ 449.829352][T16609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.841746][T16607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.859895][T16609] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.871780][T16607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.968216][ T2121] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.975390][ T2121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.996519][ T2121] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.003623][ T2121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.039988][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.056192][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.103540][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.125693][T16779] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2937'. [ 450.138437][T16779] loop8: detected capacity change from 0 to 512 [ 450.158999][T16609] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 450.170179][T16609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 450.215501][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.238577][T16779] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 450.278346][T16779] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 450.304667][T16779] System zones: 0-1, 15-15, 18-18, 34-34 [ 450.314879][T16779] EXT4-fs (loop8): orphan cleanup on readonly fs [ 450.335324][T16779] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=0 [ 450.367765][T16779] EXT4-fs warning (device loop8): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 450.402714][T16775] lo speed is unknown, defaulting to 1000 [ 450.424753][T16779] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 450.429866][T16804] loop4: detected capacity change from 0 to 512 [ 450.445542][T16779] EXT4-fs (loop8): 1 truncate cleaned up [ 450.461722][T16779] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 450.481965][T16609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.536554][T16804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.574210][T16804] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.592903][ T7049] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.626817][T16607] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 3: comm syz-executor: path /1/file0: bad entry in directory: directory entry overrun - offset=60, inode=113, rec_len=2048, size=2048 fake=0 [ 450.656544][T16822] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 450.680851][T16607] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 12: comm syz-executor: path /1/file0: bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 450.708453][T16775] chnl_net:caif_netlink_parms(): no params data found [ 450.716527][T16607] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /1/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 450.781654][T16607] EXT4-fs error (device loop4): ext4_readdir:265: inode #12: block 32: comm syz-executor: path /1/file0/file0: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 450.811359][T16607] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 450.950005][T16843] loop8: detected capacity change from 0 to 512 [ 450.964198][T16843] EXT4-fs: Ignoring removed nobh option [ 451.061786][T16607] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 451.170099][T16843] EXT4-fs (loop8): 1 orphan inode deleted [ 451.200800][T16843] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.290005][T16607] EXT4-fs error (device loop4): ext4_readdir:265: inode #12: block 32: comm syz-executor: path /1/file0/file0: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 451.434995][T16607] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 451.454864][T16607] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 451.464917][T16775] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.473395][T16775] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.484186][T16607] EXT4-fs error (device loop4): ext4_readdir:265: inode #12: block 32: comm syz-executor: path /1/file0/file0: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 451.490418][T16775] bridge_slave_0: entered allmulticast mode [ 451.512750][T16775] bridge_slave_0: entered promiscuous mode [ 451.520109][T16775] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.527318][T16775] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.545410][T16775] bridge_slave_1: entered allmulticast mode [ 451.552144][T16775] bridge_slave_1: entered promiscuous mode [ 451.569909][T16607] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 451.623999][T16832] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #2: block 13: comm syz.8.2941: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 451.659111][T16607] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 451.672959][ T7049] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.684913][T16775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.704107][T16607] EXT4-fs error (device loop4): ext4_readdir:265: inode #12: block 32: comm syz-executor: path /1/file0/file0: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 451.725876][T16775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.762968][T16607] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 451.799028][T16607] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 451.826609][T16607] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 451.852440][T16607] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 451.878906][T16607] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 451.896628][T16775] team0: Port device team_slave_0 added [ 451.931840][T16609] veth0_vlan: entered promiscuous mode [ 451.938620][T16607] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 451.958763][T16609] veth1_vlan: entered promiscuous mode [ 451.974062][T16607] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 451.987880][T16775] team0: Port device team_slave_1 added [ 452.002565][T16609] veth0_macvtap: entered promiscuous mode [ 452.052177][T16609] veth1_macvtap: entered promiscuous mode [ 452.074095][T16775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.193097][T16775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.229669][T16775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.252235][T16609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.262364][T16609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.461696][T16775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.468956][T16775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.547302][T16775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.657093][T13670] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.706641][T13670] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.758966][T13670] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.796739][T16775] hsr_slave_0: entered promiscuous mode [ 452.803884][T16775] hsr_slave_1: entered promiscuous mode [ 452.822113][T16775] debugfs: 'hsr0' already exists in 'hsr' [ 452.834162][T16775] Cannot create hsr debugfs directory [ 452.863280][T13670] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.252568][T16925] loop5: detected capacity change from 0 to 512 [ 455.425617][T16925] EXT4-fs: Ignoring removed nobh option [ 455.515152][T16926] loop8: detected capacity change from 0 to 512 [ 455.527756][T16926] EXT4-fs: Ignoring removed nobh option [ 455.572238][T16925] EXT4-fs (loop5): 1 orphan inode deleted [ 455.579477][T16931] loop3: detected capacity change from 0 to 512 [ 455.608332][T16926] EXT4-fs (loop8): 1 orphan inode deleted [ 455.621344][T16925] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.632081][T16926] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.709085][T16924] can0: slcan on ttyS3. [ 455.746548][T16937] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 455.795395][T16924] can0 (unregistered): slcan off ttyS3. [ 455.842801][T16917] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #2: block 13: comm syz.8.2948: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 455.895915][T16921] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 13: comm syz.5.2947: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 455.921056][T16607] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.944841][ T7049] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.956747][T16609] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.981079][T16775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 456.016899][T13670] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.036583][T16959] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2951'. [ 456.074796][T16775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 456.103633][T16775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 456.834688][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 457.102815][T16775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 457.121025][T13670] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.236347][T16969] loop5: detected capacity change from 0 to 512 [ 457.244708][T16969] EXT4-fs: Ignoring removed nobh option [ 457.337050][T16974] loop8: detected capacity change from 0 to 512 [ 457.359303][T16974] EXT4-fs: Ignoring removed nobh option [ 457.403113][T16969] EXT4-fs (loop5): 1 orphan inode deleted [ 457.409755][T16969] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.434030][T16969] can0: slcan on ttyS3. [ 457.437116][T16974] EXT4-fs (loop8): 1 orphan inode deleted [ 457.476198][T16974] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.552278][T13670] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.621592][T13670] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.634928][T16969] can0 (unregistered): slcan off ttyS3. [ 457.646693][T16963] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 13: comm syz.5.2952: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 457.682730][T16966] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #2: block 13: comm syz.8.2955: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 457.703589][T16609] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.745212][ T7049] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.760740][T16775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.772366][T17009] loop5: detected capacity change from 0 to 512 [ 457.830687][T17009] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2959: couldn't read orphan inode 26 (err -116) [ 457.843561][T17009] loop5: lost filesystem error report for type 5 error -116 [ 457.844530][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 457.858389][ C0] EXT4-fs (loop5): initial error at time 1771827321: ext4_orphan_get:1396 [ 457.866961][ C0] EXT4-fs (loop5): last error at time 1771827321: ext4_orphan_get:1396 [ 457.877889][T16775] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.885394][T17009] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.898732][T17009] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.924322][T17020] loop3: detected capacity change from 0 to 512 [ 457.924998][T17009] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.993785][T17023] netlink: 'syz.8.2960': attribute type 36 has an invalid length. [ 458.009584][T17023] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 458.019683][T17023] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 458.040140][T17023] netlink: 'syz.8.2960': attribute type 10 has an invalid length. [ 458.091310][T16970] lo speed is unknown, defaulting to 1000 [ 458.136045][T13670] bridge_slave_1: left allmulticast mode [ 458.174285][T13670] bridge_slave_1: left promiscuous mode [ 458.228719][T13670] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.271042][T17028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2963'. [ 458.289491][T13670] bridge_slave_0: left allmulticast mode [ 458.299707][T13670] bridge_slave_0: left promiscuous mode [ 458.325164][T13670] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.452141][T17034] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2964'. [ 458.748981][T17047] loop3: detected capacity change from 0 to 512 [ 458.763491][T17047] EXT4-fs: Ignoring removed nobh option [ 459.306897][T13670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.364276][T13670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.375267][T13670] bond0 (unregistering): Released all slaves [ 459.387591][ T108] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.394706][ T108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.414427][ T108] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.421702][ T108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.490619][T13670] hsr_slave_0: left promiscuous mode [ 459.496180][T17075] delete_channel: no stack [ 459.501778][T17075] delete_channel: no stack [ 459.522491][T13670] hsr_slave_1: left promiscuous mode [ 459.532801][T13670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.542062][T13670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.558927][T13670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.580264][T13670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.713500][T17089] loop3: detected capacity change from 0 to 512 [ 459.728027][T17089] EXT4-fs: Ignoring removed nobh option [ 459.860539][T17092] loop8: detected capacity change from 0 to 512 [ 459.917664][T13670] veth1_macvtap: left promiscuous mode [ 459.923354][T13670] veth0_macvtap: left promiscuous mode [ 459.935479][T13670] veth1_vlan: left promiscuous mode [ 459.940875][T13670] veth0_vlan: left promiscuous mode [ 460.105319][T17092] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.128927][T17092] ext4 filesystem being mounted at /463/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.172901][T17092] EXT4-fs error (device loop8): ext4_readdir:265: inode #2: block 3: comm syz.8.2971: path /463/file0: bad entry in directory: directory entry overrun - offset=60, inode=113, rec_len=2048, size=2048 fake=0 [ 460.193808][T17092] EXT4-fs error (device loop8): ext4_readdir:265: inode #2: block 12: comm syz.8.2971: path /463/file0: bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 460.223974][T17092] EXT4-fs error (device loop8): ext4_readdir:265: inode #2: block 13: comm syz.8.2971: path /463/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 460.259985][T17108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2972'. [ 460.293038][T17112] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2973'. [ 460.325857][T17114] loop5: detected capacity change from 0 to 512 [ 460.342593][T17089] slcan: can't register candev [ 460.384883][ T7049] EXT4-fs error (device loop8): ext4_readdir:265: inode #2: block 3: comm syz-executor: path /463/file0: bad entry in directory: directory entry overrun - offset=60, inode=113, rec_len=2048, size=2048 fake=0 [ 460.422754][T17114] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2974: couldn't read orphan inode 26 (err -116) [ 460.443310][T17114] loop5: lost filesystem error report for type 5 error -116 [ 460.444536][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 460.458349][ C0] EXT4-fs (loop5): initial error at time 1771827323: ext4_orphan_get:1396 [ 460.466929][ C0] EXT4-fs (loop5): last error at time 1771827323: ext4_orphan_get:1396 [ 460.488061][T17114] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.500814][ T7049] EXT4-fs error (device loop8): ext4_readdir:265: inode #2: block 12: comm syz-executor: path /463/file0: bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 460.534656][T17114] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.574924][ T7049] EXT4-fs error (device loop8): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /463/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 460.620102][T17114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.642149][T13670] team0 (unregistering): Port device team_slave_1 removed [ 460.661775][ T7049] EXT4-fs error (device loop8): ext4_readdir:265: inode #12: block 32: comm syz-executor: path /463/file0/file0: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 460.688099][T13670] team0 (unregistering): Port device team_slave_0 removed [ 460.727415][ T7049] EXT4-fs error (device loop8): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 460.785435][ T7049] EXT4-fs warning (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 460.844825][ T7049] EXT4-fs error (device loop8): ext4_readdir:265: inode #12: block 32: comm syz-executor: path /463/file0/file0: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 460.910520][ T7049] EXT4-fs error (device loop8): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 460.961736][T16970] chnl_net:caif_netlink_parms(): no params data found [ 460.979659][ T7049] EXT4-fs warning (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 461.015048][ T7049] EXT4-fs warning (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 461.049098][ T7049] EXT4-fs warning (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 461.082161][ T7049] EXT4-fs warning (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 461.096331][T16970] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.103419][T16970] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.111869][ T7049] EXT4-fs warning (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 461.123773][T16970] bridge_slave_0: entered allmulticast mode [ 461.130538][T16970] bridge_slave_0: entered promiscuous mode [ 461.137700][ T7049] EXT4-fs warning (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 461.150985][ T7049] EXT4-fs warning (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 461.163039][ T7049] EXT4-fs warning (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 461.178426][ T7049] EXT4-fs warning (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 461.224597][T16970] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.259728][T16970] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.275023][T16970] bridge_slave_1: entered allmulticast mode [ 461.281640][T16970] bridge_slave_1: entered promiscuous mode [ 461.325075][T16775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.397068][T16970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.425139][T16970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.475236][T16970] team0: Port device team_slave_0 added [ 461.486869][T11816] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.499939][T16970] team0: Port device team_slave_1 added [ 461.552988][T16970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.565507][T16970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.602729][T16970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.624685][T16970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.632902][T16970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.668946][T16970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.727945][T16775] veth0_vlan: entered promiscuous mode [ 461.757802][T16970] hsr_slave_0: entered promiscuous mode [ 461.769648][T16970] hsr_slave_1: entered promiscuous mode [ 461.779544][ T28] audit: type=1400 audit(1771827324.968:1570): avc: denied { read } for pid=17157 comm="syz.5.2977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 461.804590][T16970] debugfs: 'hsr0' already exists in 'hsr' [ 461.810361][T16970] Cannot create hsr debugfs directory [ 461.825997][T16775] veth1_vlan: entered promiscuous mode [ 461.937065][T16775] veth0_macvtap: entered promiscuous mode [ 461.973954][T16775] veth1_macvtap: entered promiscuous mode [ 462.067162][T16775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.118497][T16775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.171004][T17206] lo speed is unknown, defaulting to 1000 [ 462.254146][T17240] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2982'. [ 462.254186][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.254222][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.254252][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.358378][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.529931][T17206] chnl_net:caif_netlink_parms(): no params data found [ 462.627588][T17256] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17256 comm=syz.1.2936 [ 462.633962][T16970] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 462.679278][T16970] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 462.757653][T16970] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 462.850754][T16970] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 462.911663][T17206] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.919127][T17206] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.919227][T17291] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2987'. [ 462.926718][T17206] bridge_slave_0: entered allmulticast mode [ 462.927793][T17206] bridge_slave_0: entered promiscuous mode [ 462.949326][T17206] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.956652][T17206] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.973037][T17206] bridge_slave_1: entered allmulticast mode [ 462.981675][T17206] bridge_slave_1: entered promiscuous mode [ 463.030912][T17300] loop1: detected capacity change from 0 to 128 [ 463.044023][T17300] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 463.104770][T17300] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 463.142537][T17206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.159625][T16970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.186197][T17206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.233465][T16970] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.252562][T17206] team0: Port device team_slave_0 added [ 463.269628][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.276763][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.290337][T17206] team0: Port device team_slave_1 added [ 463.304447][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.311571][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.343902][T17206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.356584][T17206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.383755][T17206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.397397][T17206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.404475][T17206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.431594][T17206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.532203][T17206] hsr_slave_0: entered promiscuous mode [ 463.545233][T17206] hsr_slave_1: entered promiscuous mode [ 463.559470][T17206] debugfs: 'hsr0' already exists in 'hsr' [ 463.572684][T17206] Cannot create hsr debugfs directory [ 463.685583][T16970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.831325][T16970] veth0_vlan: entered promiscuous mode [ 463.852836][T16970] veth1_vlan: entered promiscuous mode [ 463.891187][T16970] veth0_macvtap: entered promiscuous mode [ 463.906844][T16970] veth1_macvtap: entered promiscuous mode [ 463.943579][T16970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.961668][T16970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.981088][ T6342] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.997506][ T6342] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.007301][ T6342] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.017240][ T6342] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.094741][T17378] FAULT_INJECTION: forcing a failure. [ 464.094741][T17378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.108570][T17378] CPU: 1 UID: 0 PID: 17378 Comm: syz.3.2994 Tainted: G W syzkaller #0 PREEMPT(full) [ 464.108681][T17378] Tainted: [W]=WARN [ 464.108688][T17378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 464.108706][T17378] Call Trace: [ 464.108714][T17378] [ 464.108766][T17378] __dump_stack+0x1d/0x30 [ 464.108796][T17378] dump_stack_lvl+0x95/0xd0 [ 464.108826][T17378] dump_stack+0x15/0x1b [ 464.108879][T17378] should_fail_ex+0x263/0x280 [ 464.108906][T17378] should_fail+0xb/0x20 [ 464.108931][T17378] should_fail_usercopy+0x1a/0x20 [ 464.108962][T17378] _copy_to_user+0x20/0xa0 [ 464.109069][T17378] simple_read_from_buffer+0xb5/0x130 [ 464.109099][T17378] proc_fail_nth_read+0x10e/0x150 [ 464.109138][T17378] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 464.109181][T17378] vfs_read+0x1ab/0x7f0 [ 464.109217][T17378] ? __rcu_read_unlock+0x4e/0x70 [ 464.109240][T17378] ? __fget_files+0x184/0x1c0 [ 464.109270][T17378] ? mutex_lock+0x57/0x90 [ 464.109383][T17378] ksys_read+0xdc/0x1a0 [ 464.109465][T17378] __x64_sys_read+0x40/0x50 [ 464.109508][T17378] x64_sys_call+0x2886/0x3020 [ 464.109606][T17378] do_syscall_64+0x12c/0x370 [ 464.109652][T17378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.109680][T17378] RIP: 0033:0x7f94a3d7cece [ 464.109700][T17378] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 464.109743][T17378] RSP: 002b:00007f94a2816fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 464.109842][T17378] RAX: ffffffffffffffda RBX: 00007f94a28176c0 RCX: 00007f94a3d7cece [ 464.109867][T17378] RDX: 000000000000000f RSI: 00007f94a28170a0 RDI: 0000000000000005 [ 464.109884][T17378] RBP: 00007f94a2817090 R08: 0000000000000000 R09: 0000000000000000 [ 464.109933][T17378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.110002][T17378] R13: 00007f94a4036038 R14: 00007f94a4035fa0 R15: 00007ffe9ecd2318 [ 464.110028][T17378] [ 464.450963][ T579] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.464628][T17386] loop3: detected capacity change from 0 to 128 [ 464.485882][T17388] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2998'. [ 464.572926][ T579] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.638228][ T579] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.702748][ T579] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.737623][T17396] tipc: Failed to remove unknown binding: 66,0,0/0:247792948/247792949 [ 464.878058][ T579] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.940839][ T579] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.001217][ T579] netdevsim netdevsim6 netdevsim1 (unregistering): left promiscuous mode [ 465.010583][ T579] netdevsim netdevsim6 netdevsim1 (unregistering): left allmulticast mode [ 465.021851][ T579] team0: Port device netdevsim1 removed [ 465.030936][ T579] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.093570][ T579] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.191211][ T579] bridge0: port 3(team0) entered disabled state [ 465.199122][ T579] bridge_slave_1: left allmulticast mode [ 465.204918][ T579] bridge_slave_1: left promiscuous mode [ 465.210625][ T579] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.219036][ T579] bridge_slave_0: left allmulticast mode [ 465.224883][ T579] bridge_slave_0: left promiscuous mode [ 465.230648][ T579] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.241369][ T579] bridge0: port 3(team0) entered disabled state [ 465.248592][ T579] bridge_slave_0: left allmulticast mode [ 465.254334][ T579] bridge_slave_0: left promiscuous mode [ 465.260217][ T579] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.532098][T17404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.540973][T17404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.696688][T17406] loop0: detected capacity change from 0 to 512 [ 465.709765][T17406] EXT4-fs: Ignoring removed nobh option [ 465.778720][T17406] EXT4-fs (loop0): 1 orphan inode deleted [ 465.794650][T17406] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.038383][T17300] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 466.121391][T17411] loop5: detected capacity change from 0 to 512 [ 466.132980][T17411] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 466.180847][T17411] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.3006: bg 0: block 4: invalid block bitmap [ 466.204703][T17411] loop5: lost filesystem error report for type 5 error -117 [ 466.211490][T17411] EXT4-fs (loop5): 1 truncate cleaned up [ 466.218924][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 466.218946][ C0] EXT4-fs (loop5): initial error at time 1771827329: ext4_validate_block_bitmap:432 [ 466.218990][ C0] EXT4-fs (loop5): last error at time 1771827329: ext4_validate_block_bitmap:432 [ 466.254971][T17411] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.269826][T16775] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 466.305731][T16609] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.383169][T16970] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.419388][ T579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.440103][ T579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.462559][ T579] bond0 (unregistering): Released all slaves [ 466.471578][ T579] bond1 (unregistering): Released all slaves [ 466.480984][ T579] bond2 (unregistering): Released all slaves [ 466.586094][ T28] audit: type=1400 audit(1771827329.778:1571): avc: denied { ioctl } for pid=17417 comm="syz.1.3009" path="socket:[51641]" dev="sockfs" ino=51641 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 466.732185][T17435] tipc: Failed to remove unknown binding: 66,0,0/0:648772325/648772326 [ 467.285792][T17436] loop5: detected capacity change from 0 to 512 [ 467.303257][T17436] EXT4-fs: Ignoring removed nobh option [ 467.402791][T17436] EXT4-fs (loop5): 1 orphan inode deleted [ 467.426911][T17436] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.752811][T17436] slcan: can't register candev [ 467.778255][T17440] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3015'. [ 467.792063][T16609] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.992968][T17452] loop5: detected capacity change from 0 to 512 [ 468.046733][ T579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.060200][ T579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.070511][ T579] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 468.082174][ T579] bond0 (unregistering): Released all slaves [ 468.090754][ T579] bond1 (unregistering): (slave bond2): Releasing backup interface [ 468.099460][ T579] bond1 (unregistering): Released all slaves [ 468.109115][ T579] bond2 (unregistering): Released all slaves [ 468.118357][ T579] bond3 (unregistering): Released all slaves [ 468.186126][T17404] bridge0: port 3(team0) entered disabled state [ 468.192567][T17404] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.199739][T17404] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.250922][T17404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.262651][T17404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.329280][T17206] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 468.338931][T17206] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 468.350947][T17206] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 468.363834][T17206] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 468.379989][ T3387] lo speed is unknown, defaulting to 1000 [ 468.386961][ T3387] syz2: Port: 1 Link DOWN [ 468.394807][ T579] hsr_slave_0: left promiscuous mode [ 468.410315][ T579] hsr_slave_1: left promiscuous mode [ 468.424072][ T579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.431869][ T579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.445202][ T579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.458936][ T579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.473261][ T579] hsr_slave_0: left promiscuous mode [ 468.481991][ T579] hsr_slave_1: left promiscuous mode [ 468.487944][ T579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.488703][T17462] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3022'. [ 468.495967][ T579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.512619][ T579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.520408][ T579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.534115][ T579] veth1_macvtap: left promiscuous mode [ 468.539965][ T579] veth0_macvtap: left promiscuous mode [ 468.545630][ T579] veth1_vlan: left promiscuous mode [ 468.551152][ T579] veth0_vlan: left promiscuous mode [ 468.557421][ T579] veth0_macvtap: left promiscuous mode [ 468.563112][ T579] veth1_vlan: left promiscuous mode [ 468.568775][ T579] veth0_vlan: left promiscuous mode [ 468.663193][ T579] macvlan1 (unregistering): left promiscuous mode [ 468.672441][ T579] team0 (unregistering): Port device macvlan1 removed [ 468.706093][ T579] team_slave_1 (unregistering): left promiscuous mode [ 468.713125][ T579] team_slave_1 (unregistering): left allmulticast mode [ 468.720636][ T579] team0 (unregistering): Port device team_slave_1 removed [ 468.731946][ T579] team_slave_0 (unregistering): left promiscuous mode [ 468.739250][ T579] team_slave_0 (unregistering): left allmulticast mode [ 468.747666][ T579] team0 (unregistering): Port device team_slave_0 removed [ 468.823671][ T579] macvlan1 (unregistering): left promiscuous mode [ 468.831948][ T579] team0 (unregistering): Port device macvlan1 removed [ 468.867452][ T579] team_slave_1 (unregistering): left promiscuous mode [ 468.874323][ T579] team_slave_1 (unregistering): left allmulticast mode [ 468.885811][ T579] team0 (unregistering): Port device team_slave_1 removed [ 468.902192][ T3001] ================================================================== [ 468.910322][ T3001] BUG: KCSAN: data-race in dont_mount / step_into_slowpath [ 468.917565][ T3001] [ 468.919914][ T3001] read-write to 0xffff88811aae6480 of 4 bytes by task 3304 on cpu 0: [ 468.927997][ T3001] dont_mount+0x2a/0x40 [ 468.932174][ T3001] vfs_unlink+0x206/0x490 [ 468.936528][ T3001] filename_unlinkat+0x1e2/0x410 [ 468.941499][ T3001] __se_sys_unlink+0x2b/0xe0 [ 468.946122][ T3001] __x64_sys_unlink+0x1f/0x30 [ 468.950829][ T3001] x64_sys_call+0x2eb6/0x3020 [ 468.955540][ T3001] do_syscall_64+0x12c/0x370 [ 468.960169][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.966084][ T3001] [ 468.968425][ T3001] read to 0xffff88811aae6480 of 4 bytes by task 3001 on cpu 1: [ 468.975993][ T3001] step_into_slowpath+0xea/0x4c0 [ 468.980970][ T3001] path_lookupat+0x330/0x500 [ 468.985590][ T3001] filename_lookup+0x190/0x390 [ 468.990407][ T3001] do_readlinkat+0x74/0x2f0 [ 468.994952][ T3001] __x64_sys_readlink+0x47/0x60 [ 468.999837][ T3001] x64_sys_call+0x2b51/0x3020 [ 469.004543][ T3001] do_syscall_64+0x12c/0x370 [ 469.009180][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.015100][ T3001] [ 469.017441][ T3001] value changed: 0x00300080 -> 0x00004080 [ 469.023177][ T3001] [ 469.025519][ T3001] Reported by Kernel Concurrency Sanitizer on: [ 469.031690][ T3001] CPU: 1 UID: 0 PID: 3001 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 469.042137][ T3001] Tainted: [W]=WARN [ 469.045964][ T3001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 469.056059][ T3001] ================================================================== [ 469.066176][ T579] C (unregistering): left promiscuous mode [ 469.072102][ T579] C (unregistering): left allmulticast mode [ 469.078763][ T579] team0 (unregistering): Port device C removed [ 469.116764][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.125771][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.152611][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.288653][T17475] loop0: detected capacity change from 0 to 512 [ 469.302689][T17476] netlink: 'syz.3.3025': attribute type 36 has an invalid length. [ 469.320933][T17475] EXT4-fs: Ignoring removed nobh option [ 469.352636][T17477] netlink: 'syz.3.3025': attribute type 10 has an invalid length. [ 469.419354][T17475] EXT4-fs (loop0): 1 orphan inode deleted [ 469.436120][T17475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.622876][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.679331][T17476] bridge17: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 469.689478][T17476] bridge17: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 469.738333][T17475] can0: slcan on ttyS3. [ 469.814762][T17479] can0 (unregistered): slcan off ttyS3. [ 469.837681][T17206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.867820][T17206] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.885589][ T6342] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.892713][ T6342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.912195][T17206] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 469.923503][T17206] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 469.938440][ T6342] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.945597][ T6342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.065587][T17206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.262048][ T579] IPVS: stop unused estimator thread 0... [ 470.279314][T17206] veth0_vlan: entered promiscuous mode [ 470.299568][T17206] veth1_vlan: entered promiscuous mode [ 470.332306][T17206] veth0_macvtap: entered promiscuous mode [ 470.340727][T16970] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.352363][T17206] veth1_macvtap: entered promiscuous mode [ 470.379297][T17206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.391248][T17206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.401329][T13670] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.415128][T13670] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.428851][T13670] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.452164][T13670] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0