last executing test programs: 16m32.885299624s ago: executing program 32 (id=36): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 15m5.121994666s ago: executing program 33 (id=887): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) bind$packet(r4, 0x0, 0x0) r5 = syz_io_uring_setup(0x5c2, &(0x7f00000003c0)={0x0, 0x8832, 0x0, 0x4, 0x21b}, &(0x7f0000000180)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r5, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r8, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r8, 0xda90) r9 = accept4(r8, 0x0, 0x0, 0x0) sendto$inet_nvme_of_msg(r9, &(0x7f00000001c0)={@data_h2c={{0x6, 0x2, 0x18, 0x3}, 0x1, 0x8, 0x7ff, 0x7, "103fcafa"}, @val=0x0}, 0x88, 0x0, 0x0, 0x0) eventfd(0x32) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 6m2.793875594s ago: executing program 34 (id=5519): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd27, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 6m2.625747813s ago: executing program 3 (id=5525): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) (fail_nth: 1) 6m2.533472816s ago: executing program 3 (id=5526): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x14, 0x7, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xc0) 6m2.482475366s ago: executing program 3 (id=5527): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = gettid() clock_adjtime(0x1, &(0x7f0000000080)={0x3, 0x5, 0xfa, 0x6, 0x0, 0x1, 0x400, 0xd6, 0xfffffffffffffffe, 0x8, 0x7, 0x6, 0x2d698880, 0x9, 0xd15c, 0x5, 0xf4, 0x80000000, 0xfffffffffffffff7, 0x6, 0x3, 0x738b4069, 0x8, 0x400, 0x80000000, 0x9}) syz_open_procfs$pagemap(r1, &(0x7f0000000000)) gettid() sendmsg$netlink(r0, &(0x7f0000000540)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)=[{&(0x7f0000000340)={0x10, 0x21, 0x200, 0x70bd28, 0x25dfdbfe}, 0x10}], 0x1, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20, 0x20040000}, 0x4810) 6m2.372490876s ago: executing program 3 (id=5528): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x30084, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0xfffffffc, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x601, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x22030, 0x9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x1}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000000040)=0x5, 0x4) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="14"], &(0x7f0000001300), 0x600) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@errors_remount}, {@barrier_val}]}, 0xfa, 0x4cc, &(0x7f00000016c0)="$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") ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x52) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6m2.23884065s ago: executing program 3 (id=5530): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x1c, r3, 0x5eae78d9c54e9d3f, 0x0, 0x27dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x2004c0c4) 6m1.228970772s ago: executing program 3 (id=5537): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x101}, 0x100000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x900}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_void(r2, 0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000e00)="39000000140081ae00002c000500015601618575e285af01800000000d1300883795c04a31ba377a1b2cc37fffffffffffffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r8 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f00000001c0)=@ethtool_regs={0x4, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x20, 0x10, 0x401, 0x20400, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x45ba6}}, 0x20}, 0x1, 0x0, 0x0, 0xc0000e3}, 0x4054) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xfffffff7, '\x00', r9, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r10, &(0x7f0000000080)=@other={'unlock', ' ', 'io'}, 0xa) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) r12 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x4, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x7}, r11, 0xb, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r12, 0x0) 6m1.198984647s ago: executing program 35 (id=5537): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x101}, 0x100000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x900}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_void(r2, 0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000e00)="39000000140081ae00002c000500015601618575e285af01800000000d1300883795c04a31ba377a1b2cc37fffffffffffffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r8 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f00000001c0)=@ethtool_regs={0x4, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x20, 0x10, 0x401, 0x20400, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x45ba6}}, 0x20}, 0x1, 0x0, 0x0, 0xc0000e3}, 0x4054) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xfffffff7, '\x00', r9, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r10, &(0x7f0000000080)=@other={'unlock', ' ', 'io'}, 0xa) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) r12 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x4, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x7}, r11, 0xb, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r12, 0x0) 4m47.304366135s ago: executing program 8 (id=5967): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {}, {0x0, 0x4000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x300}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x5, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860b, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x2, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x6, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000700000000440012800b0001006272696467650000340002800c00230006000000000000000c002100030000000000000005002500010000000500170001000000080024"], 0x64}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800) 4m44.86503544s ago: executing program 8 (id=5972): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x343b8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0xa) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0xff18, @dev={0xac, 0x14, 0x14, 0x10}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2a}}, @in6={0xa, 0x4e21, 0x10, @private1, 0x7ff}, @in6={0xa, 0x4e22, 0xbdb0, @ipv4={'\x00', '\xff\xff', @local}, 0xffff}, @in6={0xa, 0x4e23, 0x5, @private2, 0x5}, @in6={0xa, 0x4e23, 0x101, @dev={0xfe, 0x80, '\x00', 0x16}, 0x5}, @in6={0xa, 0x4e22, 0x7440, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e22, 0x3ff, @loopback, 0x6}], 0xc8) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x3, 0x9, 0x0, 0x6}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x300, 0x0, 0x3, 0xa, 0x3, 0x6}, 0x20) 4m42.120773408s ago: executing program 8 (id=5977): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000480)={0x4, &(0x7f00000004c0)=[{0x2d, 0x0, 0x2}, {0x15}, {}, {0x6}]}) 4m41.798424388s ago: executing program 8 (id=5980): r0 = socket$inet(0x2, 0xa, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20048884) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004dc0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(0x3) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000009c0), 0x11, 0x56b, &(0x7f0000000440)="$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") pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000300)={0x0, 0xf9d2}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r12, 0x84, 0x66, &(0x7f0000000380)={r13, 0x8}, &(0x7f0000000400)=0x8) creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r14 = open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x131) preadv2(r14, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0x1bfd31aa}], 0x1, 0x0, 0x0, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r11, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001080)={0x30, 0x3, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x300088d0) close(0x3) 4m39.636983435s ago: executing program 8 (id=5984): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x19}, {0xb, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4m35.387989053s ago: executing program 8 (id=5995): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b040000000000000000020000003c000480100001800a00010072656469720000002800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32"], 0x90}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) r1 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) sendfile(r1, r1, 0x0, 0x800000009) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x104, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x8627ec217ab0b2b8) 4m35.363632088s ago: executing program 36 (id=5995): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b040000000000000000020000003c000480100001800a00010072656469720000002800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32"], 0x90}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) r1 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) sendfile(r1, r1, 0x0, 0x800000009) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x104, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x8627ec217ab0b2b8) 2m26.008724991s ago: executing program 9 (id=6753): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES32=r1, @ANYBLOB="01"], 0x24}, 0x1, 0x0, 0x0, 0x4008014}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) setuid(0xee01) ioctl$KDSETLED(r4, 0x4b32, 0x8556) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2m25.543249434s ago: executing program 9 (id=6755): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000005000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000480)={0x4, &(0x7f00000004c0)=[{0x2d, 0x0, 0x2}, {0x15}, {}, {0x6}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") 2m21.885716092s ago: executing program 9 (id=6761): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) r2 = socket(0xa, 0x3, 0x87) r3 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r4, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x2d, 0x20040040) recvmmsg(r4, 0x0, 0x0, 0x10020, 0x0) sendto$packet(r3, 0x0, 0x0, 0x24005010, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa1586dd6003136c00188700fc0200000000000000000000000000fdff0200000000000000000000000000013b"], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r7, 0x205, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x34}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000180)=0x3, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x8, 0x2, 0x2, 0x3f, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) close(r2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 2m21.620180123s ago: executing program 9 (id=6765): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2200054, &(0x7f00000101c0)={[{@dioread_lock}, {@nodelalloc}]}, 0x1, 0x236, &(0x7f0000010240)="$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") r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, r9, 0x0, {0x0, 0xf0}}, 0x18) sendmmsg(r8, &(0x7f0000009200)=[{{&(0x7f0000000100)=@can, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f00000002c0)="cd", 0x1}], 0x2}}], 0x1, 0x80) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x20, r7, 0x6a98047402e98331, 0x70bd2a, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x4886) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0xa, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xebf}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0xd4, &(0x7f0000000700)=""/212, 0x41100, 0x8, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000240)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x7, 0x27fd, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340), 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xba}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8b}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r10, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8004, 0x0, 0x0, 0x19, 0xd, "ef35100000003852f7bda4ae6dddfbd1ee09e737e60edf110f5bcb050000004b78c6df701905b9aafab4afa38155a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000c700e6d602000000000000080000000001", [0xa, 0x1]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 2m20.665158065s ago: executing program 9 (id=6770): semget(0x2, 0x5751e4d7532c9cae, 0x3e6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x607b, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013900000000009500000000000000ebfbad3f0c4953260cdf35fd70ed47332920667acb285d1367e2a83bfd3b4e34f0cd5eb07ddb8f7707735bdbf16918aa55a241e6cdd111c189067667fe76ceee4928f2c0700e7192f162376ffa83c3342623f2d78735a656ad"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000002fc0)=ANY=[@ANYBLOB="b40000000000000079ee470000000000630a04ff0000000095000000000000003eb9422a7607ebc16d9c7193788b0f629ffe3f453ba98f0c17c7eb4b123ff58902b2c03d2a7e46034c0bf37a231f2d6ec5c0a1e46c23e9ce26bd9d0702e9c52ac62686f8be2800100a6e9fccb9ebc7871d005d9e"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) r3 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x10e, 0xb, &(0x7f0000000080), 0x4) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r2}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xd, 0x3, 0x0, 0xfffffffd, 0x30022, 0xffffffffffffffff, 0xaf8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x4, 0x0, @void, @value, @value=r4}, 0x50) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3d, 0x1, 0x0, 0xffffe}, {0x20, 0x0, 0x0, 0x10000000}, {0x6, 0x7, 0x8}]}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x48894}, 0x20004080) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, 0x0, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 2m20.120614543s ago: executing program 9 (id=6771): r0 = syz_io_uring_setup(0x3d51, 0x0, &(0x7f0000000140), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001940)={0xa, 0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000002c0)=""/18, 0x12}, {&(0x7f0000000440)=""/140, 0x8c}, {&(0x7f0000000340)=""/56, 0x38}, {&(0x7f0000000580)=""/5, 0x5}, {&(0x7f00000005c0)=""/233, 0xe9}, {&(0x7f00000006c0)=""/58, 0x3a}, {&(0x7f0000000700)=""/60, 0x3c}, {&(0x7f0000000740)=""/33, 0x21}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/188, 0xbc}], &(0x7f0000001900)=[0x0, 0xaf, 0x3ff, 0x5, 0x0, 0x8f1]}, 0x20) 2m20.056008821s ago: executing program 37 (id=6771): r0 = syz_io_uring_setup(0x3d51, 0x0, &(0x7f0000000140), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001940)={0xa, 0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000002c0)=""/18, 0x12}, {&(0x7f0000000440)=""/140, 0x8c}, {&(0x7f0000000340)=""/56, 0x38}, {&(0x7f0000000580)=""/5, 0x5}, {&(0x7f00000005c0)=""/233, 0xe9}, {&(0x7f00000006c0)=""/58, 0x3a}, {&(0x7f0000000700)=""/60, 0x3c}, {&(0x7f0000000740)=""/33, 0x21}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/188, 0xbc}], &(0x7f0000001900)=[0x0, 0xaf, 0x3ff, 0x5, 0x0, 0x8f1]}, 0x20) 2m10.99268471s ago: executing program 7 (id=6858): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x12881, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) fcntl$notify(0xffffffffffffffff, 0x402, 0x24) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x145201, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$NILFS_IOCTL_SET_SUINFO(r1, 0x40186e8d, &(0x7f0000000540)={&(0x7f0000000400)=[{0x800, 0x2, 0x0, {0x0, 0x8001, 0x1}}, {0x4, 0x0, 0x0, {0x2, 0x0, 0x1}}, {0x9, 0x1, 0x0, {0x1, 0xf, 0x1}}, {0xffffffffffffff9d, 0x2, 0x0, {0x4, 0x2, 0x3}}, {0x0, 0x2, 0x0, {0x3, 0x2, 0x1}}, {0x8000, 0x1, 0x0, {0x8, 0x4, 0x1}}, {0x80000001, 0x0, 0x0, {0x400, 0x3}}, {0x5, 0x2, 0x0, {0x5, 0x8, 0x2}}, {0x97, 0x2, 0x0, {0x8, 0x1}}, {0xe3ae, 0x0, 0x0, {0x7, 0xfffffffb, 0x2}}], 0xa, 0x20, 0x1, 0x1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095", @ANYRES64], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r4 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r5, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="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", 0x10f}], 0x1) sendmmsg(r4, &(0x7f0000000080), 0x1a1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r6, &(0x7f00000005c0)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0x1, 0x807, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) listen(0xffffffffffffffff, 0x1) socket$unix(0x1, 0x1, 0x0) 2m10.326456016s ago: executing program 7 (id=6862): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x54) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000bc0)={0x7, 0xdac0, 0x8, 0x7, 0x13, "4dd5d26bd8b1eb227705ecfba7158d29559dba", 0x5, 0xa4}) 2m9.442541581s ago: executing program 7 (id=6873): ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x6}, {0xfff1, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) (fail_nth: 3) 2m9.417696767s ago: executing program 7 (id=6874): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x403000) r0 = getpid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/138, 0x8a}], 0x1, &(0x7f0000001240)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x620500, 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000080)={0xb, 0x10, 0xfa00, {&(0x7f0000001180)}}, 0x18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 2m8.982871305s ago: executing program 7 (id=6877): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0xf0}}, 0x18) sendmmsg(r0, &(0x7f0000009200)=[{{&(0x7f0000000100)=@can, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f00000002c0)="cd", 0x1}], 0x2}}], 0x1, 0x80) 2m8.916614983s ago: executing program 7 (id=6878): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="10002395c9f65b428a927010fedbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x40c4}, 0x20008000) fsetxattr$security_evm(r0, &(0x7f0000000140), &(0x7f0000000180)=@v1={0x2, "69475c18aa98fbf3b593fa5437a12114642a616e"}, 0x15, 0x2) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x50) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmsg$802154_raw(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)="8be4c41006cca6", 0x7}, 0x1, 0x0, 0x0, 0x4004081}, 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000c913323809715a9a79bf14000c0000008c000000000000000000000000a805cf4a0561cf2300"], &(0x7f0000000240)=""/220, 0x26, 0xdc, 0xa}, 0x28) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(r3, 0x5, &(0x7f0000000340)=0x80000001) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000008000/0xa000)=nil, &(0x7f0000019000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000f000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000019000/0x1000)=nil, &(0x7f0000019000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, 0x0}, 0x68) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x4d, 0x7fff0000}]}) syncfs(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f0000000100)={[], 0x11}, 0x0, 0x0) sched_setattr(r3, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x3, 0x3, 0xfffffffffffffffd, 0x9, 0x200, 0x5, 0x6}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev_snmp6\x00') getdents64(r5, 0xffffffffffffffff, 0x18) ioprio_get$pid(0x2, 0x0) 1m53.928321668s ago: executing program 38 (id=6878): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="10002395c9f65b428a927010fedbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x40c4}, 0x20008000) fsetxattr$security_evm(r0, &(0x7f0000000140), &(0x7f0000000180)=@v1={0x2, "69475c18aa98fbf3b593fa5437a12114642a616e"}, 0x15, 0x2) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x50) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmsg$802154_raw(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)="8be4c41006cca6", 0x7}, 0x1, 0x0, 0x0, 0x4004081}, 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000c913323809715a9a79bf14000c0000008c000000000000000000000000a805cf4a0561cf2300"], &(0x7f0000000240)=""/220, 0x26, 0xdc, 0xa}, 0x28) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(r3, 0x5, &(0x7f0000000340)=0x80000001) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000008000/0xa000)=nil, &(0x7f0000019000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000f000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000019000/0x1000)=nil, &(0x7f0000019000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, 0x0}, 0x68) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x4d, 0x7fff0000}]}) syncfs(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f0000000100)={[], 0x11}, 0x0, 0x0) sched_setattr(r3, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x3, 0x3, 0xfffffffffffffffd, 0x9, 0x200, 0x5, 0x6}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev_snmp6\x00') getdents64(r5, 0xffffffffffffffff, 0x18) ioprio_get$pid(0x2, 0x0) 41.154294525s ago: executing program 0 (id=7441): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006a008313000000000000354f1b0800"], 0x20}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x9000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0x20003028}) pselect6(0x40, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x2, 0x80000002, 0x6, 0x9, 0x40, 0x8000}, 0x0, &(0x7f0000000240)={0x1f, 0x112, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000004}, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) 40.91476171s ago: executing program 0 (id=7442): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xc8, 0x0, 0x2, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_NAT={0xa8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x97}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010100}}}]}]}, @CTA_EXPECT_ZONE={0x6}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0x2000) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0x5b, 0x6, 0x3, 0x7, 0x3, "e7b8a311aba54024"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400, 0x6003}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x2f1, 0x776, 0x800}}]}]}]}, 0x4c}}, 0x4008040) 40.798167019s ago: executing program 0 (id=7443): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x19c) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b0000000000011907800000000ffffffff00004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc12c00000000000000cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvfrom$l2tp6(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = socket$rxrpc(0x21, 0x2, 0xa) syz_emit_ethernet(0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000800450000320000000002019078ac1e0001ac1414aa05039078ac1e0001452300080066000005080ec4e0000002e0000001a2bc3b63a754d36966af0b2188"], 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040)) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x48}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x56, &(0x7f0000000fc0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa04000d00007a193513c77ca23bec8006b2b259c81dae15210f13dd81d2213173b4bcfdb933a6138941c3ccc94891fc2f11789060353eea91dc8c00"/86], 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x9) readv(r4, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/125, 0x7d}], 0x1) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r2, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x579, &(0x7f0000000a40)="$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") r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) read(r7, 0x0, 0x0) r8 = inotify_init1(0x0) inotify_add_watch(r8, &(0x7f0000000000)='.\x00', 0x52000775) 39.687982481s ago: executing program 0 (id=7450): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e7800000000000, 0x8a000) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) 39.665811377s ago: executing program 0 (id=7451): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) setpgid(r2, r2) setpgid(0x0, r2) 37.246544606s ago: executing program 0 (id=7461): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x607b, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013900000000009500000000000000ebfbad3f0c4953260cdf35fd70ed47332920667acb285d1367e2a83bfd3b4e34f0cd5eb07ddb8f7707735bdbf16918aa55a241e6cdd111c189067667fe76ceee4928f2c0700e7192f162376ffa83c3342623f2d78735a656ad"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) 37.226806952s ago: executing program 39 (id=7461): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x607b, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013900000000009500000000000000ebfbad3f0c4953260cdf35fd70ed47332920667acb285d1367e2a83bfd3b4e34f0cd5eb07ddb8f7707735bdbf16918aa55a241e6cdd111c189067667fe76ceee4928f2c0700e7192f162376ffa83c3342623f2d78735a656ad"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) 10.501639149s ago: executing program 4 (id=7588): syz_usbip_server_init(0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4008010) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48044) socket(0x28, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a0300730ae015000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc6c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000400003803c000080080003400000000230000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c000140000000000001000014000000110001"], 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4) close(r3) 9.624889045s ago: executing program 4 (id=7595): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000005000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1e0411, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4008, 0xb, 0x3, 0x80, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") 8.108773372s ago: executing program 2 (id=7600): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x12881, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x145201, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000540)={&(0x7f0000000400)=[{0x800, 0x2, 0x0, {0x0, 0x8001, 0x1}}, {0x4, 0x0, 0x0, {0x2, 0x0, 0x1}}, {0x9, 0x1, 0x0, {0x1, 0xf, 0x1}}, {0xffffffffffffff9d, 0x2, 0x0, {0x4, 0x2, 0x3}}, {0x0, 0x2, 0x0, {0x3, 0x2, 0x1}}, {0x8000, 0x1, 0x0, {0x8, 0x4, 0x1}}, {0x80000001, 0x0, 0x0, {0x400, 0x3}}, {0x5, 0x2, 0x0, {0x5, 0x8, 0x2}}, {0x97, 0x2, 0x0, {0x8, 0x1}}, {0xe3ae, 0x0, 0x0, {0x7, 0xfffffffb, 0x2}}], 0xa, 0x20, 0x1, 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095", @ANYRES64], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)) sendmmsg(r3, &(0x7f0000000080), 0x1a1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(r4, &(0x7f00000005c0)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0x1, 0x807, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) listen(0xffffffffffffffff, 0x1) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x20000000) 8.051793712s ago: executing program 2 (id=7601): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setxattr$security_ima(0x0, &(0x7f0000000200), 0x0, 0x700, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000140)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x80, 0x54f, &(0x7f0000000a00)="$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") mount$9p_rdma(&(0x7f0000000200), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f00000001c0)={'trans=rdma,', {'port', 0x3d, 0x4e25}, 0x2c, {[{@timeout}]}}) mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21810b4, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xc, &(0x7f0000000080), 0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, 0xffffffffffffffff, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x1}, 'port0\x00', 0x100, 0x131845, 0x0, 0x0, 0x7, 0x0, 0x100000, 0x0, 0x1}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x121501) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x4, 0x3ff, 0x6}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x4}, 'port1\x00', 0x89, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b28}) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0xfffffffffffffffd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 5.964163282s ago: executing program 2 (id=7608): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$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") chdir(&(0x7f0000000140)='./file0\x00') symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') pipe(&(0x7f0000000000)) 5.674420258s ago: executing program 5 (id=7610): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = epoll_create1(0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = signalfd4(r5, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) r7 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x0) fchdir(r8) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fchown(r9, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0xfffffed3) setreuid(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000140)) r10 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e24, 0x80, @loopback={0xffffffffffff80fe, 0xa8aaaafffeaaaa1e}, 0x8007}, 0x1c) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r6, &(0x7f0000000200)={0x40002019}) epoll_pwait(r4, &(0x7f0000000000)=[{}], 0x1, 0x240000, 0x0, 0x0) r11 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x8, [0xd, 0x6, 0xb, 0x3, 0xf, 0xa, 0x3, 0x3, 0xb, 0x3, 0x4, 0xc, 0xe, 0xa, 0x0, 0xc], 0x1, [0x1, 0x5, 0x6, 0x0, 0x1, 0x0, 0x7, 0x6, 0x0, 0x4, 0x3, 0x1, 0x400, 0xfff, 0x7, 0x6], [0xc, 0xfff, 0x3, 0x1ff, 0x793f, 0x8, 0x6, 0xfff7, 0x173c, 0x48, 0x7, 0x947, 0x0, 0x9, 0x40, 0x997c]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 5.542850144s ago: executing program 1 (id=7611): r0 = socket(0x10, 0x803, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000001c0), &(0x7f0000000240)=0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 5.542312423s ago: executing program 2 (id=7612): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x12881, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x145201, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000540)={&(0x7f0000000400)=[{0x800, 0x2, 0x0, {0x0, 0x8001, 0x1}}, {0x4, 0x0, 0x0, {0x2, 0x0, 0x1}}, {0x9, 0x1, 0x0, {0x1, 0xf, 0x1}}, {0xffffffffffffff9d, 0x2, 0x0, {0x4, 0x2, 0x3}}, {0x0, 0x2, 0x0, {0x3, 0x2, 0x1}}, {0x8000, 0x1, 0x0, {0x8, 0x4, 0x1}}, {0x80000001, 0x0, 0x0, {0x400, 0x3}}, {0x5, 0x2, 0x0, {0x5, 0x8, 0x2}}, {0x97, 0x2, 0x0, {0x8, 0x1}}, {0xe3ae, 0x0, 0x0, {0x7, 0xfffffffb, 0x2}}], 0xa, 0x20, 0x1, 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095", @ANYRES64], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)) sendmmsg(r3, &(0x7f0000000080), 0x1a1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(r4, &(0x7f00000005c0)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0x1, 0x807, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) listen(0xffffffffffffffff, 0x1) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x20000000) 5.396608227s ago: executing program 1 (id=7614): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x8000}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x9000) fallocate(r1, 0x0, 0x0, 0x8800000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) epoll_create1(0x0) pselect6(0x40, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x2, 0x80000002, 0x6, 0x9, 0x40, 0x8000}, 0x0, &(0x7f0000000240)={0x1f, 0x112, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000004}, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) listen(r2, 0x2) r3 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1a00, 0x0, 0x3) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0xfffffffffffffeff}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 5.396070717s ago: executing program 5 (id=7615): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x40, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x24008850) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x8d0) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x1, 0x7, 0x2, [0x3, 0x7fffffffffffffff, 0x1, 0x6, 0x4, 0xfffffffffffffffd]}) syz_usb_connect$uac1(0x4, 0xc8, &(0x7f00000004c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6, 0x3, 0x1, 0x7, 0xd0, 0x42, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd43d, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xbe, 0x71}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x9, 0x3, 0xf, 0xe}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x6, 0x1, 0xd, 0x0, "9638ed", "7363f7"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8, 0x1, 0x8, 0x5, "", "51e8"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x6, 0x0, 0x5, 0x1}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x6e9a, 0x10, 0x1, "ed86ea"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x4, 0x8, 0x9, {0x7, 0x25, 0x1, 0x8, 0x92, 0x651}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xbe, 0xf, 0x3}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xf, 0x4, 0xe1, 0xd, "d0"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x2, 0x9, 0x9, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xba, 0x4, 0x7, {0x7, 0x25, 0x1, 0x0, 0x9, 0x6e9}}}}}}}}]}}, &(0x7f0000000a40)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0x3, 0x7f, 0x6, 0x40, 0x1}, 0x5, &(0x7f0000000600)={0x5, 0xf, 0x5}, 0x7, [{0xb5, &(0x7f0000000640)=@string={0xb5, 0x3, "442850d99373e99ecd0b2f62c8ffd829fc93030760115f078687311a57db1739f9554b8c9193555eeb00128d3223e435203adfba5f6f748bf2ec5b26f7b2643287681769b53415eaacf9166cfe624960d6be2a99e3b9e346c2f7f8b96e33739cc9d69342d38a88068972e625a2ba219edc9879322367c31dc6db5fb3a1871d8ba7b151a2210f648d11d865859b2f0f69789415e2414777a1220f8c44b1676b0cdc499760b83603ecbdd30db390c584cc893c43"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x2001}}, {0x49, &(0x7f0000000740)=@string={0x49, 0x3, "8df38c83f78b2a22707a808a025f07aed1429ccfa67608ed374bf7b62b73b87ce81d0142a960cc5c218bfb2b57c74825393f46903a150539ac6192aa62a9a8aa4516fbb3dcfa74"}}, {0x8f, &(0x7f00000007c0)=@string={0x8f, 0x3, "c4f6ad9d3f09600e9b2c4ccb30095590c96a7d352646eb18fbc36bba56743b82ad978df1e2d7fc3a2414525d132d2bdb01f754b1c9fed5e87f57bc8896829314d43477a6ea5f329a813897c243246bfc012add6cffaeeb2cbdf7d722af61770b57efdb64306e03ff22d07cba90df0546e17231a2bcf32c12679aba1e9ccea7e9ca4db955c889f56e2535e1efa4"}}, {0xd9, &(0x7f0000000880)=@string={0xd9, 0x3, "9653e8df388ffa3b8ecd0e8132a304907214e83b8aa046f66d7016bbee995518fd02b889472af0106e093716a8026ebade39cf18ae8c37d79b452fdad13005108f1536989ecd6a662201118445e83fb9a6095a3054029aa1a9d9c0f2f698fcca0359233233d75accbec3925cc8f3a25ab42ef86584dab92a7c636f2dd207e703dc5a2b2f3e7dea52e0c46ac75b6c3c0d96172abe6e808557afef84994866f6328ac94cfcb99ff03a978a9ec672f95f943743b8d78899fd70509284b3bda9556579a0f7c3f3a6842005a2f1a6ed6ad52b26716f060efd8b"}}, {0x46, &(0x7f0000000980)=@string={0x46, 0x3, "b9522290e831afbd00965481bb7ccc1e11282a17926b8176529c86f28da779c3c65a4dfcd5226d313f29840fe1db051110c555cdf4547e81c3f27241fd86c6c7ef6516a1"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x459}}]}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000b00), 0x100, 0x0) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0xd5) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000dc0), &(0x7f0000000e00), 0x2, 0x1) getsockname$unix(0xffffffffffffffff, &(0x7f0000000fc0), &(0x7f0000001040)=0x6e) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001100)={'syztnl2\x00', &(0x7f0000001080)={'syztnl2\x00', 0x0, 0x4, 0xe1, 0x7, 0x7, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80, 0x10, 0x2f8, 0x401}}) fgetxattr(r0, &(0x7f0000006480)=@known='user.syz\x00', &(0x7f00000064c0)=""/210, 0xd2) 5.196715039s ago: executing program 2 (id=7616): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x260, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xf0, 0x0, {0x1000000}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0) 5.193379178s ago: executing program 2 (id=7617): sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf251200000018000180"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f00000001c0)={0x6bc, r1, 0x200, 0x70bd3b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x4c}}}}, [@NL80211_ATTR_FRAME={0x162, 0x33, @mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xc}, @broadcast, @device_a, @from_mac=@broadcast, {0x3, 0x2}}, 0x1, 0x2, 0x33, @val={0x10, 0x1, 0x6e}, [{0xdd, 0xb6, "cf798b946c94639e828b6ab570ab71fb1689a4fbf1726dd9d0e93acabd1a972efafbe018b3cd48810712e7b03ffb75dc81c9f8d99da72b019b4e090c8b834c5d2c2fffd9a0e23ff06119e75cf936b7c67d1784c1e5728837a0b2dcffa5ff595bcd72c14cfcfa8bf616b5edba8db7da3a5551d51fb3bcc61b26eead907e605e55b94b503127c832e9ed6bd41395a0fec6297f318874a01f555dbf169430ff218b0d6259cad2aeb12aa52a4adb2463d883825066b3d34e"}, {0xdd, 0x83, "27ba2936ae9dd5863c50f08d964a629879c8d3640329ad675e15943043630479c5ecd6601ebf7cf236775039fb5dcf5d377a26199cf7fdd115839327166e2eba59a6e81ff31cf87ace0af96c400f660d5717abae8cfd3a7259a32088ecb5a85708aece8d0a66e4f1ebea10dd6a27414a53a9c8a2afc7c5e26cd7627c18f9d885be472d"}]}}, @NL80211_ATTR_FRAME={0x4fa, 0x33, @data_frame={@a_msdu=@type10={{0x0, 0x2, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7}, @from_mac=@broadcast, @device_a, @from_mac, {0x9, 0x4}, "", @value={0x7, 0x0, 0x1, 0x1, 0x81}, @value=@ver_80211n={0x0, 0x9d9, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_b, @device_a, 0x81, "16340ede77e3b4b2ff02dac113692e866a282232ada17dee7cba5c146d3e8aa8d4c63cb68f08cf39f5c8289bc91085778e66063371ad1db8456dc106da28ae1d95e91d6509aed08205d94addaa4b9f277dda74f660d33375db590a254802d1b24ff1470de05cef98f9e8e6fb1ec9dc996c7e1168d23ea558b7ef888b4134aa96ef"}, {@device_a, @broadcast, 0x36, "14bf41efc3f208e5c62dfa118ca3486d23747ac06296188df6b5462feb668fe6f54534f965ad5618b66c6e1dab9efc3eef2f621f1255"}, {@device_b, @broadcast, 0x4, "dae0423b"}, {@device_b, @broadcast, 0x5e, "de9bf33838c9bcc3016047e672c01c0f1af041ac92faf597c3e85b709637b3b406ed02d64e065a1f144a29b74eb53daa36b447886dbe7e1bfe0232986b7b33a252de4aa0aa2c1fbe60107ac6ecc13d824f38ed426907264d681393c688d9"}, {@broadcast, @device_a, 0x91, "84c34c8d464e745642e5cfdef52183693bd2d17388f1fc49279ad846fd47fc5b2cfdced152af398cf85c600065379f97f69cd04f450d5de4cba7460b7b57d14fc8345a27f0109c6aa07284c8f80a71088123a76b1b303b0efd88807d1bc70b0e929b5e693eec85c5e7f13ef6f08d99794535b7ba915bee3bc235f6d87dea0ffe77a28ae68992f0e054d3cba553b8e1a08c"}, {@device_a, @device_b, 0x6a, "7b7bfb34b81548ff16102603f7e68b1b490efc953fb1ac637ad716c1433135fdd3686e9efd1e6ea80d55629a50b383e14d6b3f631f65c5be1aebdfeec05ee3c54755947c601657ec71fb97b460cf3b9615d688f1e099c4203bcf08a555efe3b5fe914815a181a237f582"}, {@device_b, @device_b, 0x6c, "6770264d3f1509906fda9ebecd9ced70f3fe9f1c8841c2756d6441af100f061f87f4b47780141b41b547c71eaeaead1403e031271c41aa5b63da264a09c57c07f97277baff61b92401688fc40fd971082164a6a0a53ad9684cf094d3818ef8b10d714ea1e92bb5ceee3e21a2"}, {@device_a, @device_a, 0x31, "4787a4f6339569f61741cd37e5186cb2922f87bcc26f38114fe3a33212cf2af27c2d96734ccfedccb48b4fd7ab7c25fd85"}, {@device_b, @device_b, 0xb9, "a08c7004d08b5844d199e708890d0845115581a1705682bcdcef3e42c2a01cd5911377ded03f25e3585096e26f47dd5234a9545e2a6b7004955a2f7c8f63439383abc3366a416070ea1865aa1bd8506f527f4ff7a2bc2f08406e11b2e4164678bad6bd91bd28372fd24fc0032a5881bed64dbc4575c7a0941ca348900748c8d3d6f6001fa41989387dcd843a86f7e70fec904fe3072511bf59daccd263f0abed0802e8deb212148d72cda35561850a80873aa1d7738b2148d2"}, {@device_b, @broadcast, 0xd8, "fde38a09b85d6e74fd0f545f6c3aff6d98c98303fbcc363b7dce328a8183f7c030ef8ff5695c4ee1642e82e9bcf79f8c6c876ab6438da6b4f2fb462a52e28dca0113bf53b5c5befc5859ce249018b5f2e14b4221098bccdc99eae0300326f40ed2f0364f4c712e0acfc8f294a9cf9eb1dcde0b88ecf5c8e03d9d86e3371f755f273225004ea8170c0bfd949c0099f70a5e774c99f3c34d7a686368d0a480f32ad5e5af032bb2727ad2f14b72a40e864c84e475d944669e128bd27f85d2a1509597e4dd3b127a5f61a68f547b860dd75ddc4533ed4dec91a0"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x806}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x6bc}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001900010000000000000000000218"], 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_PTRACER(0x59616d61, r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) creat(&(0x7f0000000240)='./file1\x00', 0x8) open(&(0x7f00000000c0)='./file0\x00', 0x188843, 0x198) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) pivot_root(&(0x7f0000000400)='./file0/../file0\x00', 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) listxattr(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) 5.127049186s ago: executing program 4 (id=7618): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.971720737s ago: executing program 1 (id=7619): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1e0411, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x6025, 0x4008, 0xb, 0x3, 0x80, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r8, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) sendmsg$tipc(r8, &(0x7f0000000380)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x0, 0x2}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000140)="14ec", 0x2}], 0x1, 0x0, 0x0, 0x20010080}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000080)={[{@prjquota}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@appraise}, {@hash}, {@subj_role={'subj_role', 0x3d, 'ext4\x00'}}]}, 0x1, 0x523, &(0x7f0000000b80)="$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") 4.887270521s ago: executing program 1 (id=7620): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = creat(&(0x7f0000000380)='./file0\x00', 0xc7) close(r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002dbd7000fedbdf256f00000008000300", @ANYRES32=0x0, @ANYBLOB="080026006c09230008002201b502000005001801250000000800a1000000000008002600cc150000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x81) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x4440, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) llistxattr(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000400)=""/108, 0x6c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x2, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4c024}, 0x4008014) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000006000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000008900004000000000000000000000000000000080000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000ffffffffffffff7f00000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_create_resource$binfmt(&(0x7f0000000080)='./file0/file0\x00') r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r7, &(0x7f00000000c0)=""/144, 0x90, 0x2f) ioctl$EXT4_IOC_SETFSUUID(r5, 0x4008662c, &(0x7f00000005c0)={0x0, 0x0, "4df119acb9b34f86ee67ab514153656c"}) sendmsg$nl_xfrm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@migrate={0xf8, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private0, @in=@remote, 0xfffc, 0x0, 0x0, 0x4, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0x33, 0x3, 0x0, 0x2, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in6=@rand_addr=' \x01\x00', @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x8}]}, @offload={0xc}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4004000}, 0x42000) 4.886160851s ago: executing program 4 (id=7621): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000030900010073797a30000000004c000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a4000000000080003400000004008000f4000000006201200000c0a01030000000000000000070000070900020073797a31000000000900010073797a3000000000f4110380f01100800800034000000002090009"], 0x12b4}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000040)=""/74) 4.797073185s ago: executing program 1 (id=7622): r0 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000020601000000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140e067de010c00018008000140e0000001050014000900000005000500020000000500010006"], 0x6c}}, 0x0) syz_clone(0x2280400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = signalfd(r0, &(0x7f0000000240)={[0x7ff]}, 0x8) r3 = syz_create_resource$binfmt(&(0x7f0000000280)='./file0\x00') execveat$binfmt(r2, r3, &(0x7f0000000380)={[&(0x7f00000002c0)='/dev/sg#\x00', &(0x7f0000000300)='/dev/sg#\x00', &(0x7f0000000340)='*%}\x00']}, &(0x7f00000004c0)={[&(0x7f0000000400)='/dev/sg#\x00']}, 0x800) readv(r0, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}], 0x1) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7ff00000) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffd, 0x95, 0x1d, @scatter={0x0, 0x91ff, 0x0}, &(0x7f0000000140)="a091b60000003de353777be8aa3707d7d84125570eac7f4e76e9b9edf88c3632e1cb5616ae689a3eb952297ed0ee6da2a5089fcc47adb804092e9b4855e3d1beec94b53f2b1266b757879cb837aaf55e4f4851e5bbca5603bb21499fa6f9146fd68f2a60dd24263094d6f812b558b29a2d89d1c8632005530d882557ce35bf0e9fa5da767a00"/149, 0x0, 0x1fc, 0x20, 0xfffffeff, 0x0}) r6 = fcntl$getown(r5, 0x9) capget(&(0x7f00000000c0)={0x19980330, r6}, &(0x7f0000000200)={0x280, 0x25f, 0x9, 0xf, 0x0, 0x4}) 4.72129207s ago: executing program 4 (id=7623): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000500)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff0000000000000000009500000000"]) 4.71897205s ago: executing program 5 (id=7624): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4880) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x20004080) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, 0x0, 0x0) 4.670835391s ago: executing program 5 (id=7625): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = epoll_create1(0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = signalfd4(r5, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) r7 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x0) fchdir(r8) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fchown(r9, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0xfffffed3) setreuid(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000140)) r10 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e24, 0x80, @loopback={0xffffffffffff80fe, 0xa8aaaafffeaaaa1e}, 0x8007}, 0x1c) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r6, &(0x7f0000000200)={0x40002019}) epoll_pwait(r4, &(0x7f0000000000)=[{}], 0x1, 0x240000, 0x0, 0x0) r11 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x8, [0xd, 0x6, 0xb, 0x3, 0xf, 0xa, 0x3, 0x3, 0xb, 0x3, 0x4, 0xc, 0xe, 0xa, 0x0, 0xc], 0x1, [0x1, 0x5, 0x6, 0x0, 0x1, 0x0, 0x7, 0x6, 0x0, 0x4, 0x3, 0x1, 0x400, 0xfff, 0x7, 0x6], [0xc, 0xfff, 0x3, 0x1ff, 0x793f, 0x8, 0x6, 0xfff7, 0x173c, 0x48, 0x7, 0x947, 0x0, 0x9, 0x40, 0x997c]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 4.328302497s ago: executing program 6 (id=7626): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x12881, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x145201, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000540)={&(0x7f0000000400)=[{0x800, 0x2, 0x0, {0x0, 0x8001, 0x1}}, {0x4, 0x0, 0x0, {0x2, 0x0, 0x1}}, {0x9, 0x1, 0x0, {0x1, 0xf, 0x1}}, {0xffffffffffffff9d, 0x2, 0x0, {0x4, 0x2, 0x3}}, {0x0, 0x2, 0x0, {0x3, 0x2, 0x1}}, {0x8000, 0x1, 0x0, {0x8, 0x4, 0x1}}, {0x80000001, 0x0, 0x0, {0x400, 0x3}}, {0x5, 0x2, 0x0, {0x5, 0x8, 0x2}}, {0x97, 0x2, 0x0, {0x8, 0x1}}, {0xe3ae, 0x0, 0x0, {0x7, 0xfffffffb, 0x2}}], 0xa, 0x20, 0x1, 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095", @ANYRES64], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)) sendmmsg(r3, &(0x7f0000000080), 0x1a1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(r4, &(0x7f00000005c0)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0x1, 0x807, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) listen(0xffffffffffffffff, 0x1) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x20000000) 4.247222122s ago: executing program 6 (id=7627): r0 = socket(0x10, 0x803, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000001c0), &(0x7f0000000240)=0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 4.23621472s ago: executing program 5 (id=7628): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x7, 0x41cb696feac90ddf, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x8000000000000003}, 0x41a4, 0x0, 0x800000, 0x5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x204b}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x200080c4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004800}, 0x8) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x10808, &(0x7f0000000c00), 0x1, 0xb88, &(0x7f0000002380)="$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") r6 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000280)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4de, &(0x7f0000000c40)="$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") openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x1c0) ftruncate(r6, 0x2007ffc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r6, r6, 0x0, 0x800000009) 4.109548916s ago: executing program 6 (id=7629): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x260, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xf0, 0x0, {0x1000000}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0) 4.039379903s ago: executing program 4 (id=7630): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x8000}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") r1 = open(0x0, 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x9000) fallocate(r1, 0x0, 0x0, 0x8800000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) epoll_create1(0x0) pselect6(0x40, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x2, 0x80000002, 0x6, 0x9, 0x40, 0x8000}, 0x0, &(0x7f0000000240)={0x1f, 0x112, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000004}, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) listen(r2, 0x2) r3 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1a00, 0x0, 0x3) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0xfffffffffffffeff}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 4.039030913s ago: executing program 6 (id=7631): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x7, 0x41cb696feac90ddf, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x8000000000000003}, 0x41a4, 0x0, 0x800000, 0x5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x204b}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x200080c4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004800}, 0x8) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x10808, &(0x7f0000000c00), 0x1, 0xb88, &(0x7f0000002380)="$eJzs3c9vFFUcAPDvzG5/UNAuxoMYE2o8QGLYtoCCxAN4NB5MJEFPuPYHaVjA0JpYQmK5mXhRgydPntREj14NMerJg9ET/4EhIabwB9TM7GxZ292WwpYh5fNJZve9eSzvO02++9503nQCeGKNZS9pxL6I+DyJGC32pxExmJeGI5Za/+7u8tWpbEtiZeWdf5NIIuLO8tWp9v+VFO+7s5dq/sn465eIZyrr+51fvHK+0WzOXC7q4wsXPhyfX7xyaO5C49zMuZmLh1+dODL52tHjrxy996HhhzvWxWPpZ3+++cZ3189+/cePx1/4NImTsado6zyOfhmLsdWfSadqRLzX785KUimOp9txAgDw+Ek75nD7YjQqeallNOpzpQYHAAAA9MUnEbECAAAA7HCJ838AAADY4drrAO4sX51qb+WuSAAeldunIqLWyv/2/f2tlmos5e/DMRARI3eTjjuDWvd71/rQ/1hE/PDVsf3ZFtt0Hz7Q3dK1iHiu2/if5PlfK/7oxtr8TyNiog/9j62py394dLrlf+u8YPP8P9mH/uU/AAAAAAAA9M+NU60L+euv/6er63+iy/W/Spdrdw9i8+t/6a0+dAN0cftUxOsdz/a525H/hVqlqD2VrwcYSGbnmjMTEfF0RByMgaGsPrlBH9/+dOLvXm2d6/+yLeu/vRawiONWdej/n5luLDQe5piBltvXIp6vdsv/ZHX8T3qs/337Pvv47czPs73aNs9/YLusfBNxoOv4f++JbsnGz+cbz+cD4+1ZwXpnXvz1+179y38oTzb+j2yc/7Wk83md81vvY2Lk0LlebQ86/x9MTudPFR0s9n3cWFi4PBkxmLy1fv/hrccMO1E7H9r5kuX/wZe6n/9vNP/Pkuz94lsijYhG8Z7VP1jT59DZ37/oFY/xH8qT5f/0lsb/rRe+fHf5dK/+72/8P5qP6QeLPX7/Bxu73wQtO04AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4nKQRsSeStL5aTtN6PWJ3RDwbI2nz0vzCy7OXPro4nbVF1GIgnZ1rzkxExGirnmT1ybx8r354Tf1IROyNiOuju/J6fepSc7rsgwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDV7ojYE0laj4g0L6dpvd5q+2e07OgAAACAvqmVHQAAAACw7Zz/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCQ9u6/cTOJiKUTu/ItM1i0DZQaGbDd0rIDAEpTKTsAoDTVsgMASuMcH0g2aR/u2WIGAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAkObDvxs0kIpZO7Mq3zGDRNlBqZMB2S8sOAChNpewAgNJUyw4AKI1zfCDZpH24694hMwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAJ8z84pXzjWZz5rLChoVqRDwGYSgoPKJC2d9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7GT/BQAA//+isv4G") syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000280)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4de, &(0x7f0000000c40)="$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") fsetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.overlay.origin\x00', 0x0, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(0xffffffffffffffff, 0x2007ffc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) 156.776509ms ago: executing program 6 (id=7632): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, 0x0, 0x0) 156.476279ms ago: executing program 1 (id=7633): bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="0e00000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB="00000033e86855ab406b4734fc70c21900000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="a0000200c988000700047c0000000000000016801800018014000a000900000a00000000f9ffffffffffffff"], 0x44}}, 0x800) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200006, 0x801, 0x4, 0x7, 0xb0}) socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000580)=0x16, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x2}, {0x4, 0x3}, {0xd, 0x5}]}]}, {0x0, [0x30, 0x2e]}}, &(0x7f0000000600)=""/156, 0x40, 0x9c, 0x1, 0xb}, 0x28) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) socket$inet_smc(0x2b, 0x1, 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000200)={0xe, 0x7, 0x2, {0x5, 'hsr0\x00'}}, 0xe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0xffffff80, 0x178, 0x0, 0x178, 0x290, 0x230, 0x258, 0x290, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x128, 0x170, 0x12, {0x959f1400}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0x28000, 0x10, 0x3, {0x2df7}}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0x0, 0xff000000, 0xffffff00], 0x6, 0xc, 0x3, 0x4e24, 0x2, 0x8}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'geneve1\x00'}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xff000000], 'veth0_to_team\x00', 'hsr0\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0xc4, 0x1}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x2}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) io_uring_enter(0xffffffffffffffff, 0x56d7, 0xf70d, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000280), 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r5 = socket(0x10, 0x3, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000001c0)=0xf) ioctl$TIOCSLCKTRMIOS(r6, 0x5457, &(0x7f0000000040)) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0xfff, 0x4}, 0x10) write(r5, 0x0, 0x0) 101.022479ms ago: executing program 5 (id=7634): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x40, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x24008850) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x8d0) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x1, 0x7, 0x2, [0x3, 0x7fffffffffffffff, 0x1, 0x6, 0x4, 0xfffffffffffffffd]}) syz_usb_connect$uac1(0x4, 0xc8, &(0x7f00000004c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6, 0x3, 0x1, 0x7, 0xd0, 0x42, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd43d, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xbe, 0x71}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x9, 0x3, 0xf, 0xe}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x6, 0x1, 0xd, 0x0, "9638ed", "7363f7"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8, 0x1, 0x8, 0x5, "", "51e8"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x6, 0x0, 0x5, 0x1}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x6e9a, 0x10, 0x1, "ed86ea"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x4, 0x8, 0x9, {0x7, 0x25, 0x1, 0x8, 0x92, 0x651}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xbe, 0xf, 0x3}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xf, 0x4, 0xe1, 0xd, "d0"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x2, 0x9, 0x9, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xba, 0x4, 0x7, {0x7, 0x25, 0x1, 0x0, 0x9, 0x6e9}}}}}}}}]}}, &(0x7f0000000a40)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0x3, 0x7f, 0x6, 0x40, 0x1}, 0x5, &(0x7f0000000600)={0x5, 0xf, 0x5}, 0x7, [{0xb5, &(0x7f0000000640)=@string={0xb5, 0x3, "442850d99373e99ecd0b2f62c8ffd829fc93030760115f078687311a57db1739f9554b8c9193555eeb00128d3223e435203adfba5f6f748bf2ec5b26f7b2643287681769b53415eaacf9166cfe624960d6be2a99e3b9e346c2f7f8b96e33739cc9d69342d38a88068972e625a2ba219edc9879322367c31dc6db5fb3a1871d8ba7b151a2210f648d11d865859b2f0f69789415e2414777a1220f8c44b1676b0cdc499760b83603ecbdd30db390c584cc893c43"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x2001}}, {0x49, &(0x7f0000000740)=@string={0x49, 0x3, "8df38c83f78b2a22707a808a025f07aed1429ccfa67608ed374bf7b62b73b87ce81d0142a960cc5c218bfb2b57c74825393f46903a150539ac6192aa62a9a8aa4516fbb3dcfa74"}}, {0x8f, &(0x7f00000007c0)=@string={0x8f, 0x3, "c4f6ad9d3f09600e9b2c4ccb30095590c96a7d352646eb18fbc36bba56743b82ad978df1e2d7fc3a2414525d132d2bdb01f754b1c9fed5e87f57bc8896829314d43477a6ea5f329a813897c243246bfc012add6cffaeeb2cbdf7d722af61770b57efdb64306e03ff22d07cba90df0546e17231a2bcf32c12679aba1e9ccea7e9ca4db955c889f56e2535e1efa4"}}, {0xd9, &(0x7f0000000880)=@string={0xd9, 0x3, "9653e8df388ffa3b8ecd0e8132a304907214e83b8aa046f66d7016bbee995518fd02b889472af0106e093716a8026ebade39cf18ae8c37d79b452fdad13005108f1536989ecd6a662201118445e83fb9a6095a3054029aa1a9d9c0f2f698fcca0359233233d75accbec3925cc8f3a25ab42ef86584dab92a7c636f2dd207e703dc5a2b2f3e7dea52e0c46ac75b6c3c0d96172abe6e808557afef84994866f6328ac94cfcb99ff03a978a9ec672f95f943743b8d78899fd70509284b3bda9556579a0f7c3f3a6842005a2f1a6ed6ad52b26716f060efd8b"}}, {0x46, &(0x7f0000000980)=@string={0x46, 0x3, "b9522290e831afbd00965481bb7ccc1e11282a17926b8176529c86f28da779c3c65a4dfcd5226d313f29840fe1db051110c555cdf4547e81c3f27241fd86c6c7ef6516a1"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x459}}]}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000b00), 0x100, 0x0) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0xd5) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000dc0), &(0x7f0000000e00), 0x2, 0x1) getsockname$unix(0xffffffffffffffff, &(0x7f0000000fc0), &(0x7f0000001040)=0x6e) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001100)={'syztnl2\x00', &(0x7f0000001080)={'syztnl2\x00', 0x0, 0x4, 0xe1, 0x7, 0x7, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80, 0x10, 0x2f8, 0x401}}) fgetxattr(r0, &(0x7f0000006480)=@known='user.syz\x00', &(0x7f00000064c0)=""/210, 0xd2) 0s ago: executing program 6 (id=7635): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4880) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x20004080) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): 29504] netlink_sendmsg+0x40c/0x6f0 [ 989.569006][T29504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 989.569042][T29504] ____sys_sendmsg+0x563/0x5b0 [ 989.569073][T29504] ___sys_sendmsg+0x195/0x1e0 [ 989.569226][T29504] __x64_sys_sendmsg+0xd4/0x160 [ 989.569259][T29504] x64_sys_call+0x194c/0x3020 [ 989.569320][T29504] do_syscall_64+0x12c/0x370 [ 989.569347][T29504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.569432][T29504] RIP: 0033:0x7fc480f2c799 [ 989.569509][T29504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 989.569533][T29504] RSP: 002b:00007fc47f987028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 989.569554][T29504] RAX: ffffffffffffffda RBX: 00007fc4811a5fa0 RCX: 00007fc480f2c799 [ 989.569568][T29504] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 989.569580][T29504] RBP: 00007fc47f987090 R08: 0000000000000000 R09: 0000000000000000 [ 989.569593][T29504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 989.569629][T29504] R13: 00007fc4811a6038 R14: 00007fc4811a5fa0 R15: 00007ffd02669518 [ 989.569654][T29504] [ 989.832121][T29511] loop5: detected capacity change from 0 to 512 [ 989.847110][T29511] EXT4-fs: Ignoring removed nobh option [ 989.872947][T29511] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 989.914080][T29517] loop4: detected capacity change from 0 to 512 [ 989.914921][T29511] EXT4-fs (loop5): 1 truncate cleaned up [ 989.921502][T29517] EXT4-fs: Ignoring removed nobh option [ 989.934987][T29511] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 989.971099][T29517] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 990.019324][T29523] syzkaller0: entered promiscuous mode [ 990.024914][T29523] syzkaller0: entered allmulticast mode [ 990.032787][T29523] FAULT_INJECTION: forcing a failure. [ 990.032787][T29523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 990.046359][T29523] CPU: 1 UID: 0 PID: 29523 Comm: syz.0.7342 Tainted: G W syzkaller #0 PREEMPT(full) [ 990.046398][T29523] Tainted: [W]=WARN [ 990.046469][T29523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 990.046482][T29523] Call Trace: [ 990.046488][T29523] [ 990.046496][T29523] __dump_stack+0x1d/0x30 [ 990.046530][T29523] dump_stack_lvl+0x95/0xd0 [ 990.046561][T29523] dump_stack+0x15/0x1b [ 990.046596][T29523] should_fail_ex+0x263/0x280 [ 990.046624][T29523] should_fail+0xb/0x20 [ 990.046647][T29523] should_fail_usercopy+0x1a/0x20 [ 990.046671][T29523] _copy_from_user+0x1c/0xb0 [ 990.046761][T29523] __copy_msghdr+0x244/0x300 [ 990.046799][T29523] ___sys_sendmsg+0x10c/0x1e0 [ 990.046841][T29523] __x64_sys_sendmsg+0xd4/0x160 [ 990.046949][T29523] x64_sys_call+0x194c/0x3020 [ 990.047053][T29523] do_syscall_64+0x12c/0x370 [ 990.047076][T29523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.047105][T29523] RIP: 0033:0x7fd08669c799 [ 990.047127][T29523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 990.047151][T29523] RSP: 002b:00007fd0850f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 990.047175][T29523] RAX: ffffffffffffffda RBX: 00007fd086915fa0 RCX: 00007fd08669c799 [ 990.047227][T29523] RDX: 0000000000000005 RSI: 0000200000000280 RDI: 0000000000000007 [ 990.047240][T29523] RBP: 00007fd0850f7090 R08: 0000000000000000 R09: 0000000000000000 [ 990.047253][T29523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 990.047265][T29523] R13: 00007fd086916038 R14: 00007fd086915fa0 R15: 00007ffe9b790988 [ 990.047286][T29523] [ 990.239662][T29517] EXT4-fs (loop4): 1 truncate cleaned up [ 990.250057][T29517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 990.835682][T24675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.881366][ T28] kauditd_printk_skb: 92 callbacks suppressed [ 990.881386][ T28] audit: type=1400 audit(1773318923.683:6390): avc: denied { unmount } for pid=24675 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 990.911021][T26950] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.969121][ T28] audit: type=1400 audit(1773318923.823:6391): avc: denied { prog_run } for pid=29533 comm="syz.4.7344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 991.036386][ T28] audit: type=1400 audit(1773318923.843:6392): avc: denied { read } for pid=29533 comm="syz.4.7344" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 991.091902][ T28] audit: type=1400 audit(1773318923.843:6393): avc: denied { open } for pid=29533 comm="syz.4.7344" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 991.142860][T29538] loop0: detected capacity change from 0 to 512 [ 991.149603][ T28] audit: type=1400 audit(1773318923.843:6394): avc: denied { ioctl } for pid=29533 comm="syz.4.7344" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 991.193946][T29538] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 991.202421][T29538] EXT4-fs (loop0): orphan cleanup on readonly fs [ 991.209092][ T28] audit: type=1400 audit(1773318923.843:6395): avc: denied { write } for pid=29533 comm="syz.4.7344" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 991.228995][T29538] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 991.254701][ T28] audit: type=1400 audit(1773318923.843:6396): avc: denied { write } for pid=29533 comm="syz.4.7344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 991.276789][T29538] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 991.283870][ T28] audit: type=1400 audit(1773318923.863:6397): avc: denied { name_bind } for pid=29529 comm="syz.5.7343" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 991.305866][T29538] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #13: comm syz.0.7345: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 991.324126][T29538] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 991.324220][ T28] audit: type=1400 audit(1773318923.973:6398): avc: denied { write } for pid=29535 comm="syz.0.7345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 991.333492][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 991.333536][ C0] EXT4-fs (loop0): last error at time 1773318924: ext4_ext_check_inode:521: inode 13 [ 991.354873][T29538] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.7345: couldn't read orphan inode 13 (err -117) [ 991.359528][ T28] audit: type=1400 audit(1773318923.973:6399): avc: denied { open } for pid=29535 comm="syz.0.7345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 991.377398][T29538] loop0: lost filesystem error report for type 5 error -117 [ 991.401452][T29538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 991.424286][T29538] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 991.484339][T29545] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7347'. [ 991.593895][T29514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.605152][T29514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 991.857716][T29554] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 992.106748][T29562] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7353'. [ 992.126619][T29562] lo speed is unknown, defaulting to 1000 [ 992.354042][T22912] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.400012][T29573] SELinux: failed to load policy [ 992.636235][T29592] loop4: detected capacity change from 0 to 2048 [ 992.886470][T29592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 993.061682][T26950] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 993.610422][T29628] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7363'. [ 993.628001][T29629] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7366'. [ 993.795931][T29629] loop2: detected capacity change from 0 to 764 [ 993.809721][T29629] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 993.841438][T29628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7363'. [ 993.906158][T29632] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7367'. [ 993.929392][T29632] lo speed is unknown, defaulting to 1000 [ 994.142142][T29639] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 994.179468][T29635] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7368'. [ 994.397361][T29648] bond2: option miimon: invalid value (18446744073709551615) [ 994.428749][T29651] loop5: detected capacity change from 0 to 1024 [ 994.435550][T29648] bond2: option miimon: allowed values 0 - 2147483647 [ 994.442669][T29644] loop4: detected capacity change from 0 to 764 [ 994.457100][T29644] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 994.471416][T29651] EXT4-fs: Ignoring removed bh option [ 994.495652][T29648] bond2 (unregistering): Released all slaves [ 994.517245][T29651] EXT4-fs: inline encryption not supported [ 994.533016][T29651] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 994.547430][T29651] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 994.561484][T29651] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 2: comm syz.5.7374: lblock 2 mapped to illegal pblock 2 (length 1) [ 994.576179][T29651] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 994.576364][T29651] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 48: comm syz.5.7374: lblock 0 mapped to illegal pblock 48 (length 1) [ 994.585559][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 994.585597][ C1] EXT4-fs (loop5): initial error at time 1773318927: ext4_map_blocks:776: inode 3: block 2 [ 994.585628][ C1] EXT4-fs (loop5): last error at time 1773318927: ext4_map_blocks:776: inode 3: block 2 [ 994.627467][T29651] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 994.627735][T29651] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.7374: Failed to acquire dquot type 0 [ 994.649325][T29651] loop5: lost filesystem error report for type 5 error -117 [ 994.656991][T29651] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 994.675637][T29651] loop5: lost filesystem error report for type 5 error -117 [ 994.675788][T29651] EXT4-fs error (device loop5): ext4_evict_inode:255: inode #11: comm syz.5.7374: mark_inode_dirty error [ 994.694808][T29651] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 994.694966][T29651] EXT4-fs warning (device loop5): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 994.714555][T29651] EXT4-fs (loop5): 1 orphan inode deleted [ 994.720890][T29651] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 994.733478][T10481] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:30: lblock 1 mapped to illegal pblock 1 (length 1) [ 994.747866][T10481] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 994.748590][T10481] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:30: Failed to release dquot type 0 [ 994.794902][T24675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.806745][T24675] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 994.852314][T24675] loop5: lost filesystem error report for type 5 error -117 [ 994.855824][T24675] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 994.892437][T24675] loop5: lost filesystem error report for type 5 error -117 [ 994.923090][T24675] EXT4-fs error (device loop5): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 994.947672][T29657] loop0: detected capacity change from 0 to 512 [ 994.997006][T24675] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 995.017581][T29657] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.7376: inode has both inline data and extents flags [ 995.052216][T29666] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7378'. [ 995.061530][T29666] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7378'. [ 995.071584][T29657] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 995.072646][T29657] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.7376: couldn't read orphan inode 15 (err -117) [ 995.082106][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 995.082146][ C1] EXT4-fs (loop0): initial error at time 1773318927: ext4_orphan_get:1391: inode 15 [ 995.082303][ C1] EXT4-fs (loop0): last error at time 1773318927: ext4_orphan_get:1391: inode 15 [ 995.096897][T29659] loop2: detected capacity change from 0 to 512 [ 995.101356][T29657] loop0: lost filesystem error report for type 5 error -117 [ 995.105464][T29657] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 995.169782][T29659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 995.185492][T29659] ext4 filesystem being mounted at /350/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 995.204472][T29659] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.214983][T28001] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.621340][T29659] loop2: detected capacity change from 0 to 512 [ 995.657708][T29672] loop0: detected capacity change from 0 to 512 [ 995.668589][T29659] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 995.690657][T29659] EXT4-fs (loop2): orphan cleanup on readonly fs [ 995.705425][T29659] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 995.724811][T29659] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 995.734380][T29672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 995.752241][T29672] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 995.771940][T29659] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #13: comm syz.2.7377: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 995.781739][T29672] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.796159][T29659] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 995.802589][T29659] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.7377: couldn't read orphan inode 13 (err -117) [ 995.812147][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 995.812276][ C0] EXT4-fs (loop2): last error at time 1773318928: ext4_ext_check_inode:521: inode 13 [ 995.843187][T29659] loop2: lost filesystem error report for type 5 error -117 [ 995.980638][T29679] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7382'. [ 996.131240][T29683] loop4: detected capacity change from 0 to 764 [ 996.140361][T29683] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 996.157950][ T28] kauditd_printk_skb: 109 callbacks suppressed [ 996.157969][ T28] audit: type=1400 audit(1773318929.013:6506): avc: denied { setopt } for pid=29681 comm="syz.2.7384" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 996.196214][ T28] audit: type=1400 audit(1773318929.053:6507): avc: denied { read } for pid=29680 comm="syz.6.7383" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 996.244002][T29687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7384'. [ 996.255570][T29688] Set syz0 is full, maxelem 0 reached [ 996.288983][ T28] audit: type=1400 audit(1773318929.053:6508): avc: denied { open } for pid=29680 comm="syz.6.7383" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 996.312906][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b517e00: rx timeout, send abort [ 996.321191][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b517e00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 996.406697][T29672] loop0: detected capacity change from 0 to 512 [ 996.724653][T29696] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 996.736830][T29694] loop6: detected capacity change from 0 to 1024 [ 996.746915][T29672] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 996.787021][T29672] EXT4-fs (loop0): orphan cleanup on readonly fs [ 996.807531][T29694] EXT4-fs: Ignoring removed bh option [ 996.813016][T29694] EXT4-fs: inline encryption not supported [ 996.842725][ T28] audit: type=1400 audit(1773318929.213:6509): avc: denied { read } for pid=2983 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 996.902206][T29672] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 996.934327][T29694] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 996.976310][ T28] audit: type=1400 audit(1773318929.213:6510): avc: denied { search } for pid=2983 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 997.001022][T29694] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 997.031761][T29672] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 997.044368][T29694] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 2: comm syz.6.7387: lblock 2 mapped to illegal pblock 2 (length 1) [ 997.062680][T29699] SELinux: failed to load policy [ 997.076516][T29672] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #13: comm syz.0.7380: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 997.104840][T29694] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 997.110252][T29694] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 997.119432][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 997.119449][ C1] EXT4-fs (loop6): initial error at time 1773318929: ext4_map_blocks:776: inode 3: block 2 [ 997.119480][ C1] EXT4-fs (loop6): last error at time 1773318929: ext4_map_blocks:776: inode 3: block 2 [ 997.153989][ T28] audit: type=1400 audit(1773318929.223:6511): avc: denied { append } for pid=2983 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 997.184706][T29694] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 48: comm syz.6.7387: lblock 0 mapped to illegal pblock 48 (length 1) [ 997.222543][ T28] audit: type=1400 audit(1773318929.223:6512): avc: denied { open } for pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 997.283850][T29706] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7391'. [ 997.300048][T29694] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 997.300245][T29694] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 997.318677][T29672] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 997.325038][T29672] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.7380: couldn't read orphan inode 13 (err -117) [ 997.327973][ T28] audit: type=1400 audit(1773318929.223:6513): avc: denied { getattr } for pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 997.334724][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 997.361576][T29694] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.7387: Failed to acquire dquot type 0 [ 997.369939][ C1] EXT4-fs (loop0): last error at time 1773318930: ext4_ext_check_inode:521: inode 13 [ 997.394794][T29694] loop6: lost filesystem error report for type 5 error -117 [ 997.414735][T29694] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 997.424278][T29694] loop6: lost filesystem error report for type 5 error -117 [ 997.424951][T29694] EXT4-fs error (device loop6): ext4_evict_inode:255: inode #11: comm syz.6.7387: mark_inode_dirty error [ 997.445793][T29672] loop0: lost filesystem error report for type 5 error -117 [ 997.447542][T29694] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 997.455287][T29694] EXT4-fs warning (device loop6): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 997.474940][T29694] EXT4-fs (loop6): 1 orphan inode deleted [ 997.504219][T10481] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:30: lblock 1 mapped to illegal pblock 1 (length 1) [ 997.527416][T10481] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:30: Failed to release dquot type 0 [ 997.545687][T26698] EXT4-fs error (device loop6): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 997.564801][T26698] loop6: lost filesystem error report for type 5 error -117 [ 997.564908][T26698] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 997.657183][T26698] loop6: lost filesystem error report for type 5 error -117 [ 997.657381][T26698] EXT4-fs error (device loop6): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 997.690411][T26698] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 997.859323][T29718] loop2: detected capacity change from 0 to 4096 [ 998.730440][T29704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.965288][T29704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.956746][T29721] loop6: detected capacity change from 0 to 4096 [ 1000.824916][T29721] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1000.825017][T29721] EXT4-fs: failed to create workqueue [ 1000.839981][T29721] EXT4-fs (loop6): mount failed [ 1001.402711][T29729] loop4: detected capacity change from 0 to 2048 [ 1001.410590][T29726] __nla_validate_parse: 1 callbacks suppressed [ 1001.410605][T29726] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7396'. [ 1001.596390][T29726] loop0: detected capacity change from 0 to 764 [ 1002.419872][T29726] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1002.430277][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 1002.430311][ T28] audit: type=1400 audit(1773318935.283:6559): avc: denied { mount } for pid=29724 comm="syz.0.7396" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 1002.484724][T22912] EXT4-fs unmount: 7 callbacks suppressed [ 1002.484804][T22912] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1002.514445][T29729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1002.537346][T29729] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1002.885120][T29722] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 18 with error 28 [ 1002.897486][T29722] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1002.897486][T29722] [ 1002.907201][T29722] EXT4-fs (loop4): Total free blocks count 0 [ 1002.913364][T29722] EXT4-fs (loop4): Free/Dirty block details [ 1002.919445][T29722] EXT4-fs (loop4): free_blocks=4112 [ 1002.924741][T29722] EXT4-fs (loop4): dirty_blocks=32 [ 1002.929898][T29722] EXT4-fs (loop4): Block reservation details [ 1002.935926][T29722] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 1002.990640][ T28] audit: type=1400 audit(1773318935.383:6560): avc: denied { add_name } for pid=29722 comm="syz.4.7395" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1003.012510][T29738] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 1003.039252][T29738] loop0: detected capacity change from 0 to 512 [ 1003.054546][ T28] audit: type=1400 audit(1773318935.383:6561): avc: denied { create } for pid=29722 comm="syz.4.7395" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1003.089314][T29742] loop2: detected capacity change from 0 to 2048 [ 1003.145720][T29738] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1003.163111][T29742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1003.181328][ T28] audit: type=1400 audit(1773318935.393:6562): avc: denied { write } for pid=29722 comm="syz.4.7395" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1003.216727][T29738] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1003.288046][T22912] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.299776][T29750] netlink: 'syz.6.7401': attribute type 10 has an invalid length. [ 1003.321929][ T28] audit: type=1400 audit(1773318935.393:6563): avc: denied { open } for pid=29722 comm="syz.4.7395" path="/135/file1/file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1003.368138][T29750] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7401'. [ 1003.403808][T29753] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1003.415154][T29750] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7401'. [ 1003.434400][ T28] audit: type=1400 audit(1773318935.413:6564): avc: denied { read } for pid=29722 comm="syz.4.7395" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1003.464904][T29750] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7401'. [ 1003.516416][T28001] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.533712][ T28] audit: type=1400 audit(1773318935.443:6565): avc: denied { read } for pid=29722 comm="syz.4.7395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1003.597760][T26950] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.608393][T29759] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7404'. [ 1003.617548][T29759] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7404'. [ 1003.628335][ T28] audit: type=1400 audit(1773318935.543:6566): avc: denied { unmount } for pid=28001 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 1003.629023][T29757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7403'. [ 1003.659575][ T28] audit: type=1400 audit(1773318935.813:6567): avc: denied { module_request } for pid=29734 comm="syz.6.7398" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1003.699264][ T28] audit: type=1400 audit(1773318935.843:6568): avc: denied { create } for pid=29737 comm="syz.0.7399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1003.816107][T29766] Set syz0 is full, maxelem 0 reached [ 1004.895517][T29762] loop4: detected capacity change from 0 to 512 [ 1004.994662][T29762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1005.014118][T29762] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1005.043872][T29762] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1005.192715][T29787] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7414'. [ 1005.239348][T29787] lo speed is unknown, defaulting to 1000 [ 1005.286584][T29792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1005.375728][T29792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1005.761490][T29795] loop2: detected capacity change from 0 to 512 [ 1005.884166][T29801] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7416'. [ 1005.916779][T29795] EXT4-fs (loop2): 1 orphan inode deleted [ 1005.931324][T29795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1005.959222][T29795] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1005.970805][T10481] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:30: Failed to release dquot type 1 [ 1005.987122][T29801] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7416'. [ 1006.019323][T29762] loop4: detected capacity change from 0 to 512 [ 1006.048210][T29762] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 1006.057937][T29762] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1006.073241][T29762] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1006.091998][T29762] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1006.102632][T29762] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.7405: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1006.121358][T29762] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1006.122860][T29762] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.7405: couldn't read orphan inode 13 (err -117) [ 1006.132513][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1006.132602][ C0] EXT4-fs (loop4): last error at time 1773318938: ext4_ext_check_inode:521: inode 13 [ 1006.171325][T29762] loop4: lost filesystem error report for type 5 error -117 [ 1006.186785][T29762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1006.324247][T29762] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1006.510058][T29812] loop0: detected capacity change from 0 to 4096 [ 1006.611338][T29812] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1006.686470][T29811] loop6: detected capacity change from 0 to 1024 [ 1006.787519][T29811] EXT4-fs: Ignoring removed bh option [ 1006.854463][T29811] EXT4-fs: inline encryption not supported [ 1006.916042][T29811] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1006.988150][T29811] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1007.050625][T29811] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 2: comm syz.6.7419: lblock 2 mapped to illegal pblock 2 (length 1) [ 1007.251432][T29808] loop5: detected capacity change from 0 to 512 [ 1007.264908][T29811] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1007.265047][T29811] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 48: comm syz.6.7419: lblock 0 mapped to illegal pblock 48 (length 1) [ 1007.288461][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1007.288490][ C1] EXT4-fs (loop6): initial error at time 1773318940: ext4_map_blocks:776: inode 3: block 2 [ 1007.288538][ C1] EXT4-fs (loop6): last error at time 1773318940: ext4_map_blocks:776: inode 3: block 2 [ 1007.387581][T29808] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 1007.420736][T29811] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1007.420910][T29811] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.7419: Failed to acquire dquot type 0 [ 1007.476347][T29808] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1007.483496][T29811] loop6: lost filesystem error report for type 5 error -117 [ 1007.527441][T29808] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1007.542853][T29811] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1007.562402][T29811] loop6: lost filesystem error report for type 5 error -117 [ 1007.562556][T29811] EXT4-fs error (device loop6): ext4_evict_inode:255: inode #11: comm syz.6.7419: mark_inode_dirty error [ 1007.621908][T29811] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1007.622095][T29811] EXT4-fs warning (device loop6): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 1007.656044][T29819] loop4: detected capacity change from 0 to 512 [ 1007.695975][T29819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1007.708658][T29811] EXT4-fs (loop6): 1 orphan inode deleted [ 1007.725012][T29811] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1007.737780][T29819] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1007.768757][ T28] kauditd_printk_skb: 97 callbacks suppressed [ 1007.768790][ T28] audit: type=1400 audit(1773318940.623:6663): avc: denied { create } for pid=29818 comm="syz.4.7421" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 1007.806458][T29819] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #2: comm syz.4.7421: corrupted inode contents [ 1007.829117][T29819] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #2: comm syz.4.7421: mark_inode_dirty error [ 1007.851016][ T28] audit: type=1400 audit(1773318940.683:6664): avc: denied { unmount } for pid=26698 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1007.874013][T29822] EXT4-fs (loop4): shut down requested (2) [ 1007.919870][ T28] audit: type=1400 audit(1773318940.743:6665): avc: denied { create } for pid=29818 comm="syz.4.7421" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 1007.952690][T26950] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1007.974751][ T28] audit: type=1400 audit(1773318940.743:6666): avc: denied { allowed } for pid=29818 comm="syz.4.7421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1008.014699][ T28] audit: type=1400 audit(1773318940.753:6667): avc: denied { read } for pid=2983 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1008.064649][ T28] audit: type=1400 audit(1773318940.753:6668): avc: denied { search } for pid=2983 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1008.106811][ T28] audit: type=1400 audit(1773318940.753:6669): avc: denied { append } for pid=2983 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1008.149462][ T28] audit: type=1400 audit(1773318940.753:6670): avc: denied { open } for pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1008.195066][ T28] audit: type=1400 audit(1773318940.753:6671): avc: denied { getattr } for pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1008.409666][T10481] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:30: lblock 1 mapped to illegal pblock 1 (length 1) [ 1008.426825][T10481] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 1008.444654][T10481] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:30: Failed to release dquot type 0 [ 1008.476605][T29808] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 1008.484323][T26698] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.494514][T26698] EXT4-fs error (device loop6): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1008.525559][T29808] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #13: comm syz.5.7418: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1008.574382][T26698] loop6: lost filesystem error report for type 5 error -117 [ 1008.576747][T26698] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1008.608659][T29808] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1008.610383][T29808] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.7418: couldn't read orphan inode 13 (err -117) [ 1008.619882][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1008.619911][ C1] EXT4-fs (loop5): last error at time 1773318941: ext4_ext_check_inode:521: inode 13 [ 1008.656850][T26698] loop6: lost filesystem error report for type 5 error -117 [ 1008.656960][T26698] EXT4-fs error (device loop6): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 1008.714655][T26698] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1008.777767][T29808] loop5: lost filesystem error report for type 5 error -117 [ 1008.807566][T28001] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.812822][T29808] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1008.913853][T29808] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1009.512806][T29839] loop4: detected capacity change from 0 to 2048 [ 1009.551112][T29839] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1009.710774][T26950] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1009.871855][T29845] loop0: detected capacity change from 0 to 2048 [ 1009.907830][T29845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1009.963494][T29837] loop5: detected capacity change from 0 to 512 [ 1010.086489][T29837] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1010.110054][T29835] loop6: detected capacity change from 0 to 512 [ 1010.124438][T28001] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.146242][T29837] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1010.197705][T29837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.215978][T29835] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 1010.231738][T29860] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1010.240266][T29835] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1010.268090][T29835] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1010.359785][T29835] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 1010.369874][T29835] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #13: comm syz.6.7427: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1010.400006][T22912] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.418899][T29835] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1010.421346][T29835] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.7427: couldn't read orphan inode 13 (err -117) [ 1010.421471][T29835] loop6: lost filesystem error report for type 5 error -117 [ 1010.431748][ C1] EXT4-fs (loop6): error count since last fsck: 2 [ 1010.431777][ C1] EXT4-fs (loop6): last error at time 1773318943: ext4_orphan_get:1396 [ 1010.444906][T29865] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7435'. [ 1010.451761][T29865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7435'. [ 1010.483128][T29835] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1010.507585][T29835] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.529724][T29868] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.612315][T29868] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.637936][T29868] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.756631][T29868] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.877795][ T6715] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.877912][ T6715] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.883072][T10478] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.958750][T10478] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.962928][T29837] loop5: detected capacity change from 0 to 512 [ 1011.057333][T29837] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 1011.076546][T29837] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1011.195867][T29837] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1011.218237][T29837] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 1011.248690][T29837] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #13: comm syz.5.7428: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1011.295060][T29837] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1011.297844][T29837] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.7428: couldn't read orphan inode 13 (err -117) [ 1011.307513][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1011.307592][ C0] EXT4-fs (loop5): last error at time 1773318944: ext4_ext_check_inode:521: inode 13 [ 1011.384886][T29837] loop5: lost filesystem error report for type 5 error -117 [ 1011.400639][T29837] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1011.479803][T29837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.490182][T29889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7441'. [ 1011.553934][T29876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.594305][T29876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1011.826265][T29898] lo speed is unknown, defaulting to 1000 [ 1011.852693][T29900] loop2: detected capacity change from 0 to 512 [ 1012.039508][T29902] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1012.066908][T29900] EXT4-fs (loop2): 1 orphan inode deleted [ 1012.094932][ T6715] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:10: Failed to release dquot type 1 [ 1012.111243][T29900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1012.240972][T29900] ext4 filesystem being mounted at /362/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1012.258241][T29896] loop0: detected capacity change from 0 to 1024 [ 1012.266567][T29912] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7446'. [ 1012.276240][T29905] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1012.288700][T29896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1012.300775][T29905] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1012.335729][T29905] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1012.346423][T29896] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.464980][T29916] loop4: detected capacity change from 0 to 764 [ 1012.535428][T29916] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1012.637856][T29918] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7447'. [ 1012.664766][T29918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7447'. [ 1012.780770][ T28] kauditd_printk_skb: 93 callbacks suppressed [ 1012.780788][ T28] audit: type=1400 audit(1773318945.633:6763): avc: denied { read } for pid=29924 comm="syz.5.7449" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1012.848979][ T28] audit: type=1400 audit(1773318945.643:6764): avc: denied { open } for pid=29923 comm="syz.0.7450" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1012.991839][ T28] audit: type=1400 audit(1773318945.643:6765): avc: denied { ioctl } for pid=29923 comm="syz.0.7450" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1013.019317][ T28] audit: type=1400 audit(1773318945.663:6766): avc: denied { write } for pid=29924 comm="syz.5.7449" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1013.084705][ T28] audit: type=1400 audit(1773318945.923:6767): avc: denied { read write } for pid=24675 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1013.091012][T29933] loop5: detected capacity change from 0 to 1764 [ 1013.145142][ T28] audit: type=1400 audit(1773318945.923:6768): avc: denied { open } for pid=24675 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1013.215908][T29934] loop4: detected capacity change from 0 to 4096 [ 1013.248380][T29934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1013.911696][ T28] audit: type=1400 audit(1773318945.923:6769): avc: denied { ioctl } for pid=24675 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1014.013542][T29941] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7456'. [ 1014.053087][ T28] audit: type=1400 audit(1773318945.923:6770): avc: denied { recv } for pid=5298 comm="udevd" saddr=10.128.0.163 src=30036 daddr=10.128.1.126 dest=34488 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1014.157172][ T28] audit: type=1400 audit(1773318946.033:6771): avc: denied { create } for pid=29927 comm="syz.4.7452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1014.238565][ T28] audit: type=1400 audit(1773318946.073:6772): avc: denied { mounton } for pid=29927 comm="syz.4.7452" path="/148/file0" dev="tmpfs" ino=804 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1014.724094][T29939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.745179][T29939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.852284][T26950] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.063497][T29953] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7457'. [ 1015.145802][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.188646][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1015.211132][T29959] loop4: detected capacity change from 0 to 764 [ 1015.218583][T29959] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1015.315111][T29960] loop6: detected capacity change from 0 to 2048 [ 1015.338419][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.349146][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1015.388130][T29960] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1015.419000][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.433948][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1015.511755][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.526633][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1015.722709][ T56] bridge_slave_1: left allmulticast mode [ 1015.754740][ T56] bridge_slave_1: left promiscuous mode [ 1015.784897][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.832790][ T56] bridge_slave_0: left allmulticast mode [ 1015.851366][ T56] bridge_slave_0: left promiscuous mode [ 1015.874728][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.190670][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1016.227575][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1016.258216][ T56] bond0 (unregistering): Released all slaves [ 1016.277564][T29981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7468'. [ 1016.387503][T26698] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1016.413043][ T56] tipc: Left network mode [ 1016.509723][ T56] hsr_slave_0: left promiscuous mode [ 1016.510109][ T56] hsr_slave_1: left promiscuous mode [ 1016.510488][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1016.510502][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.510762][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1016.510982][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1016.543259][ T56] veth1_macvtap: left promiscuous mode [ 1016.543291][ T56] veth0_macvtap: left promiscuous mode [ 1016.543382][ T56] veth1_vlan: left promiscuous mode [ 1016.543461][ T56] veth0_vlan: left promiscuous mode [ 1016.808790][T22912] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1016.824059][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1016.844897][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1017.054777][T29966] lo speed is unknown, defaulting to 1000 [ 1017.099426][T30038] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 1017.201859][T30041] loop4: detected capacity change from 0 to 4096 [ 1017.220610][T30038] SELinux: failed to load policy [ 1017.257207][T30041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1017.453686][T29966] chnl_net:caif_netlink_parms(): no params data found [ 1017.928481][T29966] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.974364][T29966] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.026200][T29966] bridge_slave_0: entered allmulticast mode [ 1018.650656][T29966] bridge_slave_0: entered promiscuous mode [ 1018.672463][T29966] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.718582][T29966] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.742128][T29966] bridge_slave_1: entered allmulticast mode [ 1018.769811][T29966] bridge_slave_1: entered promiscuous mode [ 1018.780007][T26950] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1018.856263][T29966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1018.867082][T29966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1018.888763][T29966] team0: Port device team_slave_0 added [ 1018.907279][T29966] team0: Port device team_slave_1 added [ 1018.941238][T29966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1018.947506][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 1018.947560][ T28] audit: type=1400 audit(1773318951.803:6842): avc: denied { remount } for pid=30075 comm="syz.4.7478" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1018.969262][T29966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1019.001524][T30027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1019.016692][T30027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1019.031106][T29966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1019.042809][T29966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1019.049927][T29966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1019.117721][T30047] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7471'. [ 1019.127617][T29966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1019.192718][T30088] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7479'. [ 1019.201983][T30088] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7479'. [ 1019.211522][ T28] audit: type=1400 audit(1773318952.043:6843): avc: denied { create } for pid=30087 comm="syz.6.7479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1019.251543][T29966] hsr_slave_0: entered promiscuous mode [ 1019.268024][T29966] hsr_slave_1: entered promiscuous mode [ 1019.287124][ T28] audit: type=1400 audit(1773318952.043:6844): avc: denied { read write } for pid=30087 comm="syz.6.7479" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1019.361823][ T28] audit: type=1400 audit(1773318952.043:6845): avc: denied { open } for pid=30087 comm="syz.6.7479" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1019.434293][ T28] audit: type=1400 audit(1773318952.273:6846): avc: denied { write } for pid=30097 comm="syz.5.7476" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1019.499869][ T28] audit: type=1400 audit(1773318952.343:6847): avc: denied { search } for pid=30100 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1019.579342][ T28] audit: type=1400 audit(1773318952.353:6848): avc: denied { module_request } for pid=30101 comm="syz.6.7481" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1019.668291][ T28] audit: type=1400 audit(1773318952.413:6849): avc: denied { sys_module } for pid=30101 comm="syz.6.7481" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1019.697062][T30108] loop5: detected capacity change from 0 to 512 [ 1019.706536][T30108] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1019.726353][ T28] audit: type=1400 audit(1773318952.423:6850): avc: denied { read write } for pid=24675 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1019.740038][T30108] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.7482: invalid indirect mapped block 4294967295 (level 1) [ 1019.754162][T30076] loop4: detected capacity change from 0 to 512 [ 1019.764740][T30108] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1019.765321][T30108] EXT4-fs (loop5): Remounting filesystem read-only [ 1019.765396][T30108] EXT4-fs (loop5): 2 truncates cleaned up [ 1019.780840][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1019.780864][ C1] EXT4-fs (loop5): initial error at time 1773318952: ext4_free_branches:1023: inode 11 [ 1019.780901][ C1] EXT4-fs (loop5): last error at time 1773318952: ext4_free_branches:1023: inode 11 [ 1019.784986][ T28] audit: type=1400 audit(1773318952.423:6851): avc: denied { open } for pid=24675 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1019.788676][T30108] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1019.877831][T30076] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 1019.896181][T30076] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1019.935511][T30076] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1020.010813][T24675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1020.038980][T30076] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1020.085524][T30076] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.7478: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1020.116536][T30129] loop5: detected capacity change from 0 to 1024 [ 1020.126804][T30129] EXT4-fs: Ignoring removed bh option [ 1020.145811][T30129] EXT4-fs: inline encryption not supported [ 1020.151934][T30076] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1020.153652][T30076] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.7478: couldn't read orphan inode 13 (err -117) [ 1020.163401][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1020.163492][ C1] EXT4-fs (loop4): last error at time 1773318953: ext4_ext_check_inode:521: inode 13 [ 1020.207864][T30129] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1020.220883][T30129] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1020.230365][T30129] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 2: comm syz.5.7484: lblock 2 mapped to illegal pblock 2 (length 1) [ 1020.244770][T30129] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1020.244898][T30129] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 48: comm syz.5.7484: lblock 0 mapped to illegal pblock 48 (length 1) [ 1020.247456][T30076] loop4: lost filesystem error report for type 5 error -117 [ 1020.254053][T30129] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1020.254183][T30129] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.7484: Failed to acquire dquot type 0 [ 1020.254212][T30129] loop5: lost filesystem error report for type 5 error -117 [ 1020.254413][T30129] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1020.254434][T30129] loop5: lost filesystem error report for type 5 error -117 [ 1020.254974][T30129] EXT4-fs error (device loop5): ext4_evict_inode:255: inode #11: comm syz.5.7484: mark_inode_dirty error [ 1020.276000][ C1] EXT4-fs (loop5): error count since last fsck: 4 [ 1020.276026][ C1] EXT4-fs (loop5): initial error at time 1773318953: ext4_map_blocks:776: inode 3: block 2 [ 1020.276087][ C1] EXT4-fs (loop5): last error at time 1773318953: ext4_reserve_inode_write:6246 [ 1020.338985][T29966] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1020.348943][T30129] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1020.385111][T30129] EXT4-fs warning (device loop5): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 1020.402182][T30076] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1020.404655][T30129] EXT4-fs (loop5): 1 orphan inode deleted [ 1020.405263][T30129] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1020.435838][ T56] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 1020.467673][T30076] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1020.476432][ T56] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1020.481604][T29966] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1020.505308][ T56] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:4: Failed to release dquot type 0 [ 1020.562437][T29966] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1020.584499][T24675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1020.608599][T29966] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1020.616105][T24675] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1020.635845][T24675] loop5: lost filesystem error report for type 5 error -117 [ 1020.639618][T24675] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1020.667383][T24675] loop5: lost filesystem error report for type 5 error -117 [ 1020.668017][T24675] EXT4-fs error (device loop5): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 1020.709605][T24675] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1020.741053][T29966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1020.779427][T29966] 8021q: adding VLAN 0 to HW filter on device team0 [ 1020.790300][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.797432][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1020.808262][T30158] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7485'. [ 1020.841729][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.848968][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1020.887114][T29966] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1020.913652][T30110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1020.931470][T29966] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1020.949151][T30110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1021.098063][T29966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1021.140773][T30132] netlink: 1 bytes leftover after parsing attributes in process `syz.6.7483'. [ 1021.288265][T30203] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7490'. [ 1021.288285][T30203] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7490'. [ 1021.588392][T29966] veth0_vlan: entered promiscuous mode [ 1021.609796][T29966] veth1_vlan: entered promiscuous mode [ 1021.645458][T29966] veth0_macvtap: entered promiscuous mode [ 1021.762045][T30227] loop4: detected capacity change from 0 to 4096 [ 1021.777839][T30227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1022.470949][T30241] loop2: detected capacity change from 0 to 1024 [ 1022.518675][T30241] EXT4-fs: Ignoring removed bh option [ 1022.560920][T30241] EXT4-fs: inline encryption not supported [ 1022.596456][T30241] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1022.611591][T30246] loop5: detected capacity change from 0 to 512 [ 1022.622940][T29966] veth1_macvtap: entered promiscuous mode [ 1022.640640][T29966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1022.651428][T30246] EXT4-fs: Ignoring removed nobh option [ 1022.657515][T30241] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1022.676414][T29966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1022.710543][T30246] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1022.724497][T30241] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 2: comm syz.2.7496: lblock 2 mapped to illegal pblock 2 (length 1) [ 1022.747173][T30246] EXT4-fs (loop5): 1 truncate cleaned up [ 1022.759142][T30246] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1022.937545][T30241] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1022.937749][T30241] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 48: comm syz.2.7496: lblock 0 mapped to illegal pblock 48 (length 1) [ 1022.946926][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1022.946951][ C1] EXT4-fs (loop2): initial error at time 1773318955: ext4_map_blocks:776: inode 3: block 2 [ 1022.947007][ C1] EXT4-fs (loop2): last error at time 1773318955: ext4_map_blocks:776: inode 3: block 2 [ 1023.040024][T30241] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1023.040156][T30241] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.7496: Failed to acquire dquot type 0 [ 1023.086290][T30241] loop2: lost filesystem error report for type 5 error -117 [ 1023.101354][T30241] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1023.121083][T30241] loop2: lost filesystem error report for type 5 error -117 [ 1023.121268][T30241] EXT4-fs error (device loop2): ext4_evict_inode:255: inode #11: comm syz.2.7496: mark_inode_dirty error [ 1023.159770][T30241] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1023.159891][T30241] EXT4-fs warning (device loop2): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 1023.209582][T30241] EXT4-fs (loop2): 1 orphan inode deleted [ 1023.322630][T30241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1023.497235][T30257] loop6: detected capacity change from 0 to 4096 [ 1023.630591][T30257] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1024.087524][ T310] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.131816][ T310] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.169162][ T28] kauditd_printk_skb: 112 callbacks suppressed [ 1024.169187][ T28] audit: type=1400 audit(1773318957.023:6959): avc: denied { mounton } for pid=29966 comm="syz-executor" path="/root/syzkaller.586ERn/syz-tmp" dev="sda1" ino=2077 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1024.208905][ T310] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.237741][ T310] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.269083][ T28] audit: type=1400 audit(1773318957.053:6960): avc: denied { mount } for pid=29966 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1024.432914][T10284] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:19: lblock 1 mapped to illegal pblock 1 (length 1) [ 1024.454670][ T28] audit: type=1400 audit(1773318957.063:6961): avc: denied { mount } for pid=29966 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1024.479007][T10284] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 1024.506128][T10284] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:19: Failed to release dquot type 0 [ 1024.527731][ T28] audit: type=1400 audit(1773318957.073:6962): avc: denied { mounton } for pid=29966 comm="syz-executor" path="/root/syzkaller.586ERn/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1024.556856][T22912] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.577076][T26950] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.587423][T24675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.597294][ T28] audit: type=1400 audit(1773318957.073:6963): avc: denied { mounton } for pid=29966 comm="syz-executor" path="/root/syzkaller.586ERn/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=97031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1024.625837][ T28] audit: type=1400 audit(1773318957.073:6964): avc: denied { mounton } for pid=29966 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1024.651282][ T28] audit: type=1400 audit(1773318957.073:6965): avc: denied { mount } for pid=29966 comm="syz-executor" name="/" dev="gadgetfs" ino=4745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1024.859557][ T28] audit: type=1400 audit(1773318957.703:6966): avc: denied { tracepoint } for pid=30277 comm="syz.1.7462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1024.923641][ T28] audit: type=1400 audit(1773318957.733:6967): avc: denied { write } for pid=30277 comm="syz.1.7462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1025.129801][T30278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1025.150616][T30278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1025.245232][T30290] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7462'. [ 1025.370557][T22912] EXT4-fs error (device loop2): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1025.410774][T30348] loop5: detected capacity change from 0 to 512 [ 1025.412548][T22912] loop2: lost filesystem error report for type 5 error -117 [ 1025.421439][T26698] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.449716][T22912] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1025.471968][T22912] loop2: lost filesystem error report for type 5 error -117 [ 1025.472101][T22912] EXT4-fs error (device loop2): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 1025.482079][T30348] EXT4-fs: Ignoring removed nobh option [ 1025.505223][T22912] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1025.525984][T30348] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1025.589790][T30348] EXT4-fs (loop5): 1 truncate cleaned up [ 1025.625451][T30348] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1025.743109][T30368] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7504'. [ 1025.857087][T30368] lo speed is unknown, defaulting to 1000 [ 1026.296031][T30378] loop6: detected capacity change from 0 to 512 [ 1026.346636][T24675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1026.608154][T30384] loop5: detected capacity change from 0 to 512 [ 1026.650034][T30384] EXT4-fs: Ignoring removed orlov option [ 1026.785132][T30384] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.7505: invalid block [ 1026.798398][T30378] EXT4-fs (loop6): 1 orphan inode deleted [ 1026.804658][T30384] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1026.804717][T30378] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1026.826512][T30378] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1026.827946][T30384] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.7505: invalid indirect mapped block 4294967295 (level 1) [ 1026.836997][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1026.837016][ C1] EXT4-fs (loop5): initial error at time 1773318959: ext4_get_branch:178: inode 11: block 4294967295 [ 1026.837086][ C1] EXT4-fs (loop5): last error at time 1773318959: ext4_get_branch:178: inode 11: block 4294967295 [ 1026.879242][T10478] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:28: Failed to release dquot type 1 [ 1026.946619][T30384] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1026.946883][T30384] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.7505: invalid indirect mapped block 4294967295 (level 1) [ 1026.970350][T30384] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1026.970728][T30384] EXT4-fs (loop5): 2 truncates cleaned up [ 1026.992012][T30384] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1027.007949][T30389] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1027.026538][T30388] netlink: 'syz.2.7507': attribute type 2 has an invalid length. [ 1027.044515][T30384] SELinux: Context system_u:object_r:semanage_read_lock_t:s0 is not valid (left unmapped). [ 1027.097814][T24675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1027.133873][T30393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7508'. [ 1027.294117][T30397] netlink: 'syz.5.7509': attribute type 1 has an invalid length. [ 1027.307934][T30397] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1027.329818][T30397] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1027.337190][T30397] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1027.350038][T30397] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1027.434214][T30380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.444582][T30380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1027.771125][T30409] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7513'. [ 1027.813823][T30413] loop1: detected capacity change from 0 to 512 [ 1027.864523][T30409] lo speed is unknown, defaulting to 1000 [ 1027.989630][T30413] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 1028.017903][T30413] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1028.054908][T30413] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1028.127180][T30413] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1028.171100][T30413] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #13: comm syz.1.7511: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1028.238032][T30416] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7515'. [ 1028.266935][T30413] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1028.267172][T30413] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.7511: couldn't read orphan inode 13 (err -117) [ 1028.276391][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1028.276418][ C0] EXT4-fs (loop1): last error at time 1773318961: ext4_ext_check_inode:521: inode 13 [ 1028.326978][T30416] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7515'. [ 1028.396645][T30413] loop1: lost filesystem error report for type 5 error -117 [ 1028.397533][T30413] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1028.418159][T30413] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1028.589622][T30419] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.611956][ T6715] Bluetooth: hci0: Frame reassembly failed (-84) [ 1028.688575][T30419] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.768478][T30419] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.797582][T30427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7518'. [ 1028.826446][T30419] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.907423][T10284] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.933443][T10284] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.942441][T10284] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.962129][T10284] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.974240][T30430] loop5: detected capacity change from 0 to 512 [ 1029.047263][T30430] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1029.068879][T30430] ext4 filesystem being mounted at /264/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1029.120464][T30430] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #2: comm syz.5.7519: corrupted inode contents [ 1029.159355][T30430] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #2: comm syz.5.7519: mark_inode_dirty error [ 1029.184748][T30440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7521'. [ 1029.185226][T30430] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #2: comm syz.5.7519: corrupted inode contents [ 1029.205768][T30430] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.7519: mark_inode_dirty error [ 1029.244945][T30430] EXT4-fs (loop5): shut down requested (2) [ 1029.258063][ T28] kauditd_printk_skb: 110 callbacks suppressed [ 1029.258078][ T28] audit: type=1400 audit(1773318962.113:7077): avc: denied { tracepoint } for pid=30443 comm="syz.1.7522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1029.310518][ T28] audit: type=1400 audit(1773318962.143:7078): avc: denied { read } for pid=2983 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1029.341032][ T28] audit: type=1400 audit(1773318962.143:7079): avc: denied { search } for pid=2983 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1029.365104][ T28] audit: type=1400 audit(1773318962.143:7080): avc: denied { append } for pid=2983 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1029.389412][ T28] audit: type=1400 audit(1773318962.143:7081): avc: denied { open } for pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1029.413132][ T28] audit: type=1400 audit(1773318962.143:7082): avc: denied { getattr } for pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1029.437981][ T28] audit: type=1400 audit(1773318962.143:7083): avc: denied { create } for pid=30443 comm="syz.1.7522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1029.491245][ T28] audit: type=1400 audit(1773318962.143:7084): avc: denied { write } for pid=30443 comm="syz.1.7522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1029.514114][ T28] audit: type=1400 audit(1773318962.143:7085): avc: denied { connect } for pid=30443 comm="syz.1.7522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1029.534660][ T28] audit: type=1400 audit(1773318962.143:7086): avc: denied { name_connect } for pid=30443 comm="syz.1.7522" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1029.561012][T30447] loop1: detected capacity change from 0 to 2048 [ 1029.588387][T24675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.647484][T30453] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1029.755648][T30457] loop1: detected capacity change from 0 to 512 [ 1029.809549][T30457] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1029.851638][T30457] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.7526: corrupted inode contents [ 1029.876301][T30457] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #2: comm syz.1.7526: mark_inode_dirty error [ 1029.888124][T30457] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.7526: corrupted inode contents [ 1029.905204][T30466] EXT4-fs (loop1): shut down requested (2) [ 1030.032973][T30470] loop1: detected capacity change from 0 to 512 [ 1030.159199][T30471] loop6: detected capacity change from 0 to 4096 [ 1030.172492][T30459] loop4: detected capacity change from 0 to 512 [ 1030.258237][T30470] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1030.272164][T30459] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1030.452284][T30470] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.7530: corrupted xattr block 6: invalid header [ 1030.515066][T30478] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7531'. [ 1030.532475][T30470] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 1030.544399][T30478] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7531'. [ 1030.635094][ T3527] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1030.641398][T30421] Bluetooth: hci0: command 0x1003 tx timeout [ 1031.984205][T30531] loop1: detected capacity change from 0 to 2048 [ 1032.176253][T30531] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 1032.214677][T30531] File: /11/file1/file1 PID: 30531 Comm: syz.1.7537 [ 1032.471321][T30549] loop6: detected capacity change from 0 to 4096 [ 1032.545150][T30549] EXT4-fs mount: 13 callbacks suppressed [ 1032.545167][T30549] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1032.605269][T30553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7540'. [ 1032.618273][T30553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7540'. [ 1032.652843][T30553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7540'. [ 1032.731625][T30492] loop5: detected capacity change from 0 to 512 [ 1032.765629][T30553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7540'. [ 1032.818133][T30459] loop4: detected capacity change from 0 to 512 [ 1032.927618][T30553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7540'. [ 1033.206662][T30492] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1033.227573][T30553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7540'. [ 1033.269621][T30553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7540'. [ 1033.286116][T30492] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1033.324884][T30553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7540'. [ 1033.325033][T30553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7540'. [ 1033.325122][T30553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7540'. [ 1033.352061][T30492] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1033.509815][T30567] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1033.513934][T30563] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.536853][T30567] netlink: 'syz.1.7543': attribute type 2 has an invalid length. [ 1033.586494][T30563] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.689564][T30563] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.734523][T30563] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.817522][ T310] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.848231][T10478] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.864441][ T310] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.892183][ T310] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.154008][T30574] lo speed is unknown, defaulting to 1000 [ 1034.211766][T26698] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1034.270301][ T28] kauditd_printk_skb: 5583 callbacks suppressed [ 1034.270320][ T28] audit: type=1400 audit(1773318967.123:12669): avc: denied { write } for pid=30578 comm="syz.2.7547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1034.270479][ T28] audit: type=1400 audit(1773318967.123:12670): avc: denied { nlmsg_write } for pid=30578 comm="syz.2.7547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1034.303958][T30492] loop5: detected capacity change from 0 to 512 [ 1034.327987][ T28] audit: type=1400 audit(1773318967.183:12671): avc: denied { create } for pid=30570 comm="syz.4.7544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1034.388271][ T28] audit: type=1400 audit(1773318967.213:12672): avc: denied { create } for pid=30579 comm="syz.6.7546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1034.388560][ T28] audit: type=1400 audit(1773318967.213:12673): avc: denied { write } for pid=30579 comm="syz.6.7546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1034.412684][T30585] loop2: detected capacity change from 0 to 2048 [ 1034.419106][T30492] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 1034.422653][ T28] audit: type=1400 audit(1773318967.253:12674): avc: denied { write } for pid=30584 comm="syz.2.7549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1034.446470][T30492] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1034.507908][ T28] audit: type=1400 audit(1773318967.263:12675): avc: denied { ioctl } for pid=30586 comm="syz.1.7548" path="socket:[98391]" dev="sockfs" ino=98391 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1034.519856][T30585] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1034.540929][T30587] SELinux: failed to load policy [ 1034.567519][T30492] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1034.576080][ T28] audit: type=1400 audit(1773318967.393:12676): avc: denied { load_policy } for pid=30586 comm="syz.1.7548" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1034.576156][ T28] audit: type=1400 audit(1773318967.393:12677): avc: denied { create } for pid=30570 comm="syz.4.7544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1034.576202][ T28] audit: type=1400 audit(1773318967.393:12678): avc: denied { setopt } for pid=30570 comm="syz.4.7544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1034.588416][T30492] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 1034.590850][T30492] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #13: comm syz.5.7534: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1034.591089][T30492] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1034.592140][T22912] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1034.594511][T30492] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.7534: couldn't read orphan inode 13 (err -117) [ 1034.594877][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1034.594997][ C1] EXT4-fs (loop5): last error at time 1773318967: ext4_ext_check_inode:521: inode 13 [ 1034.595410][T30492] loop5: lost filesystem error report for type 5 error -117 [ 1034.624003][T30492] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1034.643804][T30492] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1034.657236][T30597] loop2: detected capacity change from 0 to 2048 [ 1034.668697][T30597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1034.767345][T30603] loop1: detected capacity change from 0 to 512 [ 1034.844307][T30597] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 1034.923115][T30597] File: /372/file1/file1 PID: 30597 Comm: syz.2.7550 [ 1034.950649][T30610] lo speed is unknown, defaulting to 1000 [ 1035.006057][T30603] EXT4-fs: Ignoring removed nobh option [ 1035.016090][T22912] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1035.025723][T30603] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1035.074736][T30603] EXT4-fs (loop1): 1 truncate cleaned up [ 1035.083891][T30603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1035.115376][T30623] loop2: detected capacity change from 0 to 512 [ 1035.250919][T30629] loop6: detected capacity change from 0 to 512 [ 1035.266095][T30632] netlink: 'syz.4.7558': attribute type 1 has an invalid length. [ 1035.339446][T30623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1035.357067][T30623] ext4 filesystem being mounted at /373/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1035.375136][T30623] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #2: comm syz.2.7554: corrupted inode contents [ 1035.387494][T30623] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #2: comm syz.2.7554: mark_inode_dirty error [ 1035.399275][T30623] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #2: comm syz.2.7554: corrupted inode contents [ 1035.416979][T30623] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.7554: mark_inode_dirty error [ 1035.441673][T29966] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1035.454132][T30623] EXT4-fs (loop2): shut down requested (2) [ 1035.460916][T30629] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1035.467201][T30632] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1035.481881][T30629] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1035.495446][T30629] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #2: comm syz.6.7557: corrupted inode contents [ 1035.507478][T30629] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #2: comm syz.6.7557: mark_inode_dirty error [ 1035.519205][T30629] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #2: comm syz.6.7557: corrupted inode contents [ 1035.540440][T30629] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.7557: mark_inode_dirty error [ 1035.593150][T30636] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1035.600292][T22912] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1035.612869][T10478] Bluetooth: hci0: Frame reassembly failed (-84) [ 1035.621625][T30642] EXT4-fs warning (device loop6): ext4_es_cache_extent:1082: inode #2: comm syz.6.7557: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 1035.621625][T30642] [ 1035.623610][T30636] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1035.654081][T30636] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1036.224823][T30657] loop2: detected capacity change from 0 to 4096 [ 1037.684685][ T3527] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1038.985379][T30657] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1038.985438][T30657] EXT4-fs: failed to create workqueue [ 1039.000388][T30657] EXT4-fs (loop2): mount failed [ 1039.233713][T26698] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1039.334912][T30671] loop4: detected capacity change from 0 to 4096 [ 1039.408073][T30671] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1039.799445][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 1039.799459][ T28] audit: type=1400 audit(1773318972.653:12712): avc: denied { read write } for pid=30674 comm="syz.6.7567" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1039.843429][ T28] audit: type=1400 audit(1773318972.693:12713): avc: denied { open } for pid=30674 comm="syz.6.7567" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1039.882038][T30676] __nla_validate_parse: 45 callbacks suppressed [ 1039.882084][T30676] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7567'. [ 1039.988626][T30676] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7567'. [ 1040.084539][T30681] loop5: detected capacity change from 0 to 1024 [ 1040.114744][ T28] audit: type=1400 audit(1773318972.953:12714): avc: denied { create } for pid=30679 comm="syz.1.7569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1040.137504][T30681] EXT4-fs: Ignoring removed bh option [ 1040.142994][T30681] EXT4-fs: inline encryption not supported [ 1040.190783][T30681] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1040.273250][T30688] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.284392][T30681] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1040.297080][T30691] loop6: detected capacity change from 0 to 512 [ 1040.305049][T30681] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 2: comm syz.5.7570: lblock 2 mapped to illegal pblock 2 (length 1) [ 1040.353053][T30681] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1040.353237][T30681] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 1040.362426][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1040.362443][ C1] EXT4-fs (loop5): initial error at time 1773318973: ext4_map_blocks:776: inode 3: block 2 [ 1040.362485][ C1] EXT4-fs (loop5): last error at time 1773318973: ext4_map_blocks:776: inode 3: block 2 [ 1040.398831][T30681] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 48: comm syz.5.7570: lblock 0 mapped to illegal pblock 48 (length 1) [ 1040.415155][T30691] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1040.431423][T30688] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.442156][T30691] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1040.454339][T30681] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1040.454483][T30681] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 1040.477491][T30691] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #2: comm syz.6.7573: corrupted inode contents [ 1040.490213][T30691] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #2: comm syz.6.7573: mark_inode_dirty error [ 1040.505550][T30688] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.516052][T30681] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.7570: Failed to acquire dquot type 0 [ 1040.527890][T30691] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #2: comm syz.6.7573: corrupted inode contents [ 1040.541280][T30681] loop5: lost filesystem error report for type 5 error -117 [ 1040.549620][T30696] EXT4-fs (loop6): shut down requested (2) [ 1040.555920][T30681] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1040.566011][T30691] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.7573: mark_inode_dirty error [ 1040.582824][T30688] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.593323][T30681] loop5: lost filesystem error report for type 5 error -117 [ 1040.593458][T30681] EXT4-fs error (device loop5): ext4_evict_inode:255: inode #11: comm syz.5.7570: mark_inode_dirty error [ 1040.615136][T30681] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1040.615251][T30681] EXT4-fs warning (device loop5): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 1040.657341][ T6715] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.665719][ T6715] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.676338][T26698] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1040.692466][T30681] EXT4-fs (loop5): 1 orphan inode deleted [ 1040.707287][ T6715] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.716323][T30681] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1040.734105][ T6715] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.788101][T10284] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 1040.788136][T10284] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:19: lblock 1 mapped to illegal pblock 1 (length 1) [ 1040.788317][T10284] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 1040.788334][T10284] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:19: Failed to release dquot type 0 [ 1040.790502][T24675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1040.790836][T24675] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1040.790869][T24675] loop5: lost filesystem error report for type 5 error -117 [ 1040.790966][T24675] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1040.790988][T24675] loop5: lost filesystem error report for type 5 error -117 [ 1040.791098][T24675] EXT4-fs error (device loop5): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 1040.791124][T24675] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1040.842225][ T28] audit: type=1326 audit(1773318973.693:12715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30703 comm="syz.6.7574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea235bc799 code=0x7ffc0000 [ 1040.842340][ T28] audit: type=1326 audit(1773318973.693:12716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30703 comm="syz.6.7574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea235bc799 code=0x7ffc0000 [ 1040.842370][ T28] audit: type=1326 audit(1773318973.693:12717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30703 comm="syz.6.7574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea235bc799 code=0x7ffc0000 [ 1040.932302][T30714] SELinux: Context system_u:object_r:load_policy_exec_t:s0 is not valid (left unmapped). [ 1041.013915][T30718] loop2: detected capacity change from 0 to 512 [ 1041.014272][T30718] EXT4-fs: Ignoring removed nobh option [ 1041.014672][T30718] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1041.033783][T30718] EXT4-fs (loop2): 1 truncate cleaned up [ 1041.034193][T30718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1041.051584][T22912] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1041.080218][T30704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.080335][T30704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.332827][T26950] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1041.470945][T30732] loop1: detected capacity change from 0 to 512 [ 1041.494924][T30732] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1041.524100][T30732] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1041.541160][T30735] loop2: detected capacity change from 0 to 512 [ 1041.547164][T30732] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.7585: corrupted inode contents [ 1041.560290][T30732] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #2: comm syz.1.7585: mark_inode_dirty error [ 1041.572947][T30732] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.7585: corrupted inode contents [ 1041.585691][T30732] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.7585: mark_inode_dirty error [ 1041.601692][T30735] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 1041.603018][T30737] EXT4-fs (loop1): shut down requested (2) [ 1041.612697][T30735] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1041.640766][T30735] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1041.658278][T30735] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1041.665321][T30735] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #13: comm syz.2.7581: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1041.667568][T29966] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1041.685183][T30735] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1041.694669][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1041.695096][T30735] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.7581: couldn't read orphan inode 13 (err -117) [ 1041.703930][ C0] EXT4-fs (loop2): last error at time 1773318974: ext4_ext_check_inode:521: inode 13 [ 1041.712612][T30735] loop2: lost filesystem error report for type 5 error -117 [ 1041.722250][ C0] [ 1041.757840][T30735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1041.777185][T30735] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1041.907131][T30741] loop1: detected capacity change from 0 to 512 [ 1041.915330][T30742] loop5: detected capacity change from 0 to 1024 [ 1041.936733][T30741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1041.950507][T30742] EXT4-fs: Ignoring removed bh option [ 1041.955778][T30741] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1041.956655][T30742] EXT4-fs: inline encryption not supported [ 1042.003519][T30747] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1042.012383][T30739] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1042.020998][T30742] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1042.036834][T30747] netlink: 'syz.4.7588': attribute type 2 has an invalid length. [ 1042.050846][T30742] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1042.060733][T30742] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 2: comm syz.5.7587: lblock 2 mapped to illegal pblock 2 (length 1) [ 1042.094872][T30742] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1042.095035][T30742] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 48: comm syz.5.7587: lblock 0 mapped to illegal pblock 48 (length 1) [ 1042.118596][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1042.118615][ C0] EXT4-fs (loop5): initial error at time 1773318974: ext4_map_blocks:776: inode 3: block 2 [ 1042.118655][ C0] EXT4-fs (loop5): last error at time 1773318974: ext4_map_blocks:776: inode 3: block 2 [ 1042.148748][T30742] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1042.150237][T30742] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.7587: Failed to acquire dquot type 0 [ 1042.171072][T30742] loop5: lost filesystem error report for type 5 error -117 [ 1042.178977][T30742] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1042.198994][T30742] loop5: lost filesystem error report for type 5 error -117 [ 1042.201502][T29966] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1042.203343][T30742] EXT4-fs error (device loop5): ext4_evict_inode:255: inode #11: comm syz.5.7587: mark_inode_dirty error [ 1042.246282][T30742] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1042.248250][T30742] EXT4-fs warning (device loop5): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 1042.256540][T30754] loop1: detected capacity change from 0 to 512 [ 1042.291313][T30754] EXT4-fs: Ignoring removed nobh option [ 1042.297472][T30742] EXT4-fs (loop5): 1 orphan inode deleted [ 1042.303985][T30742] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1042.317410][ T6715] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 1042.331983][ T6715] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1042.335673][ T6715] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:10: Failed to release dquot type 0 [ 1042.357055][T30754] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1042.396956][T24675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1042.407940][T30754] EXT4-fs (loop1): 1 truncate cleaned up [ 1042.413945][T24675] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1042.427892][T30754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1042.432374][T24675] loop5: lost filesystem error report for type 5 error -117 [ 1042.441299][T24675] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1042.459196][T24675] loop5: lost filesystem error report for type 5 error -117 [ 1042.459378][T24675] EXT4-fs error (device loop5): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 1042.482788][T24675] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1042.496744][T29966] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1042.522891][T30760] loop5: detected capacity change from 0 to 512 [ 1042.530520][T30760] EXT4-fs: Ignoring removed nobh option [ 1042.736898][T30763] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1042.781893][T30762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1043.527056][T30760] EXT4-fs (loop5): 1 orphan inode deleted [ 1043.548067][T29966] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1043.557842][T30760] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1043.782860][T30771] EXT4-fs (loop4): 1 orphan inode deleted [ 1043.801847][T30771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1043.888258][T30771] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1044.213664][T10284] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:19: Failed to release dquot type 1 [ 1044.227663][T24675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.252305][T22912] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.370696][T30784] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7599'. [ 1044.404307][T30786] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7600'. [ 1044.413547][T30786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7600'. [ 1044.962039][T30780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.966599][T30790] set_capacity_and_notify: 3 callbacks suppressed [ 1044.966786][T30790] loop2: detected capacity change from 0 to 512 [ 1044.987625][T30780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.134198][T30798] loop6: detected capacity change from 0 to 512 [ 1045.336381][T30798] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 1045.392575][T30798] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1045.412879][ T28] kauditd_printk_skb: 936 callbacks suppressed [ 1045.412961][ T28] audit: type=1400 audit(1773318978.263:13650): avc: denied { write } for pid=30805 comm="syz.1.7605" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1045.416917][T30790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1045.419293][ T28] audit: type=1400 audit(1773318978.263:13651): avc: denied { open } for pid=30805 comm="syz.1.7605" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1045.492650][ T28] audit: type=1400 audit(1773318978.343:13652): avc: denied { watch } for pid=30805 comm="syz.1.7605" path="/33" dev="tmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1045.516077][T30798] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1045.524611][T30790] ext4 filesystem being mounted at /385/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1045.605495][T30798] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 1045.617672][T30790] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1045.636631][T30798] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #13: comm syz.6.7604: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1045.709352][T30798] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1045.715423][T30798] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.7604: couldn't read orphan inode 13 (err -117) [ 1045.725263][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1045.725483][ C1] EXT4-fs (loop6): last error at time 1773318978: ext4_ext_check_inode:521: inode 13 [ 1045.818154][T30798] loop6: lost filesystem error report for type 5 error -117 [ 1045.852732][T30798] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1045.919806][T30798] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.212960][T30810] loop6: detected capacity change from 0 to 1024 [ 1046.250397][T30810] EXT4-fs: Ignoring removed bh option [ 1046.279726][T30810] EXT4-fs: inline encryption not supported [ 1046.343085][T30810] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1046.377873][T30810] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1046.395293][T30810] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 2: comm syz.6.7606: lblock 2 mapped to illegal pblock 2 (length 1) [ 1046.433461][T30810] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1046.438669][T30810] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 1046.447781][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1046.447803][ C1] EXT4-fs (loop6): initial error at time 1773318979: ext4_map_blocks:776: inode 3: block 2 [ 1046.447884][ C1] EXT4-fs (loop6): last error at time 1773318979: ext4_map_blocks:776: inode 3: block 2 [ 1046.482615][T30810] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 48: comm syz.6.7606: lblock 0 mapped to illegal pblock 48 (length 1) [ 1046.496841][T30810] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1046.499396][T30810] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 1046.519101][T30810] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.7606: Failed to acquire dquot type 0 [ 1046.532290][T30810] loop6: lost filesystem error report for type 5 error -117 [ 1046.542534][T22912] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.556941][T30810] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1046.575823][T30813] loop1: detected capacity change from 0 to 512 [ 1046.594737][T30810] loop6: lost filesystem error report for type 5 error -117 [ 1046.599061][T30810] EXT4-fs error (device loop6): ext4_evict_inode:255: inode #11: comm syz.6.7606: mark_inode_dirty error [ 1046.629607][T30815] loop2: detected capacity change from 0 to 512 [ 1046.652758][T30813] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1046.656986][T30815] EXT4-fs: Ignoring removed nobh option [ 1046.710586][T30813] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1046.735230][T30815] EXT4-fs (loop2): 1 orphan inode deleted [ 1046.741459][T30815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1046.753970][T30810] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1046.754089][T30810] EXT4-fs warning (device loop6): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 1046.804693][T30810] EXT4-fs (loop6): 1 orphan inode deleted [ 1046.805367][T30813] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.7607: corrupted inode contents [ 1046.811425][T30810] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1046.823911][T30813] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #2: comm syz.1.7607: mark_inode_dirty error [ 1046.844942][T10478] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:28: lblock 1 mapped to illegal pblock 1 (length 1) [ 1046.865547][T30828] EXT4-fs (loop1): shut down requested (2) [ 1046.872117][ T28] audit: type=1400 audit(1773318979.723:13653): avc: denied { mount } for pid=30824 comm="syz.5.7610" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1046.906366][T10478] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 1046.923639][T10478] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:28: Failed to release dquot type 0 [ 1046.958086][T29966] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.964204][ T28] audit: type=1400 audit(1773318979.813:13654): avc: denied { ioctl } for pid=30824 comm="syz.5.7610" path="socket:[98937]" dev="sockfs" ino=98937 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1047.000847][T10478] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 1047.019048][T26698] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1047.028970][T22912] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1047.072337][T26698] EXT4-fs error (device loop6): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1047.116232][ T28] audit: type=1400 audit(1773318979.973:13655): avc: denied { ioctl } for pid=30835 comm="syz.5.7615" path="socket:[98067]" dev="sockfs" ino=98067 ioctlcmd=0x5883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1047.123995][T26698] loop6: lost filesystem error report for type 5 error -117 [ 1047.143573][T30838] loop1: detected capacity change from 0 to 2048 [ 1047.158424][T26698] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1047.158985][T30839] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7612'. [ 1047.168818][T26698] loop6: lost filesystem error report for type 5 error -117 [ 1047.183250][T26698] EXT4-fs error (device loop6): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 1047.202189][T30839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7612'. [ 1047.202820][T26698] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1047.223404][T30838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1047.372596][T26950] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1047.533026][T29966] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1047.588928][T26614] kernel read not supported for file /ppp (pid: 26614 comm: kworker/0:3) [ 1047.617256][T30860] netlink: 4568 bytes leftover after parsing attributes in process `syz.4.7621'. [ 1047.626700][T30860] netlink: 4568 bytes leftover after parsing attributes in process `syz.4.7621'. [ 1047.663157][T30862] loop2: detected capacity change from 0 to 256 [ 1047.679763][T30862] FAT-fs (loop2): Directory bread(block 64) failed [ 1047.686450][T30862] FAT-fs (loop2): Directory bread(block 65) failed [ 1047.693089][T30862] FAT-fs (loop2): Directory bread(block 66) failed [ 1047.699865][T30862] FAT-fs (loop2): Directory bread(block 67) failed [ 1047.706618][T30862] FAT-fs (loop2): Directory bread(block 68) failed [ 1047.713160][T30862] FAT-fs (loop2): Directory bread(block 69) failed [ 1047.719772][T30862] FAT-fs (loop2): Directory bread(block 70) failed [ 1047.726341][T30862] FAT-fs (loop2): Directory bread(block 71) failed [ 1047.732962][T30862] FAT-fs (loop2): Directory bread(block 72) failed [ 1047.739599][T30862] FAT-fs (loop2): Directory bread(block 73) failed [ 1047.800647][T30869] loop4: detected capacity change from 0 to 1024 [ 1047.807810][T30869] EXT4-fs: Ignoring removed bh option [ 1047.813414][T30869] EXT4-fs: inline encryption not supported [ 1047.828132][T30869] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1047.868734][T30869] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1047.888016][T30869] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 2: comm syz.4.7623: lblock 2 mapped to illegal pblock 2 (length 1) [ 1047.908893][T30869] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1047.909102][T30869] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 48: comm syz.4.7623: lblock 0 mapped to illegal pblock 48 (length 1) [ 1047.918296][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1047.918324][ C1] EXT4-fs (loop4): initial error at time 1773318980: ext4_map_blocks:776: inode 3: block 2 [ 1047.918372][ C1] EXT4-fs (loop4): last error at time 1773318980: ext4_map_blocks:776: inode 3: block 2 [ 1048.047190][T30869] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1048.047314][T30869] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.7623: Failed to acquire dquot type 0 [ 1048.105564][T30869] loop4: lost filesystem error report for type 5 error -117 [ 1048.145986][T30869] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1048.157249][T30881] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7626'. [ 1048.166478][T30881] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7626'. [ 1048.226782][T30869] loop4: lost filesystem error report for type 5 error -117 [ 1048.226975][T30869] EXT4-fs error (device loop4): ext4_evict_inode:255: inode #11: comm syz.4.7623: mark_inode_dirty error [ 1048.268741][T30869] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1048.300497][T30869] EXT4-fs warning (device loop4): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 1048.344645][T30869] EXT4-fs (loop4): 1 orphan inode deleted [ 1048.357538][T30869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1048.387439][T10284] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:19: lblock 1 mapped to illegal pblock 1 (length 1) [ 1048.429397][T10284] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:19: Failed to release dquot type 0 [ 1048.629509][T30891] loop5: detected capacity change from 0 to 4096 [ 1048.649215][T26950] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1049.435303][T26950] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1049.694635][T26950] loop4: lost filesystem error report for type 5 error -117 [ 1049.717099][T26950] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1050.569375][T30894] loop6: detected capacity change from 0 to 4096 [ 1050.578051][T30891] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1050.745039][T26950] loop4: lost filesystem error report for type 5 error -117 [ 1050.768566][T26950] EXT4-fs error (device loop4): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 1051.419031][T26950] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1052.219859][T30894] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1052.295996][T26698] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.321293][T30898] loop4: detected capacity change from 0 to 2048 [ 1052.346128][T30898] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1052.386293][T24675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.535917][T30908] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7633'. [ 1052.556091][T30908] lo speed is unknown, defaulting to 1000 [ 1052.611209][T30898] ================================================================== [ 1052.619356][T30898] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 1052.626766][T30898] [ 1052.629111][T30898] read-write to 0xffff88811b83a230 of 8 bytes by interrupt on cpu 1: [ 1052.637202][T30898] __xa_clear_mark+0xf5/0x1e0 [ 1052.641925][T30898] __folio_end_writeback+0xf4/0x360 [ 1052.647270][T30898] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 1052.653552][T30898] folio_end_writeback+0x1c/0x70 [ 1052.658525][T30898] ext4_finish_bio+0x459/0x8b0 [ 1052.663373][T30898] ext4_end_bio+0x27b/0x380 [ 1052.667917][T30898] bio_endio+0x38a/0x420 [ 1052.672219][T30898] blk_update_request+0x338/0x740 [ 1052.677291][T30898] blk_mq_end_request+0x26/0x50 [ 1052.682180][T30898] lo_complete_rq+0x98/0x140 [ 1052.686820][T30898] blk_done_softirq+0x77/0xb0 [ 1052.691539][T30898] handle_softirqs+0xb9/0x2a0 [ 1052.696249][T30898] run_ksoftirqd+0x1c/0x30 [ 1052.700707][T30898] smpboot_thread_fn+0x32a/0x510 [ 1052.705696][T30898] kthread+0x22a/0x280 [ 1052.709794][T30898] ret_from_fork+0x150/0x360 [ 1052.714425][T30898] ret_from_fork_asm+0x1a/0x30 [ 1052.719236][T30898] [ 1052.721582][T30898] read to 0xffff88811b83a230 of 8 bytes by task 30898 on cpu 0: [ 1052.729317][T30898] xas_find_marked+0x213/0x620 [ 1052.734152][T30898] filemap_get_folios_tag+0xfa/0x510 [ 1052.739471][T30898] file_write_and_wait_range+0x20c/0x2f0 [ 1052.745124][T30898] generic_buffers_fsync_noflush+0x45/0x130 [ 1052.751046][T30898] ext4_sync_file+0x1aa/0x6b0 [ 1052.755756][T30898] vfs_fsync_range+0xc5/0xe0 [ 1052.760371][T30898] ext4_buffered_write_iter+0x34f/0x3c0 [ 1052.765940][T30898] ext4_file_write_iter+0x380/0xfa0 [ 1052.771167][T30898] do_iter_readv_writev+0x4fd/0x5a0 [ 1052.776387][T30898] vfs_writev+0x2e1/0x900 [ 1052.780743][T30898] __se_sys_pwritev2+0xfc/0x1c0 [ 1052.785614][T30898] __x64_sys_pwritev2+0x67/0x80 [ 1052.790492][T30898] x64_sys_call+0xe07/0x3020 [ 1052.795113][T30898] do_syscall_64+0x12c/0x370 [ 1052.799737][T30898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.805653][T30898] [ 1052.808007][T30898] value changed: 0xfffffff000000000 -> 0xfff8000000000000 [ 1052.815132][T30898] [ 1052.817474][T30898] Reported by Kernel Concurrency Sanitizer on: [ 1052.823729][T30898] CPU: 0 UID: 0 PID: 30898 Comm: syz.4.7630 Tainted: G W syzkaller #0 PREEMPT(full) [ 1052.834708][T30898] Tainted: [W]=WARN [ 1052.838543][T30898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1052.848620][T30898] ================================================================== [ 1052.859143][ T28] kauditd_printk_skb: 257 callbacks suppressed [ 1052.859160][ T28] audit: type=1400 audit(1773318985.713:13910): avc: denied { checkpoint_restore } for pid=30905 comm="syz.1.7633" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1053.046869][T26950] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1053.880971][ T28] audit: type=1400 audit(1773318986.733:13911): avc: denied { unmount } for pid=22912 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1