last executing test programs: 6m44.88037537s ago: executing program 2 (id=337): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @empty, @broadcast}}}], 0x20}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xfffffffffffffffe, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r5, &(0x7f0000000040), 0x8) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x16, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x1}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x7}]}, &(0x7f00000001c0)='syzkaller\x00', 0x10, 0xfe, &(0x7f0000000800)=""/254, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x156e7, r3, 0x3, &(0x7f0000000400)=[0x1, 0x1, 0x1, r3, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000004c0)=[{0x4, 0x5, 0xa, 0x3}, {0x5, 0x1, 0x5, 0x3}, {0x3, 0x3, 0x0, 0xb}], 0x10, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x5, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x1, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = socket$nl_route(0x10, 0x3, 0x0) ptrace$setregset(0x4205, r0, 0x200, &(0x7f0000000100)={&(0x7f00000002c0)="7a0c9d92147c6b07ac1f05e52d131731ca028db630ba2959db6821d539d801fa172f8b53ad6d4245c49211e5c7af69b5d5aac207ec82949fd951248ca4c3880444490688d14301156110ef3c5d9472a66acdca81adf421e173c2db", 0x5b}) r10 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r10, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8}, 0x0) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r12 = syz_open_pts(r11, 0x40601) ioctl$TIOCCONS(r12, 0x541d) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6m42.334232113s ago: executing program 2 (id=345): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000000000000, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)='dE\x00', 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r2 = fsmount(0xffffffffffffffff, 0x0, 0xc) r3 = openat$cgroup_procs(r2, 0x0, 0x2, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4040044}, 0xc0) pwrite64(r3, 0x0, 0x0, 0xfe8c) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x20008850}, 0x4000001) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x200000000000000) 6m42.265466246s ago: executing program 2 (id=347): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ppoll(&(0x7f0000001fc0)=[{r0, 0xd028}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffffffa) r1 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) 6m41.34835126s ago: executing program 2 (id=353): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x60000c0, &(0x7f0000000400)=ANY=[], 0x1, 0x56d, &(0x7f0000000580)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x1f3c41, 0x68) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f00000000c0)="4d2e2e7c8bdc018d531b710a78ed2cdae32d8297c11cd0d6371dbfdb7a91885dd2e6fc18a49f70709f6c9fa3b0dfd31fcaee1bbfe6d1a2bbbc668a67227352b36900", 0x42}], 0x10000000000001bd) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x2, @empty, 0xffffffff}, {0xa, 0x4e20, 0x101, @remote, 0x7}, r2, 0x6}}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000005c40)=[{{&(0x7f0000000300)=@isdn, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000003c0)=""/145, 0x91}, {&(0x7f0000000480)=""/165, 0xa5}, {&(0x7f0000000b00)=""/209, 0xd1}, {&(0x7f0000000c00)=""/162, 0xa2}], 0x5, &(0x7f0000000e00)=""/219, 0xdb}, 0x81}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000f00)=""/137, 0x89}, {&(0x7f0000000fc0)=""/175, 0xaf}, {&(0x7f0000001080)=""/240, 0xf0}, {&(0x7f0000000540)=""/59, 0x3b}, {&(0x7f0000001180)=""/164, 0xa4}, {&(0x7f0000001240)=""/248, 0xf8}, {&(0x7f0000001340)=""/28, 0x1c}, {&(0x7f0000001380)=""/171, 0xab}, {&(0x7f0000001440)=""/244, 0xf4}], 0x9, &(0x7f0000001600)=""/106, 0x6a}, 0x2}, {{&(0x7f0000001680)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001700)=[{&(0x7f0000002240)=""/4096, 0x1000}], 0x1, &(0x7f0000001740)=""/141, 0x8d}, 0x1000}, {{&(0x7f0000001800)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001880)=""/102, 0x66}, {&(0x7f0000001980)=""/108, 0x6c}, {&(0x7f0000001a00)=""/236, 0xec}, {&(0x7f0000001b00)=""/251, 0xfb}, {&(0x7f0000001900)=""/16, 0x10}, {&(0x7f0000001c00)=""/16, 0x10}], 0x6, &(0x7f0000001cc0)=""/203, 0xcb}, 0xae83}, {{&(0x7f0000001dc0)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001e40)=""/30, 0x1e}, {&(0x7f0000001e80)=""/42, 0x2a}], 0x2, &(0x7f0000001f00)=""/6, 0x6}}, {{&(0x7f0000001f40)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002180)=[{&(0x7f0000001fc0)=""/232, 0xe8}, {&(0x7f00000020c0)=""/188, 0xbc}], 0x2}, 0xf7}, {{&(0x7f0000003240)=@xdp, 0x80, &(0x7f00000021c0)=[{&(0x7f00000032c0)=""/216, 0xd8}, {&(0x7f00000033c0)=""/125, 0x7d}, {&(0x7f0000003440)=""/186, 0xba}, {&(0x7f0000003500)=""/4096, 0x1000}], 0x4, &(0x7f0000004500)=""/194, 0xc2}, 0x8e}, {{&(0x7f0000004600)=@nl=@unspec, 0x80, &(0x7f0000004680), 0x0, &(0x7f00000046c0)=""/240, 0xf0}, 0x1}, {{&(0x7f00000047c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, &(0x7f00000048c0)=[{&(0x7f0000004840)=""/104, 0x68}], 0x1, &(0x7f0000004900)=""/65, 0x41}, 0x80}, {{0x0, 0x0, &(0x7f0000005b80)=[{&(0x7f0000004980)=""/235, 0xeb}, {&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000005a80)=""/18, 0x12}, {&(0x7f0000005ac0)=""/82, 0x52}, {&(0x7f0000005b40)=""/33, 0x21}], 0x5, &(0x7f0000005c00)=""/45, 0x2d}}], 0xa, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f0000001940)={0xa, 0x0, 0x200, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) syz_clone(0x42000, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000d40)="2b97f6ff7f373a6fd7dcfb9e49320b0797c3eccfedd570fb3c17c4f067059d2f8abbd9b233043148328fae42810103227d46e0caf70e89b871baf0177888b759ccba96cc88b63c580f01d8bf50c03d1746a5b3ad3bd6a2ac19db92666675addd4dc5647cd8f096d857deb4864e11bbc0aeae2152438089c170097cce906886805288b57b7436b4f092fe860ae1e7a2682457d267bd730c24ffcb27143837d1e0bcee691affa5") syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000180), &(0x7f0000000240)=0x4) 6m38.787804954s ago: executing program 2 (id=359): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg(r1, &(0x7f00000008c0)={&(0x7f0000000280)=@llc={0x1a, 0x334, 0x9, 0xf, 0x54, 0xf}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000100)="cb2894e234b37ff473df6578b313e90b5dbea0c58e2dbfe8ec18b97fd01991a1", 0x20}, {&(0x7f00000001c0)="ebf6173ae00c9a65d8199b34e0ed70586634f21269ef1b06411c3ea907c496ba3efd86e9baf31194540a8c5ce03c", 0x2e}, {&(0x7f00000007c0)="8e448c2a9359a1fc966b8184004f40de47f44a5c81b56af2afe6423435995e5650acae51a73b391b3f4bf11db9f1c5b2303012cc0e76d61142429a96ba28ef40c770000400fc650d75058b072841fa63d530b7d82049d33e99462f11aa7aa57b0ae487aa1359b8b029e8a4d790914fc7865e", 0x72}, {&(0x7f0000000840)="82fd36e0d0898c6765285f0d752164b19ea0bada3e3d0c96e8e0a21968350633686a3e56bfdccb0d23aa863e8d8bb0a2b3f2889f616769f5609d0de9181b48a05eb64cbda0f65826025753c3951c6c1e0876908cbe3014479e76307cf14e2485f6daa5ad6a5e7363689f5415ac18e04b0f", 0x71}], 0x4, &(0x7f0000001400)=[{0xc0, 0x22, 0x4fe4, "1e639f99d9eea3d7ea796d18103cec5b4bbe727f9b72df072a30f3f6665fc5ec646023fefe9bf7624a17b2a545eed075884861c8306b9d62911cf093203990bf7f06c7280356eaf4033dbca834a557262b9005569c63d5dab830d33f9f2ea48969dfbefca1fa27f6eb0b9a59e273d45b6b267ed6cd77c5a8d1a3d49b33f2feefb2855024e0ce1c63577b70382b1ce91deaee2b234bceba3cc342acd4472eee7b8bad574a7f6fddfcbcbefc52142936"}, {0x100, 0x84, 0x6, "9113393bc100df96734ced4e2c9943c58852ec713385a21bd950a3dfcb7d350cd9c7fc53763d5c998c79cbdd0858822dcdee912206b8eaeca7195e011637246225dcbd1d2092561da1a766a300ff667092374b1b7faf8e2eef7d313b74c9e1c2e190a7f91cd651336459a65f88e3376d5e22065f557bcb2d819ecd06c232b1a1479d9b5f380065c992d5bda86ce05be14090467fb76c49c5d1664b48c72d638347cae73b8d4753bc97118957eca4b321ac7b2fc1549996385021f2313a597d4798baec011eadef9ab7179c8fbf3c78d902b6a1a9a9c81031f41fe7df08be5c2bc77b74382882f693ef7a334b8dc9"}, {0x1010, 0x10a, 0x7, "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"}], 0x11d0}, 0x4000) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x7) 6m38.376159744s ago: executing program 2 (id=365): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000980), 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='attr\x00') fsopen(&(0x7f0000000080)='proc\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x6}}}]}]}]}}]}, 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000540000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m38.375946144s ago: executing program 32 (id=365): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000980), 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='attr\x00') fsopen(&(0x7f0000000080)='proc\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x6}}}]}]}]}}]}, 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000540000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 43.806049778s ago: executing program 4 (id=2585): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44000000000801010000000000000000030000020900010073797a31000000000600024088090000140004800600074000000006080006400000000905"], 0x44}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) 43.75961326s ago: executing program 4 (id=2587): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000ac0)='./file0/file0\x00', 0x10, &(0x7f0000000bc0)={[{@dmode={'dmode', 0x3d, 0x200}}, {@map_acorn}, {@map_normal}, {@cruft}, {@map_off}], [{@fowner_eq}, {@pcr={'pcr', 0x3d, 0x40}}]}, 0x1, 0x571, &(0x7f0000000540)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xff, 0x1, 0x10, 0x3ff, 0x4, 0x6}, {0xf, 0x1, 0x2, 0x1, 0x5}, 0x4, 0x100, 0x1b8f}}, @TCA_TBF_RATE64={0xc, 0x4, 0x2fd9e5fb6e622145}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x4094) read(r6, &(0x7f0000000600)=""/189, 0xbd) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="bbbbbbbbbb00000288a819008100000086dd6100b646001406"], 0x52) 43.601164458s ago: executing program 4 (id=2589): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x8083, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000540)={0x9, 0x7, 0x10021da0, 0x3000000, 0xff, "42f42749a2ed195a14c84953dc7e8e5aec7776", 0xfffffeff, 0x5}) 43.55622502s ago: executing program 4 (id=2590): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {}, {@usrquota}, {@data_err_ignore}, {@init_itable}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x559, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xae8, 0x863, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x147042, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) read(r1, &(0x7f0000001400)=""/4096, 0x1000) 43.436371216s ago: executing program 4 (id=2592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = fsopen(&(0x7f00000001c0)='minix\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdir(&(0x7f0000000280)='./file0\x00', 0x112) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20) rmdir(&(0x7f00000000c0)='./file0\x00') r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$inet(r7, &(0x7f00000002c0)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r6, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) sendmsg$inet(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000280)="0537", 0x2}], 0x1}, 0x88c1) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x5411, 0x0) fsopen(&(0x7f0000000080)='efivarfs\x00', 0x1) 42.585439276s ago: executing program 4 (id=2611): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44000000000801010000000000000000030000020900010073797a31000000000600024088090000140004800600074000000006080006400000000905"], 0x44}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) 27.227527046s ago: executing program 33 (id=2611): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44000000000801010000000000000000030000020900010073797a31000000000600024088090000140004800600074000000006080006400000000905"], 0x44}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) 8.942954755s ago: executing program 3 (id=2929): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f0000000f80)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYBLOB="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", @ANYRES32=0xffffffffffffffff, @ANYRESHEX], 0x1, 0x2c3, &(0x7f0000000ac0)="$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") r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000180)={0x7, 0x0, 0xabf, 0xc93b, 0x8}) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4c3, &(0x7f00000005c0)="$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") ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe) r3 = socket(0x10, 0x803, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000000c0)={0x2, 0x80, 0x3, 0x1, 0x6, 0x2, 0x0, 0x6, 0x82, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={0x0, 0x4}, 0x4, 0x9, 0x4, 0x5, 0x9a780000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x8000}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x43, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) setuid(0xee01) ioprio_set$uid(0x3, 0x0, 0x6000) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000dc0)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350073797a5f74756e00000000000000000008000a00", @ANYRES32=r6], 0x3c}}, 0x8000) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES32=r6], 0x20}, 0x1, 0x200000000000000, 0x0, 0x804}, 0x40cc040) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000040)={0x6, 0x8d4, 0x80000000, 0x3, 0x7, "19e7a6feeaaa892e24d40f39a7bb495bff3b8a"}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRESDEC], &(0x7f0000001f40)=""/4096, 0x26, 0x1000, 0xa, 0x1}, 0x28) 8.501961956s ago: executing program 3 (id=2933): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x9000) 4.664375838s ago: executing program 5 (id=2966): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="240003"], 0x10e0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000580)={[{@noload}, {@i_version}, {@bh}, {@noload}, {@data_err_ignore}, {@jqfmt_vfsv1}], [{@uid_gt}, {@obj_user={'obj_user', 0x3d, 'uid>'}}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fadvise64(r8, 0x2, 0x5, 0x300) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r7) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYRESDEC=r7], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) r10 = socket$inet6(0xa, 0x80002, 0x88) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1a, 0x0, 0x4, 0xb49, 0x0, 0x3cc1, 0x1, 0x3}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000040000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x99, &(0x7f0000000380)=""/153, 0x41000, 0xe}, 0x94) read(r10, 0x0, 0x0) 2.085421251s ago: executing program 3 (id=2936): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='\\%*\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x100888e, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@delalloc}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f00000002c0)="$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") perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0x2, 0x8406, 0x7, 0x8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffd, 0x7) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000200), &(0x7f0000000100)=0x8) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r3, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000400)={0x28, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'pim6reg\x00'}}]}]}, 0x28}}, 0x8804) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b, 0x4e23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) timer_gettime(r3, &(0x7f0000000000)) symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000084b66fd450e795ef0000000000000000000000000000000000000001ac1414aa000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000600000000004400050064010102000000000000000000000000000000003c00000002000000ac1414aa00000000000000000000000006000000040300"/180], 0xfc}}, 0x0) socket(0xa, 0x3, 0xff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x1400c0d1}, 0x0) 1.90055022s ago: executing program 1 (id=2973): socket$inet6_mptcp(0xa, 0x1, 0x106) syz_read_part_table(0x5e4, &(0x7f0000000000)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 1.862076522s ago: executing program 0 (id=2974): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) recvmmsg(r0, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/250, 0xfa}, 0x6}], 0x1, 0x10000, &(0x7f0000001500)={0x77359400}) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xb, 0x30, 0xb38, 0x7}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e20, 0xfffffffd, @rand_addr=' \x01\x00', 0x9}}, 0x401, 0x1, 0x1, 0x0, 0x4, 0x1584e752, 0x8}, 0x9c) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) 1.800213245s ago: executing program 5 (id=2975): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000004300010129bd7000fddbdf25020000000c000100"], 0x20}}, 0x400c000) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newqdisc={0x24, 0x24, 0x300, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xc, 0xffff}, {0x6, 0x5}, {0xe, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) close(r0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) 1.665196091s ago: executing program 3 (id=2977): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x40040, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000180)=0x4) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b00001400078008000500", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x2004c805}, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, 0x0, 0x8) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28, 0x7ffffff7}}], 0x1, 0x4040) 1.656568331s ago: executing program 1 (id=2978): socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00000003000000020000000300000000000000155bee5f01bbacca57f360d09ddb11c5eb3906000000000000003333a2ff832524e5db33f93512f1ae16595a62b85aa7d2fdd74a920e6b7fb4f9823b4c5c75cb1dec1ad71955a80626d41121f3e6d1f3dd1612b6fff219574b48cbbf5de93258e71e097f42c9a9308a954312fe", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1000, 0x3a, 0x1000, 0x9, 0x9, 0xf83, 0x7}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001a00010100000000fedbdf250a0000000300000500bd428e"], 0x24}}, 0x40800) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0xe, 0x4, 0x310, 0xffffffff, 0x128, 0x1c0, 0x1c0, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, &(0x7f00000002c0), {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x2, 0x2], 0x1}}, @common=@ttl={{0x28}, {0x3, 0xf}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x5, 0x8, 0x5, 0x2, 0x2], 0x4, 0x7}, {0xffffffffffffffff, [0x4, 0x4, 0x1, 0x1, 0x2, 0x4], 0x6}}}}, {{@ip={@broadcast, @broadcast, 0xffffff00, 0x100fffffe, 'vlan1\x00', 'veth0_to_bond\x00', {}, {0xff}, 0x6c, 0x2, 0x11}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x18, 0x6, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r1, 0x1, 0x85, 0x6, @broadcast}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x20a28, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x50) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 1.502044809s ago: executing program 3 (id=2980): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000003200)={0x8, {"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", 0x1000}}, 0x1006) r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = io_uring_setup(0x3538, &(0x7f0000000300)) close(r3) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r2, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400, 0x1, 0x3, 0x0, 0xb8f, 0x400}, 0x20) preadv2(r4, &(0x7f0000000200)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, 0x0, 0x401, 0x8) 984.260933ms ago: executing program 0 (id=2987): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000480)={0x7, 0xff, 0x5, 0x8000030, 0x6, 0x3}) r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4790, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x1000, 0x80020da, 0x0, 0x3, 0x20025, 0xb, 0x0, 0x0, 0x0, 0x20000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfc}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x22020600) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r3 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2b, 0x0, @fd, 0x0, 0x0}) io_uring_enter(r3, 0x54, 0x4, 0x5, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32=r7, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20044100) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 942.561226ms ago: executing program 0 (id=2989): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) io_setup(0x2, &(0x7f0000001700)=0x0) r4 = eventfd2(0x0, 0x0) io_getevents(r3, 0x4, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], 0x0) io_submit(r3, 0x1, &(0x7f00000028c0)=[&(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) io_destroy(r3) sendto(r0, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="b263cc7cd94599adca3af73c4612153f5feab90b3b0d877857e8ae1475701c3e0a13", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fddbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) r5 = syz_open_dev$mouse(&(0x7f0000000080), 0x1ff, 0x44000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x2f, 0x6, 0x4, 0x4, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @local}, 0x80, 0x8, 0xfffffff8, 0x68c8}}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x2000410, &(0x7f0000000380)=ANY=[], 0x1, 0x2b4, &(0x7f00000000c0)="$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") r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1100000004000000bed46a750800000000400000", @ANYRES32=r5, @ANYBLOB="0600"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="0200000004000000040000003d1300"/28], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r8, 0x6, 0x2, 0x0, 0x0) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r8, 0x0, 0x0, 0x720, 0x0, 0x0) 709.525187ms ago: executing program 1 (id=2992): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f0000000f80)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYBLOB="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", @ANYRES32=0xffffffffffffffff, @ANYRESHEX], 0x1, 0x2c3, &(0x7f0000000ac0)="$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") r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000180)={0x7, 0x0, 0xabf, 0xc93b, 0x8}) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4c3, &(0x7f00000005c0)="$eJzs3U1oXNUeAPD/nXw0L01f8j54r3SV9wp9fZQmTad5pdAH7apQtGArKOjC0EzStJO2NCmYLMQP0IoK7aYbi6ALBekirlQEkS5ERXDRjaAUVBAbSKtVpAshcu/MxLSZpE1Tc2n8/eBwz7kzc89/5uSeueefSxLAH1ZnROyKiIaI2BIR7dX9hWqJJyslfV6pOHEoLUlMTx+4mkQSEXuLE4dqx0qq29XVA7RExIUPI1ob5/Y7MjZ+pK9cLp2otrtHh493j4yNbx4a7hssDZaOFnu2F4vF3h3F3rv2Xn/45fCZd67vef7sle8//ebi2+eT2BVt1cdmv4+7pTM6Zz6T2RqTiP/f7c5y1pJ3ACza+fvPvJR3DADA8kuv8f8aEf/Orv/boyEqF+uHJx+91h7XBuZ7XcfPr1xezjgBAACAOzcd7bEz3QIAAAArViEi2iIpdFXvBWiLQqGrq3IP79+jtVA+NjK6aeDYyaP9kd0r2xFNhYGhcql2r3BHNCVpuyer/9beelO7GBF/iYhT7X/K2l0Hj5X7805+AAAAwArXFnHpkWfe/efqedb/qS/b844SAAAAWIp0/b/mUmv2p7p+ss4HAACAFSld/1979srHYf0PAAAAK1Zt/T/zf7hUVFRUZip5z1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw1/R0EtMAAADAipZ3/gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHvL3uLEoVpZrj4n9yxXT8xnandEdFTGv1QtlUcaoyXbtkRTRLT+mETjrNclEdGwxL67NkR0xqbPTz/x3VtpierP4RIPyz1i4uu8IyBPzdvyjoA8rXsg7wjI02en8o6APF2cyjsC8rT/QN4RkKd9/8s7AvL08tW8I+CD3RGxpV7+rxBrs20lC3Rz/qchyxAtzSfnIjqj69vZ++bmfwqTS+yGBUztjtgZEaU5+b9C7SkdDdXWmixV2JQMDJVLWyLizxGxMZpWpe2eBfrYu/ZC3UzPi/9Ix//kvlr+Ly1p/7VcYDWOycZVN76uv2+0b6nvm4qppyLWNdYb/2Qm/5vMk/9ddZt9vPfV/uF6+69/lI7/C+8vPP78nqZfjfhP3fM/mXlOWuseHT7ePTI2vnlouG+wNFg6WuzZXiwWe3cUe7uz+aC7NivM9ebTr9f9pv/XwWz+HzP++UnP/9aFxz+b/0fGxo/0lculEyOL7+O5DWfrfoe/cTYd/+YLdzL/NycPZgE2V/c93jc6eqInojm5b+7+rYuPeaWqfR61zysd/43r63//167/KvN/Yc78/7fqtlD5FeK8/vva5br7vzidjn/xIed/ftLx77/F+Z/ccP4vvvLY+v0b6/X9cGTXf+duff5vy4KpHcT1363d7gDlHScAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMz2awAAAP//MEf3BQ==") ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe) r3 = socket(0x10, 0x803, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000000c0)={0x2, 0x80, 0x3, 0x1, 0x6, 0x2, 0x0, 0x6, 0x82, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={0x0, 0x4}, 0x4, 0x9, 0x4, 0x5, 0x9a780000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x8000}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x43, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) setuid(0xee01) ioprio_set$uid(0x3, 0x0, 0x6000) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000dc0)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350073797a5f74756e00000000000000000008000a00", @ANYRES32=r6], 0x3c}}, 0x8000) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES32=r6], 0x20}, 0x1, 0x200000000000000, 0x0, 0x804}, 0x40cc040) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000040)={0x6, 0x8d4, 0x80000000, 0x3, 0x7, "19e7a6feeaaa892e24d40f39a7bb495bff3b8a"}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRESDEC], &(0x7f0000001f40)=""/4096, 0x26, 0x1000, 0xa, 0x1}, 0x28) 709.159327ms ago: executing program 6 (id=2993): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000000), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x44, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8041}, 0x4000052) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x121180) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000001140)=""/136) ftruncate(r2, 0x51a9497) socket$inet6(0xa, 0x1, 0x22c8000) ftruncate(r2, 0x3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) r6 = openat(r5, &(0x7f00000000c0)='./file0\x00', 0x400000, 0x2) setsockopt$MISDN_TIME_STAMP(r6, 0x0, 0x1, &(0x7f0000000140)=0x1, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}}, 0x0) 636.53457ms ago: executing program 6 (id=2994): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xa6, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x1003, 0x101, 0x0}) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4004550c, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0300000004000000040000000a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00002214319949397239000000000000000000000000000000000000b61d293b36cf739ce39ec21ffaf6ec4cd6dfe55c9180f334892544f5b49504fbd648e2dba72092565b2a815151769e95d9fe25f7fad06b7237358e0051588133fe0f7cb8"], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001400050125bc70007bdbdf2511000d000100da880c4f7e37eb868500000000004d92518d87976a361d50fd29defb51630d48902a72d6a8c89d2a5979a32ea784029b241e8683c728d763fa087f029ae31964f5af7828a7a056ada878dec141fe9409a3f6a89b3453f959fefbeac5281dd7362694dc4c63499876e20d8adf3bf95bdab0971a7b1fbcdd0bbe3dd44326183c34de12160dd5bc890311f796785328a72ab4ea821729940b19d741c648808bf0d90cc232612fc1e7a0d741d18416af080d5f447d4876f0d2a94b35176644efb33d43796fe62761b0606fe33a6354ee491b93ec47992c5968297f"], 0x24}, 0x1, 0x0, 0x0, 0x8002}, 0x2005c840) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000001c0)=0x2001) r2 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r2, 0x5452, &(0x7f0000001840)=0x5d4) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_setup(0x10d2, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x0, 0x353}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) syz_io_uring_submit(r4, 0x0, &(0x7f0000000000)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4a, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}, 0x1, 0x0, 0x0, {0x0, r3}}) connect$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x1, @empty}}, 0x1e) write$usbip_server(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4040) read$usbmon(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000005100)={0x9, {"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", 0x1000}}, 0x1006) 570.984113ms ago: executing program 6 (id=2995): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 570.068383ms ago: executing program 3 (id=2996): socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socket(0x1a, 0x5, 0x7fffffff) socket$kcm(0x1e, 0x4, 0x0) r1 = syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xd54b, 0x8, 0xfefffffd, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_adjtime(0x4, 0x0) capset(0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x1000000, 0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 546.526075ms ago: executing program 6 (id=2997): creat(&(0x7f0000000080)='./bus\x00', 0x154) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0xc, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100002}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)={0x320, 0x38, 0x100, 0x70bd2d, 0x25dfdbfd, {0x1f}, [@typed={0x14, 0xba, 0x0, 0x0, @ipv6=@local}, @nested={0x10, 0x66, 0x0, 0x1, [@nested={0x8, 0xaf, 0x0, 0x1, [@typed={0x4, 0x6c}]}, @nested={0x4, 0x88}]}, @nested={0x62, 0x109, 0x0, 0x1, [@typed={0x8, 0xb6, 0x0, 0x0, @uid=r2}, @typed={0x4, 0xcc}, @nested={0x4, 0xa1}, @typed={0xc, 0x23, 0x0, 0x0, @u64=0x8}, @generic="22118e1f94ef6bdaff2fe7a6139df9e77374d2c2a519", @generic="cbd388541c3faeaae51d2a20e5b328a5a15b00311c893c4fd99ea85db45f6b8d90d3be011854023601d58916"]}, @typed={0x5, 0x10e, 0x0, 0x0, @str='\x00'}, @nested={0x149, 0xe5, 0x0, 0x1, [@typed={0x4, 0xf3}, @typed={0x8, 0xa1, 0x0, 0x0, @ipv4=@broadcast}, @generic="d1da60cb1d160b96a2c29b05893eab197a020ce2042d8b05bc04b0b58dd72c8e647d495dc4e5329f00e157e6898dc0af33af33a44ac62235afec54b65023c8bd2e284352fbdd31420455edd168a5834c1c9c1558db3040061bfe8e0adb5dcbf942d8", @generic="30e68d88d7b0af3c8d24b451671572c794060a9989a58bbfe6f5483ce3e59312988178dd3a21cc07a841eae7362474235bc2ffff7100a550933069fb28207b849c56981d7259bbfd2084b1ced594d61341d9322f001b8177d0d41b1030baa4c8ab1e358f2109fe1c05414f3839b186d0606101d417cf702df7d7aff81219be840284cdc07682564a7b9f099086405ca94d1547cd7a4894b7c5108283edcae012e4d8d8043e8b06fffdd4cbc3d6c8d828d3b9c136374e0a8ad3ddf1", @nested={0x4, 0x27}, @nested={0x4, 0x4a}, @typed={0x8, 0x104, 0x0, 0x0, @fd=r0}, @typed={0xc, 0x111, 0x0, 0x0, @u64=0x7}]}, @generic="d3e626f43945d5532c19665d7b0d57cae1a7ced40564d733a64ac582cd2b1bc0fa407b3c1e83d6a41f03accaedebc68c43dd50aaac48af773a8c67a0bd684d186721a33ada9919636fd4b3e0a80c3494e9296ebb91ad74a879f9fef5ea91a5e730829b3253068e52bd55279994189bcb619045efdff35b4d629b888cf50fb4e9f234db22a3e7655a4a40a66450ccdbd446b6164195d1976b87ec812a1c2563ec4155df9f98deb73b6b5d87c933c96f731ba495e9e19abfd3c668886f98384491cf5fc5011629cdf9d89d613f9a441ec380bddeb1ab0f554df15473c232bc7d146a0836d7fecfc0cf3cb25e3dbad7c94dd8734d8c6978", @generic="c022", @nested={0x36, 0x102, 0x0, 0x1, [@typed={0x8, 0x10c, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x4, 0xc5}, @nested={0x4, 0x95}, @generic="ce0d73a783ce3bec52330a486ac9ce009cd81b4293011968db71f3c9356999e3c1bd"]}]}, 0x320}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x10102, 0x2, 0x0, 0x3, 0x94, 0xd6a9, 0x2000000}, 0x20) 476.472337ms ago: executing program 6 (id=2998): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@discard}, {@noblock_validity}]}, 0x3, 0x455, &(0x7f00000006c0)="$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") (async, rerun: 64) r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async, rerun: 64) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$eJzs3T9oJFUcB/Df7B/jJotGbQTxD4iIBkLsBJvYKAQkBBFBhYiIlSRCTLDLWtlYaK0SEGyC2BktxSbYKIJV1BS55uAuXHHhirtij9nZDZtkw132b9j5fGDZN3nvzXs7yfdNWJiZAHJrOiLmI6IYETMRUY6IpL3BM9lrurm5VdldjqjX37yRNNpl25lWv6mIqEXEyxGlVt3GzrsHt/Zef/7L9fJzP+y8UxnW52t3eLD/xtF3i1/8vPDSxl//XFtMYj6qzbr2z9FPSYeflZKIRwcx2CWRlEY9A+7H0mc//Zvm/rGIeLaR/3IUmpH9au2B38vx4rfn9f36+t9PDHOuQP/V6+X0HFirA7lTiIhqJIXZiMjKhcLsbPY//H/FycLHq2ufzny0ur7yYaMauKyqF2ma7L/268QvU6fyf7WY5R8YX9WI/beWtv9Py0fFUc8GGJj2b9ufzN7S/M+8v/lCyD/kjvxDfsk/5Jf8wxjoMrvyD/nVS/4fHNCcgOFw/ofx83CrUG4Vah3byT/kl/zDmPq+01WnJ8k/5Fd7/gGAfKlPjPoKZGBURr3+AAAAAAAAAAAAAAAAAAAAZ21Vdpdbr2GN+cc3EYevRkSp0/jF5gPHs7uNT95M0mbHkqxbT957uscd9OjHvl19Xemq10NX+jV+d/58ajD7/fzk5rkHZ3MlopY2niuVzv79JT0/8P6Re9SXP+hxgAs6fVfAV94e7vin3dke7fgLexG/pevPXHP9SQ/Q8e+/EI833juvP9X2Wyx36ZPbPe4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAobkbAAD//2SKbDc=") (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) r1 = syz_open_pts(r0, 0x200400) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000fc0)={0x7, 0x1, 0x1}) rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') execve(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)={[&(0x7f0000000100)='init_itable', &(0x7f0000000140)='vfat\x00']}, &(0x7f0000000dc0)={[&(0x7f0000000200)='noblock_validity', &(0x7f0000000240)='init_itable', &(0x7f0000000500)='discard', &(0x7f0000000540)='\x00', &(0x7f0000000c40)='{.,\x00', &(0x7f0000000c80)='discard', &(0x7f0000000cc0)='discard', &(0x7f0000000d00)='init_itable', &(0x7f0000000d40)='/.[-\x00', &(0x7f0000000d80)='ext4\x00']}) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f80)={0x10000, 0x12, 0x4}, 0x18) 449.218119ms ago: executing program 1 (id=2999): socket$packet(0x11, 0x3, 0x300) r0 = perf_event_open(&(0x7f0000000140)={0xb2e8bd7e79610d34, 0x80, 0xfe, 0x7, 0x42, 0x1, 0x0, 0x6, 0xd0802, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000100), 0xb}, 0x10, 0x2d6, 0xa, 0x7, 0x18a38, 0x1, 0x7a, 0x0, 0x7, 0x0, 0x7fffffffffffffff}, 0x0, 0x10, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x2, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, r0, 0xb) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000001c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x2, 0x0, 0x60, 0x0, 0x0, 0x0}, 0x50) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x1e, 0x4, 0x0) r3 = syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xd54b, 0x8, 0xfefffffd, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x11c, &(0x7f00000000c0)=0xfffffffc, 0x0, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000a80)=[{&(0x7f0000000240)=""/1, 0x1}, {&(0x7f0000000380)=""/254, 0xfe}, {&(0x7f0000000540)=""/232, 0xe8}, {&(0x7f0000000480)=""/108, 0x6c}, {&(0x7f0000000640)=""/205, 0xcd}, {&(0x7f0000000840)=""/105, 0x69}, {&(0x7f00000008c0)=""/179, 0xb3}, {&(0x7f0000000980)=""/106, 0x6a}, {&(0x7f0000000740)=""/53, 0x35}, {&(0x7f0000000a00)=""/65, 0x41}], 0xa, 0x800, 0x2) clock_adjtime(0x4, 0x0) capset(0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 439.937129ms ago: executing program 6 (id=3000): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000300) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x4000) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r2, 0x1, 0x1) getdents64(r2, 0x0, 0x22) socket$inet6(0xa, 0x3, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r3, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b56b36e6c5be956e7791334289cd58966289930fe24f617b6c", 0x8d}, {&(0x7f0000000640)="146d7d1fe23f2a38218e567b79d540f9855f11c272611653b571eaa7f1ae51d8da60a58cf2d3edc698914eaa6fb32bf9bab8b33a", 0x34}], 0x2) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000700)={0x14, &(0x7f00000003c0)={0x20, 0x6, 0x13, {0x13, 0x8, "0190776b461ca524f0d604b4a11ba25ff1"}}, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x1c, &(0x7f0000000740)={0x40, 0x1, 0x95, "b3cf778bcee2b4918052ffe18f66f4148ce54ac27b83712cf27365865239a702778531b163bcdcd9b75ba6be56f44ae6b99ac17bca80d1d0b8a9467696ac5964a2e47835bf23786de46ab52af838c57e7aa7f0bceb93121d1d04f0322d63ddff488531f2cda27e05e2deadb18b908a707f0812aa3745a40bff19fba4b472d569071def88550f6dbd214125c425d71d6f3a8913aaaa"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x86}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x40}}) 360.477063ms ago: executing program 1 (id=3001): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=@newtaction={0x140, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x12c, 0x1, [@m_vlan={0x128, 0x13, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x824}]}, {0xdc, 0x6, "368bd74c26f963cbc137c91507d161401b42dee08cee7bef45758a95abf590619e84e3348313ba44de74d1f4e11562abe903598097b9a3ad622528e5d699df103b3730b29c9ec0366b02a60115dc39bb5378558664eb64fd513db7110603c91f972029c1220c352b80530f5c0b20ec07cda83ee876ec2ef2156baae6355875231d7939a65a51cac5942f4fc8a7f7464fe60dfb36ac73da5e8a6c66c9605cab2b3165e8037c48ee2b786676daab1be64c2efbcb35d2bcf809405e0f175ca06c1986a22b43cdc3086e92acf5fcbaaa7e5c2fc7b63d1423e3ed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmmsg(r0, &(0x7f00000029c0), 0x400006d, 0x20000004) shutdown(r1, 0x2) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/42, 0x2a}], 0x1}, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000058}, 0x20008844) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0x20) r5 = io_uring_setup(0x3760, &(0x7f00000000c0)={0x0, 0x8458, 0x40, 0x2, 0x36c, 0x0, r4}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f0000000040), 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(r5, 0x20, &(0x7f0000000140)={0x0}, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=@base={0x12, 0x82, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r3}, 0x20) syz_clone3(&(0x7f0000007040)={0x400, &(0x7f0000006e40), 0x0, 0x0, {0x18}, 0x0, 0x0, 0x0, &(0x7f0000007000)=[0xffffffffffffffff], 0x1}, 0x58) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r7, &(0x7f0000000500), 0x0}, 0x20) getrusage(0x1, &(0x7f0000000280)) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x4, [@int={0x6, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x6}, @func={0x8, 0x0, 0x0, 0xc, 0x4}, @ptr={0x9, 0x0, 0x0, 0x2, 0x1}, @float={0x10, 0x0, 0x0, 0x10, 0x1af8cc755c03d444}, @typedef={0x9, 0x0, 0x0, 0x8, 0x2}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x3}, @restrict={0xc}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x4, 0x5}]}, {0x0, [0x5f, 0x0]}}, &(0x7f00000003c0)=""/92, 0x84, 0x5c, 0x1, 0x1000, 0x10000}, 0x28) rt_sigreturn() r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="8001000010000100feffffff000000000001fc010000000000000000000000000001000107144e230005000000003a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/312], 0x180}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r9, 0x40105870, &(0x7f0000000280)={0xf, 0x7}) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4008810) recvmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)=""/172, 0xac}, {&(0x7f00000002c0)=""/240, 0xf0}, {&(0x7f0000001d80)=""/4047, 0xfcf}, {&(0x7f0000000940)=""/4118, 0x1016}, {&(0x7f00000000c0)=""/125, 0x7d}], 0x5}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r10, &(0x7f0000000900)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="94010000190024082cbd7000fddbdf25fc000000000000000000000000000001fe8800000000000000000000000008014e2400064e24007f0200000073000000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 281.737787ms ago: executing program 1 (id=3002): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) syz_genetlink_get_family_id$ethtool(0x0, r0) socket$inet6(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x0, 0x0}) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000140)=""/10, 0xa}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000000200)=""/121, 0x79}, {&(0x7f00000013c0)=""/170, 0xaa}, {&(0x7f0000002540)=""/159, 0x9f}], 0x7) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf8c, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xabca, 0x5, 0xa, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000001500)={0x1, 'bridge_slave_1\x00', 0x3}, 0x18) 266.117348ms ago: executing program 5 (id=3003): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000fc090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x14, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)={0x6c, 0x0, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0xfff}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1b}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 170.669042ms ago: executing program 5 (id=3004): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="b17fac89504665d1080000000c10000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0xfffffff3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x19}, {0xb, 0xb}, {0xc, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xfffffffb}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240000d4}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 87.960556ms ago: executing program 0 (id=3005): r0 = syz_open_dev$mouse(&(0x7f00000001c0), 0xfffffffffffffffe, 0x404001) connect$llc(r0, &(0x7f0000000200)={0x1a, 0x100, 0x6, 0x80, 0x1, 0x5, @multicast}, 0x10) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r1, 0x20, &(0x7f0000000140)={&(0x7f0000000640)=""/4096, 0x1000, 0x0, &(0x7f0000000040)=""/222, 0xde}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000280)='./file0\x00', 0xb67ba5fb4dac895c, 0x80) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000240)={@dev={0xfe, 0x80, '\x00', 0x33}}, 0x14) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff020000000f0000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32], 0xfc}}, 0x0) 57.933688ms ago: executing program 5 (id=3006): r0 = socket(0x1f, 0x5, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd25, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) getsockopt(r0, 0x200000000114, 0x271c, 0x0, &(0x7f0000000040)) 1.50181ms ago: executing program 0 (id=3007): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 498.64µs ago: executing program 0 (id=3008): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) io_setup(0x2, &(0x7f0000001700)=0x0) r4 = eventfd2(0x0, 0x0) io_getevents(r3, 0x4, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], 0x0) io_submit(r3, 0x1, &(0x7f00000028c0)=[&(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) io_destroy(r3) sendto(r0, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="b263cc7cd94599adca3af73c4612153f5feab90b3b0d877857e8ae1475701c3e0a13", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fddbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) r5 = syz_open_dev$mouse(&(0x7f0000000080), 0x1ff, 0x44000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x2f, 0x6, 0x4, 0x4, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @local}, 0x80, 0x8, 0xfffffff8, 0x68c8}}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x2000410, &(0x7f0000000380)=ANY=[], 0x1, 0x2b4, &(0x7f00000000c0)="$eJzs3T9PA2UcB/DfldIWHdrByZB4iQxOBFhdSgwkRiZNB3VQI5AY2phAQuKfWJlcXRx9BSYmbr4JF9+BiauJmwwkZ653Rwu0hRoKGj+fAR6ee77P/e7yFErIPXy4Pjg5TOP44svfotVKotaNtbhMohO1qHwdN3S/DQDgv+wyy+LPrLBILomI1vLKAgCWaObP/5UZgZ+epCwAYIneefe9t3YPDvbeTtNW7A++Oe/lv9nnn4vju8fxSfTjKLaiHVcRWaX6+0CWZcN6mqZp1o4YDM97eXLwwS/l/Lt/RIzy29GOTpUo3m3kH/ffPNjbTguxcZ0f5nW8UJ6/m+d3oh0vTZx/Ir8zJR+9Rrz26kT9m9GOXz+OT6Mfh6MixvmvttP0jey7v754Py8vzyfD815zNG4sm/WOCAAAAAAAAAAAAAAAAAAAAAAAFrZZ7p3TjLQTG4O8q9x/Z+Uq/2I10krn5v48Rb5ZTXRrf6BhFt9X++tspWmaJcWwcb4eL9ej/jxXDQAAAAAAAAAAAAAAAAAAAP8uZ599fvJRv390+iiN8iH/68f6/+k83YmeV2L+4Ob4XLWyOWfmWKnGJBF5TzLrJuQX8Ui35b7G2qyaf/hx0Qlb949ZnXd/HqdRra789k4d04yqp1Utkp8nxzTigedqzDq0XpbwsHkaUw+1F772xoujxnDOmEjmvS5e/70ou+xJbr+IGqO7OjW+Wjbieo3fXhsLree73ysSu3UAAAAAAAAAAAAAAAAAAMBSjR/6vXOoHhdzo7WsucTCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAJjf///+xGPSJu9AzL8NxU0WjE6dkzXyIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/A38HAAD//zY6VNc=") r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1100000004000000bed46a750800000000400000", @ANYRES32=r5, @ANYBLOB="0600"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="0200000004000000040000003d1300"/28], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r8, 0x6, 0x2, 0x0, 0x0) connect$inet(r8, 0x0, 0x0) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r8, 0x0, 0x0, 0x720, 0x0, 0x0) 0s ago: executing program 5 (id=3009): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newneigh={0x38, 0x1c, 0x401, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x14}, [@NDA_PROBES={0x8, 0x4, 0x78}, @NDA_DST_MAC={0xa, 0x1, @local}, @NDA_PROTOCOL={0x5, 0xc, 0x1}]}, 0x38}}, 0x4040004) r1 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x80, 0x0, 0xf3, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x200052, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}}) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="350400002f000511d25a80648c63940d0224fc60040006400c0003000200002037153e370c040180060410004500", 0x2e}, {&(0x7f0000000600)="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", 0x407}], 0x2}, 0x4000014) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa105000000000000000000f8ffffffb702000008000000b7030000000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xbb, 0x10001}, 0x6025, 0x4008, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r8, 0x0) r9 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r9, &(0x7f0000000100)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, r9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061107e000000000063014800000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) keyctl$search(0xa, r9, &(0x7f0000000280)='keyring\x00', &(0x7f0000000340)={'syz', 0x1}, 0x0) perf_event_open(&(0x7f0000001d00)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0xed1ca, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0xd, 0x8b, 0x0, 0x66, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r8, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) io_uring_enter(r1, 0x3514, 0x9141, 0x69, 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) r11 = getpid() r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)=@bridge_getvlan={0x18, 0x72, 0x301, 0x4000001, 0x4}, 0x18}, 0x1, 0xf00, 0x0, 0x480c0}, 0x4000810) r13 = syz_pidfd_open(r11, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r13}}) kernel console output (not intermixed with test programs): ing attributes in process `syz.1.2337'. [ 440.383079][T14815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2337'. [ 440.503777][ T5327] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 440.655009][T14825] loop5: detected capacity change from 0 to 1024 [ 440.688508][T14825] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 440.794277][T14825] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 440.802417][T14825] EXT4-fs (loop5): orphan cleanup on readonly fs [ 440.818578][T14825] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz.5.2341: Invalid inode table block 0 in block_group 0 [ 440.839892][T14825] loop5: lost filesystem error report for type 5 error -117 [ 440.839991][T14825] EXT4-fs (loop5): Remounting filesystem read-only [ 440.847369][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 440.847389][ C0] EXT4-fs (loop5): initial error at time 1774081952: __ext4_get_inode_loc:4782 [ 440.847416][ C0] EXT4-fs (loop5): last error at time 1774081952: __ext4_get_inode_loc:4782 [ 440.919268][T14825] EXT4-fs (loop5): 1 truncate cleaned up [ 440.943006][T14825] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 441.086698][ T5542] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.174644][T14851] loop3: detected capacity change from 0 to 512 [ 441.235440][T14851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.248098][T14851] ext4 filesystem being mounted at /474/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 441.329590][T14860] loop5: detected capacity change from 0 to 1024 [ 441.340339][T14835] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2344'. [ 441.347239][T14860] EXT4-fs: Ignoring removed nomblk_io_submit option [ 441.417497][T14861] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2352'. [ 442.348528][T14860] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.374082][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.738180][T14879] loop3: detected capacity change from 0 to 1024 [ 442.895799][T14884] netlink: 'syz.1.2363': attribute type 29 has an invalid length. [ 442.914462][T14884] netlink: 'syz.1.2363': attribute type 29 has an invalid length. [ 443.076968][T14879] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 443.089836][ T5542] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.104928][T14879] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 443.126922][T14879] EXT4-fs (loop3): orphan cleanup on readonly fs [ 443.135369][T14879] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm syz.3.2360: Invalid inode table block 0 in block_group 0 [ 443.148196][T14879] loop3: lost filesystem error report for type 5 error -117 [ 443.148330][T14879] EXT4-fs (loop3): Remounting filesystem read-only [ 443.155665][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 443.155703][ C0] EXT4-fs (loop3): initial error at time 1774081954: __ext4_get_inode_loc:4782 [ 443.155731][ C0] EXT4-fs (loop3): last error at time 1774081954: __ext4_get_inode_loc:4782 [ 443.187495][T14879] EXT4-fs (loop3): 1 truncate cleaned up [ 443.193746][T14879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 443.236207][T14893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2366'. [ 443.279586][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.370404][T14906] loop3: detected capacity change from 0 to 512 [ 443.380627][T14906] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 443.397318][T14906] EXT4-fs (loop3): group descriptors corrupted! [ 443.836324][T14917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=14917 comm=syz.5.2376 [ 444.034999][T14914] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2374'. [ 444.103653][T14914] pim6reg: entered allmulticast mode [ 444.182482][T14941] 8021q: adding VLAN 0 to HW filter on device bond3 [ 444.411981][T14950] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2385'. [ 444.682468][T14958] gre0: entered promiscuous mode [ 444.712010][T14958] gre0: entered allmulticast mode [ 444.718799][T14955] loop5: detected capacity change from 0 to 2048 [ 444.747029][T14958] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 444.825495][ T28] kauditd_printk_skb: 187 callbacks suppressed [ 444.825512][ T28] audit: type=1326 audit(1774081956.571:4837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14956 comm="syz.5.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fa98e4ac799 code=0x7ffc0000 [ 444.885908][T14955] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.930186][ T28] audit: type=1326 audit(1774081956.681:4838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14954 comm="syz.5.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa98e44db19 code=0x7ffc0000 [ 445.003788][ T28] audit: type=1326 audit(1774081956.681:4839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14954 comm="syz.5.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa98e46cfce code=0x7ffc0000 [ 445.029851][T14963] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 445.077363][ T28] audit: type=1326 audit(1774081956.681:4840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14954 comm="syz.5.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fa98e4aabd7 code=0x7ffc0000 [ 445.115625][T14963] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 646 with error 28 [ 445.158103][ T28] audit: type=1326 audit(1774081956.681:4841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14954 comm="syz.5.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa98e46cfce code=0x7ffc0000 [ 445.217095][T14963] EXT4-fs (loop5): This should not happen!! Data will be lost [ 445.217095][T14963] [ 445.274951][ T28] audit: type=1326 audit(1774081956.681:4842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14954 comm="syz.5.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98e4ac799 code=0x7ffc0000 [ 445.308537][T14963] EXT4-fs (loop5): Total free blocks count 0 [ 445.343968][T14970] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2391'. [ 445.358037][T14963] EXT4-fs (loop5): Free/Dirty block details [ 445.393870][ T28] audit: type=1326 audit(1774081956.681:4843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14954 comm="syz.5.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98e4ac799 code=0x7ffc0000 [ 445.430171][T14963] EXT4-fs (loop5): free_blocks=2415919504 [ 445.466834][T14963] EXT4-fs (loop5): dirty_blocks=2048 [ 445.472250][ T28] audit: type=1326 audit(1774081956.681:4844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14954 comm="syz.5.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fa98e4ac799 code=0x7ffc0000 [ 445.496501][T14963] EXT4-fs (loop5): Block reservation details [ 445.502575][T14963] EXT4-fs (loop5): i_reserved_data_blocks=128 [ 445.566418][ T28] audit: type=1326 audit(1774081956.681:4845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14954 comm="syz.5.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98e4ac799 code=0x7ffc0000 [ 445.602970][ T70] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 646 with max blocks 1392 with error 28 [ 445.762628][ T28] audit: type=1326 audit(1774081956.681:4846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14954 comm="syz.5.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98e4ac799 code=0x7ffc0000 [ 445.849195][T14986] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2398'. [ 445.869089][T14987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2396'. [ 445.883328][T14987] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2396'. [ 445.937670][T14986] netlink: 'syz.0.2398': attribute type 12 has an invalid length. [ 445.956978][T14986] netlink: 'syz.0.2398': attribute type 29 has an invalid length. [ 445.970540][T14986] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2398'. [ 445.980182][T14986] netlink: 59 bytes leftover after parsing attributes in process `syz.0.2398'. [ 446.169707][T14995] loop5: detected capacity change from 0 to 512 [ 446.215699][T14995] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 446.313028][T14995] EXT4-fs (loop5): group descriptors corrupted! [ 447.454429][T15024] 8021q: adding VLAN 0 to HW filter on device bond4 [ 448.285442][T15043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2411'. [ 448.308356][T15043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2411'. [ 448.393599][T15048] loop3: detected capacity change from 0 to 2048 [ 448.412599][T15050] dvmrp1: entered allmulticast mode [ 448.431017][T15050] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12581 sclass=netlink_route_socket pid=15050 comm=syz.4.2414 [ 448.462535][T15051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12581 sclass=netlink_route_socket pid=15051 comm=syz.4.2414 [ 448.484005][T14469] loop3: p3 < > p4 < > [ 448.488345][T14469] loop3: partition table partially beyond EOD, truncated [ 448.499987][T14469] loop3: p3 start 4284289 is beyond EOD, truncated [ 448.515067][T15048] loop3: p3 < > p4 < > [ 448.519461][T15048] loop3: partition table partially beyond EOD, truncated [ 448.530365][T15048] loop3: p3 start 4284289 is beyond EOD, truncated [ 448.577580][T15053] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2415'. [ 448.628542][T14469] udevd[14469]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 448.666413][T14469] udevd[14469]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 448.803077][T15060] loop3: detected capacity change from 0 to 1024 [ 448.818049][T15060] EXT4-fs: Ignoring removed nomblk_io_submit option [ 448.865453][T15060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.898561][T15065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2420'. [ 448.911289][T15068] netlink: 'syz.1.2419': attribute type 83 has an invalid length. [ 449.038282][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.099893][T15118] netlink: 'syz.5.2428': attribute type 12 has an invalid length. [ 449.108439][T15118] netlink: 'syz.5.2428': attribute type 29 has an invalid length. [ 449.129428][T15119] loop3: detected capacity change from 0 to 2048 [ 449.194155][T14469] loop3: p3 < > p4 < > [ 449.198396][T14469] loop3: partition table partially beyond EOD, truncated [ 449.215755][T14469] loop3: p3 start 4284289 is beyond EOD, truncated [ 449.263348][T15119] loop3: p3 < > p4 < > [ 449.267578][T15119] loop3: partition table partially beyond EOD, truncated [ 449.276976][T15119] loop3: p3 start 4284289 is beyond EOD, truncated [ 449.326832][T15154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.336817][T15154] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.360081][T15154] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 449.396053][T14469] udevd[14469]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 449.510083][T14469] udevd[14469]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 449.547226][T15188] loop5: detected capacity change from 0 to 128 [ 449.622966][T15190] 8021q: adding VLAN 0 to HW filter on device bond11 [ 449.738777][T15188] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 449.751850][T15188] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 450.309992][T15206] loop5: detected capacity change from 0 to 128 [ 450.334244][T15206] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 450.553264][T15206] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 451.595467][T15208] __nla_validate_parse: 12 callbacks suppressed [ 451.595500][T15208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2439'. [ 451.814191][T15208] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2439'. [ 452.314271][T15209] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2440'. [ 452.332922][T15209] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2440'. [ 452.482005][T15212] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2442'. [ 452.548375][T15214] netlink: 'syz.3.2442': attribute type 12 has an invalid length. [ 452.558036][T15214] netlink: 'syz.3.2442': attribute type 29 has an invalid length. [ 452.567318][T15214] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2442'. [ 452.635747][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 452.635763][ T28] audit: type=1326 audit(1774081964.391:4861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28743c799 code=0x7ffc0000 [ 452.684796][ T28] audit: type=1326 audit(1774081964.421:4862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7ff28743c799 code=0x7ffc0000 [ 452.709403][ T28] audit: type=1326 audit(1774081964.421:4863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28743c799 code=0x7ffc0000 [ 452.733252][ T28] audit: type=1326 audit(1774081964.421:4864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff28743c799 code=0x7ffc0000 [ 452.757127][ T28] audit: type=1326 audit(1774081964.421:4865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28743c799 code=0x7ffc0000 [ 452.780912][ T28] audit: type=1326 audit(1774081964.431:4866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff28743c799 code=0x7ffc0000 [ 452.805037][ T28] audit: type=1326 audit(1774081964.431:4867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28743c799 code=0x7ffc0000 [ 452.829480][ T28] audit: type=1326 audit(1774081964.431:4868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff28743c799 code=0x7ffc0000 [ 452.853272][ T28] audit: type=1326 audit(1774081964.431:4869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28743c799 code=0x7ffc0000 [ 452.877066][ T28] audit: type=1326 audit(1774081964.431:4870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff28743c799 code=0x7ffc0000 [ 452.973590][T15226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2446'. [ 453.001989][T15223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16025 sclass=netlink_route_socket pid=15223 comm=syz.3.2445 [ 453.145854][T15229] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2446'. [ 453.292765][T15232] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2448'. [ 453.330580][T15240] loop3: detected capacity change from 0 to 1024 [ 453.342584][T15240] EXT4-fs: Ignoring removed nomblk_io_submit option [ 453.437558][T15250] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2455'. [ 453.448627][T15250] netlink: 'syz.4.2455': attribute type 12 has an invalid length. [ 453.457732][T15250] netlink: 'syz.4.2455': attribute type 29 has an invalid length. [ 453.468482][T15240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.514531][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.576006][T15256] loop3: detected capacity change from 0 to 128 [ 453.584683][T15256] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 453.614009][T15256] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 454.157123][T15265] Invalid ELF header magic: != ELF [ 455.060203][T15276] loop3: detected capacity change from 0 to 512 [ 455.101893][T15276] msdos: Unknown parameter 'nodots"nodoth' [ 455.177211][T15281] netlink: 'syz.0.2467': attribute type 12 has an invalid length. [ 455.188197][T15281] netlink: 'syz.0.2467': attribute type 29 has an invalid length. [ 456.985751][T15289] __nla_validate_parse: 8 callbacks suppressed [ 456.985784][T15289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2468'. [ 458.392304][T15300] loop3: detected capacity change from 0 to 1024 [ 458.411913][T15300] EXT4-fs: Ignoring removed nomblk_io_submit option [ 458.505913][T15300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.783645][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.794509][T15312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2476'. [ 458.829665][T15312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2476'. [ 458.894002][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 458.894115][ T28] audit: type=1400 audit(1774081970.631:4872): avc: denied { getattr } for pid=15313 comm="syz.4.2477" path="socket:[34091]" dev="sockfs" ino=34091 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 459.260430][T15321] loop3: detected capacity change from 0 to 128 [ 459.276411][T15321] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 459.334529][T15321] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 459.422603][T15328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2478'. [ 459.442623][T15328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2478'. [ 459.582332][T15334] loop3: detected capacity change from 0 to 512 [ 459.627321][T15334] EXT4-fs (loop3): 1 orphan inode deleted [ 459.655074][T15334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.704798][T15334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2482'. [ 459.745260][T15327] IPVS: stopping master sync thread 10731 ... [ 459.766426][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.439628][T15351] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2483'. [ 460.955777][T15359] loop5: detected capacity change from 0 to 256 [ 461.003412][T15359] vfat: Unknown parameter '@' [ 461.140347][ T28] audit: type=1326 audit(1774081972.891:4873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15358 comm="syz.5.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98e4ac799 code=0x7ffc0000 [ 461.291213][ T28] audit: type=1326 audit(1774081972.921:4874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15358 comm="syz.5.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fa98e4ac799 code=0x7ffc0000 [ 461.406858][ T28] audit: type=1326 audit(1774081972.921:4875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15358 comm="syz.5.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98e4ac799 code=0x7ffc0000 [ 461.492451][ T28] audit: type=1326 audit(1774081972.921:4876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15358 comm="syz.5.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa98e4ac799 code=0x7ffc0000 [ 461.634714][ T28] audit: type=1326 audit(1774081972.931:4877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15358 comm="syz.5.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98e4ac799 code=0x7ffc0000 [ 461.688972][T15363] loop5: detected capacity change from 0 to 512 [ 461.732901][T15363] EXT4-fs: Ignoring removed nomblk_io_submit option [ 461.776178][T15363] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #11: comm syz.5.2490: iget: bad extended attribute block 3153 [ 461.793107][ T28] audit: type=1326 audit(1774081972.931:4878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15358 comm="syz.5.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98e4ac799 code=0x7ffc0000 [ 461.839957][T15363] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 461.843706][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 461.859404][ C1] EXT4-fs (loop5): initial error at time 1774081973: ext4_orphan_get:1391: inode 11 [ 461.868833][ C1] EXT4-fs (loop5): last error at time 1774081973: ext4_orphan_get:1391: inode 11 [ 461.879924][T15363] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2490: couldn't read orphan inode 11 (err -117) [ 461.892201][T15363] loop5: lost filesystem error report for type 5 error -117 [ 461.892293][ T28] audit: type=1326 audit(1774081972.941:4879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15358 comm="syz.5.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa98e4ac799 code=0x7ffc0000 [ 461.924379][T15363] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.002202][ T28] audit: type=1326 audit(1774081972.941:4880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15358 comm="syz.5.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98e4ac799 code=0x7ffc0000 [ 462.109701][ T5542] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.140536][ T28] audit: type=1326 audit(1774081972.941:4881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15358 comm="syz.5.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98e4ac799 code=0x7ffc0000 [ 462.300487][T15366] loop5: detected capacity change from 0 to 128 [ 462.314309][T15366] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 462.330616][T15366] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 462.391673][T15374] loop3: detected capacity change from 0 to 1024 [ 462.404417][T15374] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 462.429960][T15374] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 462.443233][T15374] EXT4-fs (loop3): orphan cleanup on readonly fs [ 462.542110][T15381] No source specified [ 462.547300][T15374] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm syz.3.2494: Invalid inode table block 0 in block_group 0 [ 462.560700][T15374] loop3: lost filesystem error report for type 5 error -117 [ 462.560790][T15374] EXT4-fs (loop3): Remounting filesystem read-only [ 462.568158][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 462.568174][ C1] EXT4-fs (loop3): initial error at time 1774081974: __ext4_get_inode_loc:4782 [ 462.568198][ C1] EXT4-fs (loop3): last error at time 1774081974: __ext4_get_inode_loc:4782 [ 462.568494][T15384] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2491'. [ 462.575840][T15374] EXT4-fs (loop3): 1 truncate cleaned up [ 462.618218][T15384] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2491'. [ 463.565190][T15374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 464.130979][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 464.130998][ T28] audit: type=1326 audit(1774081975.881:4948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15373 comm="syz.3.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fefc2d5c799 code=0x7ffc0000 [ 464.161552][T15404] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2503'. [ 464.175432][T15404] netlink: 'syz.4.2503': attribute type 12 has an invalid length. [ 464.183373][T15404] netlink: 'syz.4.2503': attribute type 29 has an invalid length. [ 464.191388][T15404] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2503'. [ 464.209191][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.363652][T15416] loop5: detected capacity change from 0 to 512 [ 464.471331][T15422] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2505'. [ 464.544517][T15416] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.587104][T15416] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.400299][T15432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2512'. [ 466.586036][ T5542] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.679305][T15430] 8021q: adding VLAN 0 to HW filter on device bond12 [ 467.364971][ T28] audit: type=1326 audit(1774081978.401:4949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15436 comm="syz.4.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28743c799 code=0x7ffc0000 [ 467.398495][ T28] audit: type=1326 audit(1774081978.401:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15436 comm="syz.4.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28743c799 code=0x7ffc0000 [ 467.451125][ T28] audit: type=1326 audit(1774081978.401:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15436 comm="syz.4.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28743c799 code=0x7ffc0000 [ 467.496459][ T28] audit: type=1326 audit(1774081978.401:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15436 comm="syz.4.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28743c799 code=0x7ffc0000 [ 467.528098][T15441] loop3: detected capacity change from 0 to 512 [ 467.534486][ T28] audit: type=1326 audit(1774081978.401:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15436 comm="syz.4.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff28743c799 code=0x7ffc0000 [ 467.562431][T15441] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 467.564933][ T28] audit: type=1326 audit(1774081978.401:4954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15436 comm="syz.4.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28743c799 code=0x7ffc0000 [ 467.597334][T15441] EXT4-fs (loop3): group descriptors corrupted! [ 467.604562][ T28] audit: type=1326 audit(1774081978.401:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15436 comm="syz.4.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28743c799 code=0x7ffc0000 [ 467.647473][ T28] audit: type=1326 audit(1774081978.401:4956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15436 comm="syz.4.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28743c799 code=0x7ffc0000 [ 467.671225][ T28] audit: type=1326 audit(1774081978.401:4957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15436 comm="syz.4.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff28743c799 code=0x7ffc0000 [ 467.745309][T15453] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2520'. [ 467.846222][T15463] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2525'. [ 467.876210][T15471] loop5: detected capacity change from 0 to 128 [ 467.882977][T15471] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 467.980887][T15471] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 467.999410][T15471] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2528'. [ 468.008659][T15471] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2528'. [ 468.186276][T15478] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 468.206600][T15478] vhci_hcd vhci_hcd.1: invalid port number 96 [ 468.220669][T15478] vhci_hcd vhci_hcd.1: default hub control req: 1f0a vfffa i0060 l0 [ 468.336923][T15491] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2535'. [ 468.555132][T15504] loop5: detected capacity change from 0 to 1024 [ 468.561978][T15504] EXT4-fs: Ignoring removed nomblk_io_submit option [ 468.626648][T15505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2526'. [ 469.120428][T15504] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.382153][T15519] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2545'. [ 469.411605][T15519] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2545'. [ 469.422130][T15519] tipc: Enabling of bearer rejected, failed to enable media [ 469.461305][T15521] loop3: detected capacity change from 0 to 512 [ 469.488964][T15521] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 469.497209][T15521] System zones: 0-2, 18-18, 34-34 [ 469.506593][T15521] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 469.521501][T15521] EXT4-fs (loop3): Remounting filesystem read-only [ 469.528030][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 469.528043][ C1] EXT4-fs (loop3): initial error at time 1774081981: ext4_mb_generate_buddy:1315 [ 469.528059][ C1] EXT4-fs (loop3): last error at time 1774081981: ext4_mb_generate_buddy:1315 [ 469.558402][T15521] EXT4-fs (loop3): 1 truncate cleaned up [ 469.564983][T15521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.577629][T15521] ext4 filesystem being mounted at /516/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.077340][T15529] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2547'. [ 470.300601][ T1677] __quota_error: 55 callbacks suppressed [ 470.300638][ T1677] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 470.419091][ T1677] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 470.613292][ T1677] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 471.582990][ T1677] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 471.593773][ T1677] Quota error (device loop3): write_blk: dquota write failed [ 471.601156][ T1677] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 471.621804][ T1677] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 472.170096][T15540] 8021q: adding VLAN 0 to HW filter on device bond5 [ 472.229086][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.582495][ T1677] Quota error (device loop3): write_blk: dquota write failed [ 472.592629][ T1677] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 472.602550][ T1677] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 472.612684][ T1677] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 472.624221][ T5542] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.679749][T15558] loop5: detected capacity change from 0 to 164 [ 472.707238][T15558] Unable to read rock-ridge attributes [ 472.727699][ T28] audit: type=1400 audit(1774081984.481:5013): avc: denied { mount } for pid=15557 comm="syz.5.2550" name="/" dev="loop5" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 472.752617][T15558] Unable to read rock-ridge attributes [ 472.788567][T15558] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 472.876659][ T28] audit: type=1400 audit(1774081984.631:5014): avc: denied { unmount } for pid=5542 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 473.069657][T15564] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2559'. [ 473.170815][T15568] loop5: detected capacity change from 0 to 128 [ 473.195602][T15568] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 473.230409][T15569] netlink: 'syz.0.2562': attribute type 25 has an invalid length. [ 473.239195][T15568] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 473.253156][T15569] netlink: 'syz.0.2562': attribute type 28 has an invalid length. [ 473.281593][T15568] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2561'. [ 473.290778][T15568] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2561'. [ 473.357257][T15571] netlink: 'syz.1.2563': attribute type 1 has an invalid length. [ 473.367304][T15571] netlink: 'syz.1.2563': attribute type 4 has an invalid length. [ 473.382873][T15571] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2563'. [ 473.495412][T15556] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2553'. [ 473.685860][T15601] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2569'. [ 473.701564][T15600] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2573'. [ 473.740803][T15604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2574'. [ 473.755436][T15604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2574'. [ 474.637848][T15611] loop3: detected capacity change from 0 to 256 [ 474.645046][T15611] vfat: Unknown parameter ' [ 474.645046][T15611] ' [ 475.131990][T15630] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2579'. [ 475.354295][T15646] loop5: detected capacity change from 0 to 128 [ 475.374429][T15646] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 475.431424][T15646] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 475.750146][T15667] loop5: detected capacity change from 0 to 512 [ 475.780408][T15667] EXT4-fs (loop5): 1 orphan inode deleted [ 475.811198][T15667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.895179][ T5542] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.968931][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 475.968943][ T28] audit: type=1400 audit(1774081987.721:5079): avc: denied { ioctl } for pid=15676 comm="syz.0.2598" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=34970 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 476.005256][T15679] loop3: detected capacity change from 0 to 736 [ 476.155595][T15688] loop3: detected capacity change from 0 to 1024 [ 476.171290][T15688] EXT4-fs: Ignoring removed oldalloc option [ 476.182274][T15688] EXT4-fs: Ignoring removed bh option [ 476.214900][T15688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.248406][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.285783][T15697] loop3: detected capacity change from 0 to 2048 [ 476.334698][T15697] loop3: p3 < > p4 < > [ 476.339088][T15697] loop3: partition table partially beyond EOD, truncated [ 476.346684][T15697] loop3: p3 start 4284289 is beyond EOD, truncated [ 476.347662][ T28] audit: type=1400 audit(1774081988.101:5080): avc: denied { connect } for pid=15703 comm="syz.1.2609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 476.380497][ T3000] loop3: p3 < > p4 < > [ 476.388161][ T3000] loop3: partition table partially beyond EOD, truncated [ 476.395546][ T3000] loop3: p3 start 4284289 is beyond EOD, truncated [ 476.420943][T14469] udevd[14469]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 476.462159][T15707] team0: No ports can be present during mode change [ 477.640467][T15728] tipc: Enabled bearer , priority 0 [ 477.657760][T15728] tipc: Resetting bearer [ 478.139213][T15727] tipc: Disabling bearer [ 478.149776][T15730] __nla_validate_parse: 4 callbacks suppressed [ 478.149793][T15730] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2618'. [ 478.234668][T15733] loop3: detected capacity change from 0 to 1024 [ 478.264396][T15736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2620'. [ 478.279597][T15738] loop5: detected capacity change from 0 to 1024 [ 478.285275][T15733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.300710][T15736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2620'. [ 478.309467][T15738] EXT4-fs: Ignoring removed nomblk_io_submit option [ 478.323548][T15733] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.2619: Allocating blocks 449-513 which overlap fs metadata [ 478.350987][T15738] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.407421][ T5542] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.464923][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.537455][T15751] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2623'. [ 478.550091][T15758] loop3: detected capacity change from 0 to 736 [ 478.566625][T15749] netlink: 96 bytes leftover after parsing attributes in process `\'. [ 478.585439][T15749] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=15749 comm=\ [ 478.774348][T15769] netlink: 'syz.5.2630': attribute type 6 has an invalid length. [ 479.283160][T15775] loop3: detected capacity change from 0 to 256 [ 479.328613][T15775] vfat: Unknown parameter '@' [ 479.346491][T15785] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 479.378588][T15785] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 479.419045][ T28] audit: type=1326 audit(1774081991.171:5081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15774 comm="syz.3.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc2d5c799 code=0x7ffc0000 [ 479.442703][T15785] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2635'. [ 479.442942][T15785] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2635'. [ 479.505183][ T28] audit: type=1326 audit(1774081991.211:5082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15774 comm="syz.3.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fefc2d5c799 code=0x7ffc0000 [ 479.607138][ T28] audit: type=1326 audit(1774081991.211:5083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15774 comm="syz.3.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc2d5c799 code=0x7ffc0000 [ 479.667456][T15797] set_capacity_and_notify: 1 callbacks suppressed [ 479.667485][T15797] loop5: detected capacity change from 0 to 1024 [ 479.668844][ T28] audit: type=1326 audit(1774081991.211:5084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15774 comm="syz.3.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc2d5c799 code=0x7ffc0000 [ 479.712344][T15797] EXT4-fs: Ignoring removed nomblk_io_submit option [ 479.765986][T15797] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.790052][ T28] audit: type=1326 audit(1774081991.211:5085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15774 comm="syz.3.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fefc2d5c799 code=0x7ffc0000 [ 480.062075][ T28] audit: type=1326 audit(1774081991.211:5086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15774 comm="syz.3.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc2d5c799 code=0x7ffc0000 [ 480.174684][ T28] audit: type=1326 audit(1774081991.221:5087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15774 comm="syz.3.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fefc2d5c799 code=0x7ffc0000 [ 480.195874][T15806] loop3: detected capacity change from 0 to 736 [ 480.252737][ T5542] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.263778][ T28] audit: type=1326 audit(1774081991.221:5088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15774 comm="syz.3.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc2d5c799 code=0x7ffc0000 [ 480.311481][T15808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2644'. [ 480.321053][T15808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2644'. [ 480.458538][T15816] netlink: 'syz.3.2648': attribute type 25 has an invalid length. [ 480.498223][T15816] netlink: 'syz.3.2648': attribute type 28 has an invalid length. [ 480.928985][T15832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2651'. [ 481.245698][T15831] loop3: detected capacity change from 0 to 256 [ 481.329439][T15831] vfat: Unknown parameter '@' [ 481.419617][ T28] kauditd_printk_skb: 183 callbacks suppressed [ 481.419696][ T28] audit: type=1326 audit(1774081993.171:5272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15830 comm="syz.3.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc2d5c799 code=0x7ffc0000 [ 481.620856][ T28] audit: type=1326 audit(1774081993.201:5273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15830 comm="syz.3.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc2d5c799 code=0x7ffc0000 [ 481.672228][T15837] loop5: detected capacity change from 0 to 1024 [ 481.713494][T15837] EXT4-fs: Ignoring removed nomblk_io_submit option [ 481.733518][ T28] audit: type=1326 audit(1774081993.221:5274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15830 comm="syz.3.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fefc2d5c799 code=0x7ffc0000 [ 481.838045][T15837] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.871533][ T28] audit: type=1326 audit(1774081993.221:5275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15830 comm="syz.3.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc2d5c799 code=0x7ffc0000 [ 481.961900][ T28] audit: type=1326 audit(1774081993.221:5276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15830 comm="syz.3.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fefc2d5c799 code=0x7ffc0000 [ 482.023029][ T5542] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.039949][ T28] audit: type=1326 audit(1774081993.241:5277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15830 comm="syz.3.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc2d5c799 code=0x7ffc0000 [ 482.088371][ T28] audit: type=1326 audit(1774081993.241:5278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15830 comm="syz.3.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc2d5c799 code=0x7ffc0000 [ 482.137382][ T28] audit: type=1326 audit(1774081993.251:5279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15830 comm="syz.3.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fefc2d5c799 code=0x7ffc0000 [ 482.185921][ T28] audit: type=1326 audit(1774081993.251:5280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15830 comm="syz.3.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc2d5c799 code=0x7ffc0000 [ 482.236771][ T28] audit: type=1326 audit(1774081993.251:5281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15830 comm="syz.3.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fefc2d5c799 code=0x7ffc0000 [ 482.582113][T15848] loop5: detected capacity change from 0 to 736 [ 482.745596][T15853] loop5: detected capacity change from 0 to 128 [ 482.752416][T15853] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 482.768597][T15853] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 482.858037][ T70] Bluetooth: hci1: Frame reassembly failed (-84) [ 482.864541][ T1716] Bluetooth: hci1: Frame reassembly failed (-84) [ 483.749173][T15877] __nla_validate_parse: 3 callbacks suppressed [ 483.749346][T15877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2669'. [ 483.787377][T15879] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2670'. [ 483.851865][T15880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2670'. [ 483.863767][ T6805] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 484.394411][T15895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2676'. [ 484.441560][T15900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2678'. [ 484.485566][T15904] loop3: detected capacity change from 0 to 512 [ 484.505555][T15904] EXT4-fs (loop3): 1 orphan inode deleted [ 484.512011][T15904] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.526398][T15904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2680'. [ 484.554600][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.765975][T15907] loop3: detected capacity change from 0 to 256 [ 484.781576][T15907] vfat: Unknown parameter '@' [ 484.903766][ T5327] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 484.911954][T15910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2682'. [ 485.005457][T15913] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 485.439342][T15920] 9p: Bad value for 'source' [ 487.104829][T15926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2687'. [ 487.191285][T15930] loop5: detected capacity change from 0 to 1024 [ 487.224206][T15930] EXT4-fs: Ignoring removed nomblk_io_submit option [ 487.269488][T15930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.408368][T15937] sch_fq: defrate 4294967295 ignored. [ 487.418925][T15937] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2692'. [ 487.457347][T15937] batman_adv: batadv0: Removing interface: dummy0 [ 487.472437][T15940] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2690'. [ 487.475074][ T5542] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.555979][ T70] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.583364][ T70] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.605348][ T70] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.665133][T15961] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 487.665133][T15961] The task syz.0.2698 (15961) triggered the difference, watch for misbehavior. [ 487.759815][T15970] loop5: detected capacity change from 0 to 1024 [ 487.814395][T15970] EXT4-fs: Ignoring removed nomblk_io_submit option [ 487.934988][T15970] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.991807][ T5542] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.096259][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 488.096326][ T28] audit: type=1400 audit(1774081999.851:5318): avc: denied { setopt } for pid=15976 comm="syz.5.2704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 488.129678][ T28] audit: type=1326 audit(1774081999.871:5319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15976 comm="syz.5.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98e4ac799 code=0x7ffc0000 [ 488.161715][ T28] audit: type=1326 audit(1774081999.871:5320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15976 comm="syz.5.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98e4ac799 code=0x7ffc0000 [ 488.185493][ T28] audit: type=1326 audit(1774081999.881:5321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15976 comm="syz.5.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fa98e4ac799 code=0x7ffc0000 [ 488.209248][ T28] audit: type=1326 audit(1774081999.881:5322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15976 comm="syz.5.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98e4ac799 code=0x7ffc0000 [ 488.232992][ T28] audit: type=1326 audit(1774081999.881:5323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15976 comm="syz.5.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98e4ac799 code=0x7ffc0000 [ 488.285918][ T28] audit: type=1326 audit(1774082000.041:5324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15988 comm="syz.1.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c2a6c799 code=0x7ffc0000 [ 488.313175][ T28] audit: type=1326 audit(1774082000.041:5325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15988 comm="syz.1.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c2a6c799 code=0x7ffc0000 [ 488.337106][ T28] audit: type=1326 audit(1774082000.061:5326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15988 comm="syz.1.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f26c2a6c799 code=0x7ffc0000 [ 488.360891][ T28] audit: type=1326 audit(1774082000.061:5327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15988 comm="syz.1.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c2a6c799 code=0x7ffc0000 [ 488.808081][T16003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2711'. [ 488.817769][T16003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2711'. [ 488.919017][T16010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2713'. [ 488.969396][T16012] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2715'. [ 488.987371][T16014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2714'. [ 489.000745][T16014] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2714'. [ 489.143244][T16029] loop5: detected capacity change from 0 to 128 [ 489.150155][T16029] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 489.168007][T16029] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 489.187115][T16029] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2723'. [ 489.198493][T16031] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2722'. [ 489.214234][T16029] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2723'. [ 489.232596][T16031] netlink: 'syz.0.2722': attribute type 12 has an invalid length. [ 489.253735][T16031] netlink: 'syz.0.2722': attribute type 29 has an invalid length. [ 489.282061][T16031] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2722'. [ 489.376158][T16042] xt_hashlimit: size too large, truncated to 1048576 [ 489.639103][T16060] loop3: detected capacity change from 0 to 512 [ 489.691909][T16060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.713978][T16060] ext4 filesystem being mounted at /546/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 489.819758][T16075] netlink: 'syz.0.2739': attribute type 12 has an invalid length. [ 489.843614][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.857915][T16075] netlink: 'syz.0.2739': attribute type 29 has an invalid length. [ 489.936420][T16082] loop3: detected capacity change from 0 to 1024 [ 489.957041][T16082] EXT4-fs: Ignoring removed nomblk_io_submit option [ 489.999418][T16082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.101218][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.127440][T16098] loop3: detected capacity change from 0 to 1024 [ 490.135486][T16098] EXT4-fs: Ignoring removed nomblk_io_submit option [ 490.148241][T16098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.300835][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.370523][T16114] loop3: detected capacity change from 0 to 1024 [ 490.388217][T16114] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 490.398937][T16114] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 490.407246][T16114] EXT4-fs (loop3): orphan cleanup on readonly fs [ 490.414416][T16114] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm syz.3.2751: Invalid inode table block 0 in block_group 0 [ 490.427255][T16114] loop3: lost filesystem error report for type 5 error -117 [ 490.427899][T16114] EXT4-fs (loop3): Remounting filesystem read-only [ 490.442075][T16114] EXT4-fs (loop3): 1 truncate cleaned up [ 490.443735][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 490.451030][T16114] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 490.454188][ C1] EXT4-fs (loop3): initial error at time 1774082002: __ext4_get_inode_loc:4782 [ 490.454211][ C1] EXT4-fs (loop3): last error at time 1774082002: __ext4_get_inode_loc:4782 [ 490.544263][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.819232][T16122] netlink: 'syz.3.2753': attribute type 12 has an invalid length. [ 490.827510][T16122] netlink: 'syz.3.2753': attribute type 29 has an invalid length. [ 491.125943][T16144] gretap0: left promiscuous mode [ 491.130930][T16144] gretap0: entered allmulticast mode [ 491.174642][ T1716] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.245472][ T1716] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.323542][T16151] loop5: detected capacity change from 0 to 512 [ 491.333928][ T1716] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.361277][T16151] EXT4-fs (loop5): 1 orphan inode deleted [ 491.394194][T16151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.412133][T16132] chnl_net:caif_netlink_parms(): no params data found [ 491.434237][ T5542] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.506542][T16132] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.535731][T16132] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.543072][T16132] bridge_slave_0: entered allmulticast mode [ 491.574368][T16132] bridge_slave_0: entered promiscuous mode [ 491.594299][T16132] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.601417][T16132] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.631086][T16132] bridge_slave_1: entered allmulticast mode [ 491.646593][T16132] bridge_slave_1: entered promiscuous mode [ 491.848320][T16132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.875605][T16164] loop3: detected capacity change from 0 to 512 [ 491.885018][T16132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.926386][T16164] EXT4-fs (loop3): 1 orphan inode deleted [ 491.960595][T16166] netlink: 'syz.5.2765': attribute type 12 has an invalid length. [ 491.970281][T16164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.004194][T16166] netlink: 'syz.5.2765': attribute type 29 has an invalid length. [ 492.041837][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.064380][T16132] team0: Port device team_slave_0 added [ 492.079200][T16132] team0: Port device team_slave_1 added [ 492.235589][ T1716] bridge_slave_1: left allmulticast mode [ 492.241276][ T1716] bridge_slave_1: left promiscuous mode [ 492.397270][T16185] loop3: detected capacity change from 0 to 2048 [ 492.561471][ T1716] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.571022][ T1716] bridge_slave_0: left allmulticast mode [ 492.576972][ T1716] bridge_slave_0: left promiscuous mode [ 492.583076][ T1716] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.197818][T16185] loop3: p3 < > p4 < > [ 493.204995][T16185] loop3: partition table partially beyond EOD, truncated [ 493.219791][T16185] loop3: p3 start 4284289 is beyond EOD, truncated [ 493.232601][ T1716] dvmrp6 (unregistering): left allmulticast mode [ 493.244969][ T3000] loop3: p3 < > p4 < > [ 493.253519][ T3000] loop3: partition table partially beyond EOD, truncated [ 493.267081][ T1716] bridge0 (unregistering): left promiscuous mode [ 493.273609][ T3000] loop3: p3 start 4284289 is beyond EOD, truncated [ 493.294603][T16174] udevd[16174]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 493.321157][T16174] udevd[16174]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 493.526325][ T1716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.535658][ T1716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.548054][ T1716] bond0 (unregistering): Released all slaves [ 493.555941][ T1716] bond1 (unregistering): Released all slaves [ 493.565152][ T1716] bond2 (unregistering): Released all slaves [ 493.573385][ T1716] bond3 (unregistering): Released all slaves [ 493.581789][ T1716] bond4 (unregistering): Released all slaves [ 493.595231][T16197] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 493.660944][T16132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.693141][T16132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.749985][T16132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.772562][ T1716] hsr_slave_0: left promiscuous mode [ 493.790255][ T1716] hsr_slave_1: left promiscuous mode [ 493.796805][ T1716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.809680][ T1716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.864819][ T28] kauditd_printk_skb: 188 callbacks suppressed [ 493.864830][ T28] audit: type=1326 audit(1774082005.621:5514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16212 comm="syz.3.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc2d5c799 code=0x7ffc0000 [ 493.866565][ T1716] team_slave_1 (unregistering): left allmulticast mode [ 493.871536][ T28] audit: type=1326 audit(1774082005.621:5515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16212 comm="syz.3.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc2d5c799 code=0x7ffc0000 [ 493.925613][T16215] loop5: detected capacity change from 0 to 128 [ 493.934351][ T28] audit: type=1326 audit(1774082005.681:5516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16212 comm="syz.3.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc2d5c799 code=0x7ffc0000 [ 493.943783][ T1716] team0 (unregistering): Port device team_slave_1 removed [ 493.958541][ T28] audit: type=1326 audit(1774082005.681:5517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16212 comm="syz.3.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc2d5c799 code=0x7ffc0000 [ 493.988978][T16215] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 494.002473][T16214] loop3: detected capacity change from 0 to 1024 [ 494.010765][T16215] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 494.028367][T16214] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 494.041437][ T28] audit: type=1326 audit(1774082005.681:5518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16212 comm="syz.3.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefc2d5c799 code=0x7ffc0000 [ 494.066053][ T28] audit: type=1326 audit(1774082005.681:5519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16212 comm="syz.3.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc2d5c799 code=0x7ffc0000 [ 494.066709][T16214] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 494.091974][ T28] audit: type=1326 audit(1774082005.691:5520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16212 comm="syz.3.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc2d5c799 code=0x7ffc0000 [ 494.121680][ T28] audit: type=1326 audit(1774082005.691:5521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16212 comm="syz.3.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc2d5c799 code=0x7ffc0000 [ 494.145237][ T28] audit: type=1326 audit(1774082005.691:5522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16212 comm="syz.3.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fefc2d5c799 code=0x7ffc0000 [ 494.168787][ T28] audit: type=1326 audit(1774082005.691:5523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16212 comm="syz.3.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fefc2d5c502 code=0x7ffc0000 [ 494.194792][T16214] EXT4-fs (loop3): orphan cleanup on readonly fs [ 494.204207][T16132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.211174][T16132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.216808][T16214] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm syz.3.2774: Invalid inode table block 0 in block_group 0 [ 494.237100][T16132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.264932][T16132] hsr_slave_0: entered promiscuous mode [ 494.271049][T16132] hsr_slave_1: entered promiscuous mode [ 494.278167][T16214] loop3: lost filesystem error report for type 5 error -117 [ 494.278314][T16214] EXT4-fs (loop3): Remounting filesystem read-only [ 494.279187][T16132] debugfs: 'hsr0' already exists in 'hsr' [ 494.285676][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 494.304395][ C0] EXT4-fs (loop3): initial error at time 1774082006: __ext4_get_inode_loc:4782 [ 494.305822][T16132] Cannot create hsr debugfs directory [ 494.313366][ C0] EXT4-fs (loop3): last error at time 1774082006: __ext4_get_inode_loc:4782 [ 494.328312][T16214] EXT4-fs (loop3): 1 truncate cleaned up [ 494.339862][T16214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 494.423491][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.493447][T16240] loop3: detected capacity change from 0 to 128 [ 494.511983][T16240] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 494.546444][T16240] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 494.581059][T16168] chnl_net:caif_netlink_parms(): no params data found [ 494.599870][T16240] __nla_validate_parse: 15 callbacks suppressed [ 494.599886][T16240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2777'. [ 494.615493][T16240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2777'. [ 494.638897][ T1716] IPVS: stop unused estimator thread 0... [ 494.726124][T16168] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.749077][T16168] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.756467][T16168] bridge_slave_0: entered allmulticast mode [ 494.773165][T16168] bridge_slave_0: entered promiscuous mode [ 494.780056][T16168] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.787331][T16168] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.794951][T16168] bridge_slave_1: entered allmulticast mode [ 494.811186][T16168] bridge_slave_1: entered promiscuous mode [ 494.862606][T16272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2779'. [ 494.874515][T16272] 9p: Bad value for 'rfdno' [ 494.950897][T16168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.969421][T16168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.025743][T16168] team0: Port device team_slave_0 added [ 495.037272][T16168] team0: Port device team_slave_1 added [ 495.073627][T16168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.081056][T16168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.109459][T16168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.135739][T16168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.146411][T16168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.191091][T16168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.211661][ T1716] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.223183][T16277] loop3: detected capacity change from 0 to 256 [ 495.277879][T16277] vfat: Unknown parameter '@' [ 495.289324][T16168] hsr_slave_0: entered promiscuous mode [ 495.302117][T16168] hsr_slave_1: entered promiscuous mode [ 495.313181][T16303] loop5: detected capacity change from 0 to 128 [ 495.324061][T16168] debugfs: 'hsr0' already exists in 'hsr' [ 495.329837][T16168] Cannot create hsr debugfs directory [ 495.332719][T16303] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 495.357563][T16303] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 495.377566][ T1716] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.403635][T16132] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 495.421816][T16303] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2785'. [ 495.430787][T16132] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 495.458475][T16132] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 495.471110][ T1716] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.482914][T16132] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 495.537193][T16314] loop5: detected capacity change from 0 to 1024 [ 495.548394][ T1716] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.560167][T16314] EXT4-fs: Ignoring removed nomblk_io_submit option [ 495.582493][T16314] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.657412][T16168] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 495.666809][T16168] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 495.681613][T16168] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 495.699285][T16132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.731683][T16168] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 495.758607][ T1716] bridge_slave_1: left allmulticast mode [ 495.767859][ T1716] bridge_slave_1: left promiscuous mode [ 495.780056][ T1716] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.788891][ T1716] bridge_slave_0: left allmulticast mode [ 495.794719][ T1716] bridge_slave_0: left promiscuous mode [ 495.800494][ T1716] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.835608][ T5542] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.862306][ T1716] dvmrp0 (unregistering): left allmulticast mode [ 495.879186][T16349] loop5: detected capacity change from 0 to 512 [ 495.880244][ T1716] dvmrp1 (unregistering): left allmulticast mode [ 495.900338][T16349] EXT4-fs (loop5): 1 orphan inode deleted [ 495.910726][T16349] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.285461][ T1716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.294982][ T1716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.304289][ T1716] bond0 (unregistering): Released all slaves [ 496.311624][ T1716] bond1 (unregistering): Released all slaves [ 496.320012][ T1716] bond2 (unregistering): Released all slaves [ 496.328593][ T1716] bond3 (unregistering): Released all slaves [ 496.337624][ T1716] bond4 (unregistering): Released all slaves [ 496.345711][ T1716] bond5 (unregistering): Released all slaves [ 496.354155][ T1716] bond6 (unregistering): Released all slaves [ 496.380687][T16132] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.418586][ T5542] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.430563][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.437699][ T4263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.457860][T16371] tipc: Enabling of bearer rejected, failed to enable media [ 496.476114][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.483186][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.514620][ T1716] hsr_slave_0: left promiscuous mode [ 496.524454][ T1716] hsr_slave_1: left promiscuous mode [ 496.534603][ T1716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.542544][ T1716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.552004][ T1716] batman_adv: batadv0: Removing interface: dummy0 [ 496.600145][ T1716] team0 (unregistering): Port device team_slave_1 removed [ 496.613902][ T1716] team0 (unregistering): Port device team_slave_0 removed [ 496.697449][T16168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.740540][T16402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2796'. [ 496.749655][T16168] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.764496][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.771637][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.782314][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.789427][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.865045][T16132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.912043][ T1716] IPVS: stop unused estimator thread 0... [ 496.933064][T16168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.949276][T16428] netlink: 'syz.3.2798': attribute type 12 has an invalid length. [ 496.963845][T16428] netlink: 'syz.3.2798': attribute type 29 has an invalid length. [ 496.980876][T16428] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2798'. [ 497.069967][T16132] veth0_vlan: entered promiscuous mode [ 497.083267][T16447] loop3: detected capacity change from 0 to 1024 [ 497.092488][T16132] veth1_vlan: entered promiscuous mode [ 497.099115][T16447] EXT4-fs: Ignoring removed nomblk_io_submit option [ 497.135519][T16447] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.155894][T16132] veth0_macvtap: entered promiscuous mode [ 497.169020][T16132] veth1_macvtap: entered promiscuous mode [ 497.181197][T16132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.190192][T16132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.205355][ T1677] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.218112][ T1677] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.234917][ T1677] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.246125][ T1677] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.310969][T16168] veth0_vlan: entered promiscuous mode [ 497.338794][T16168] veth1_vlan: entered promiscuous mode [ 497.350028][T16477] loop1: detected capacity change from 0 to 1024 [ 497.358316][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.368600][T16477] EXT4-fs: Ignoring removed nomblk_io_submit option [ 497.379316][T16476] tipc: Enabling of bearer rejected, failed to enable media [ 497.414317][T16477] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.428908][T16168] veth0_macvtap: entered promiscuous mode [ 497.440810][T16168] veth1_macvtap: entered promiscuous mode [ 497.455725][T16168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.469881][T16168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.488484][T10329] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.498229][T10329] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.638890][T10329] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.655540][T10329] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.027762][T16132] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.094472][T16505] loop1: detected capacity change from 0 to 128 [ 498.112834][T16505] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 498.137513][T16505] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 498.159889][T16510] loop6: detected capacity change from 0 to 1024 [ 498.194965][T16510] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.213377][T16510] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.2766: Allocating blocks 449-513 which overlap fs metadata [ 498.236073][T16505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2806'. [ 498.250599][T16168] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.263374][T10329] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.279646][T16505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2806'. [ 498.304410][T10329] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.318289][T16527] loop3: detected capacity change from 0 to 128 [ 498.331657][T10329] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.346611][T16527] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 498.362970][T16513] loop5: detected capacity change from 0 to 256 [ 498.373215][T16513] vfat: Unknown parameter '@' [ 498.394217][T16527] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 498.406311][T10329] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.526840][T16527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2809'. [ 498.536186][T16527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2809'. [ 498.591809][T16535] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.2812: inode has both inline data and extents flags [ 498.631629][T16535] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 498.631823][T16535] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2812: couldn't read orphan inode 15 (err -117) [ 498.641034][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 498.641051][ C0] EXT4-fs (loop6): initial error at time 1774082010: ext4_orphan_get:1391: inode 15 [ 498.641097][ C0] EXT4-fs (loop6): last error at time 1774082010: ext4_orphan_get:1391: inode 15 [ 498.693803][T16535] loop6: lost filesystem error report for type 5 error -117 [ 498.694447][T16535] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.731183][T16543] EXT4-fs: Ignoring removed nomblk_io_submit option [ 498.786268][T16543] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.830144][T16168] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.851925][T16551] netlink: 'syz.6.2817': attribute type 12 has an invalid length. [ 498.860076][T16551] netlink: 'syz.6.2817': attribute type 29 has an invalid length. [ 498.871905][T16132] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.935802][T16555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.935895][T16553] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.962438][T16555] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.2818: Allocating blocks 449-513 which overlap fs metadata [ 498.994748][T16553] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 499.025071][ T1677] Bluetooth: hci0: Frame reassembly failed (-84) [ 499.056374][T16132] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.167519][T16168] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.577911][T16601] EXT4-fs: Ignoring removed i_version option [ 499.584071][T16601] EXT4-fs: Ignoring removed bh option [ 499.589700][T16601] ext3: Unknown parameter 'uid>00000000000000000000' [ 499.853188][T16606] netlink: 'syz.0.2829': attribute type 12 has an invalid length. [ 499.883663][T16606] netlink: 'syz.0.2829': attribute type 29 has an invalid length. [ 499.903134][T16606] __nla_validate_parse: 2 callbacks suppressed [ 499.903357][T16606] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2829'. [ 500.500678][T16619] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 500.555316][T16623] set_capacity_and_notify: 6 callbacks suppressed [ 500.555330][T16623] loop1: detected capacity change from 0 to 512 [ 500.585078][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 500.585089][ T28] audit: type=1326 audit(1774082012.341:5581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16624 comm="syz.6.2836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2954e7c799 code=0x7ffc0000 [ 500.714315][ T28] audit: type=1326 audit(1774082012.341:5582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16624 comm="syz.6.2836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2954e7c799 code=0x7ffc0000 [ 500.740199][ T28] audit: type=1326 audit(1774082012.371:5583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16624 comm="syz.6.2836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2954e7c799 code=0x7ffc0000 [ 500.780920][ T28] audit: type=1326 audit(1774082012.371:5584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16624 comm="syz.6.2836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2954e7c799 code=0x7ffc0000 [ 500.805321][T16623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.818659][T16623] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 500.829616][ T28] audit: type=1326 audit(1774082012.371:5585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16624 comm="syz.6.2836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f2954e7c799 code=0x7ffc0000 [ 500.929820][ T28] audit: type=1326 audit(1774082012.371:5586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16624 comm="syz.6.2836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2954e7c799 code=0x7ffc0000 [ 501.038745][ T28] audit: type=1326 audit(1774082012.371:5587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16624 comm="syz.6.2836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2954e7c799 code=0x7ffc0000 [ 501.097518][T16132] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.135107][ T28] audit: type=1326 audit(1774082012.371:5588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16624 comm="syz.6.2836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2954e7c799 code=0x7ffc0000 [ 501.164555][ T9975] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 501.180265][ T28] audit: type=1326 audit(1774082012.371:5589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16624 comm="syz.6.2836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2954e7c799 code=0x7ffc0000 [ 501.204193][ T28] audit: type=1326 audit(1774082012.371:5590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16624 comm="syz.6.2836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f2954e7c799 code=0x7ffc0000 [ 501.296484][T16633] loop3: detected capacity change from 0 to 1024 [ 501.305178][T16633] EXT4-fs: Ignoring removed nomblk_io_submit option [ 501.395210][T16633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.562140][T16650] ip6gre1: left promiscuous mode [ 501.567936][T16650] gretap1: left promiscuous mode [ 502.073639][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.730095][T16674] IPVS: Unknown mcast interface: veth1_macvtap [ 502.785641][T16676] loop3: detected capacity change from 0 to 512 [ 502.856302][T16676] EXT4-fs (loop3): 1 orphan inode deleted [ 502.877855][T16676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.952061][T16682] loop1: detected capacity change from 0 to 512 [ 502.967126][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.997659][T16682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.029602][T16682] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 503.071950][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 503.138381][T16691] loop5: detected capacity change from 0 to 2048 [ 503.165161][T16691] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.177882][T16691] ext4 filesystem being mounted at /408/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 503.251056][T16696] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2856: bg 0: block 345: padding at end of block bitmap is not set [ 503.274915][T16696] EXT4-fs (loop5): Remounting filesystem read-only [ 503.282979][T10329] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:5037: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 503.298261][T16132] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.337939][ T5542] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.422716][T16706] syzkaller1: entered promiscuous mode [ 503.428436][T16706] syzkaller1: entered allmulticast mode [ 503.639686][T16712] loop1: detected capacity change from 0 to 2048 [ 503.715942][T16712] loop1: p3 < > p4 < > [ 503.720265][T16712] loop1: partition table partially beyond EOD, truncated [ 503.727763][T16712] loop1: p3 start 4284289 is beyond EOD, truncated [ 503.897246][T16716] 8021q: adding VLAN 0 to HW filter on device bond6 [ 504.402996][T16732] loop1: detected capacity change from 0 to 512 [ 504.478771][T16732] EXT4-fs: Ignoring removed oldalloc option [ 504.495760][T16732] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.2866: invalid block [ 504.515566][T16730] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2865'. [ 504.524797][T16732] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 504.525049][T16732] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2866: invalid indirect mapped block 4294967295 (level 1) [ 504.534197][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 504.534211][ C0] EXT4-fs (loop1): initial error at time 1774082016: ext4_get_branch:178: inode 11: block 4294967295 [ 504.534259][ C0] EXT4-fs (loop1): last error at time 1774082016: ext4_get_branch:178: inode 11: block 4294967295 [ 504.633474][T16732] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 504.633758][T16732] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2866: invalid indirect mapped block 4294967295 (level 1) [ 504.681890][T16732] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 504.683100][T16732] EXT4-fs (loop1): 2 truncates cleaned up [ 504.714520][T16732] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.827380][T16736] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2867'. [ 504.857878][T16132] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.870249][T16736] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2867'. [ 504.882626][T16736] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2867'. [ 505.109094][T16748] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 505.116837][T16748] vhci_hcd vhci_hcd.1: invalid port number 96 [ 505.123031][T16748] vhci_hcd vhci_hcd.1: default hub control req: 1f0a vfffa i0060 l0 [ 505.143835][ T9975] Bluetooth: hci0: command 0x1003 tx timeout [ 505.149894][ T5327] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 505.360277][T16753] loop1: detected capacity change from 0 to 736 [ 505.621604][T16761] loop1: detected capacity change from 0 to 2048 [ 505.674045][T16174] loop1: p3 < > p4 < > [ 505.679086][T16174] loop1: partition table partially beyond EOD, truncated [ 505.686955][T16174] loop1: p3 start 4284289 is beyond EOD, truncated [ 505.697671][T16761] loop1: p3 < > p4 < > [ 505.701861][T16761] loop1: partition table partially beyond EOD, truncated [ 505.723402][T16761] loop1: p3 start 4284289 is beyond EOD, truncated [ 505.731415][T16767] loop3: detected capacity change from 0 to 128 [ 505.787931][T16174] udevd[16174]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 505.800871][T16767] syz.3.2879: attempt to access beyond end of device [ 505.800871][T16767] loop3: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 505.818123][T16174] udevd[16174]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 505.836752][T16767] syz.3.2879: attempt to access beyond end of device [ 505.836752][T16767] loop3: rw=2049, sector=170, nr_sectors = 16 limit=128 [ 505.850654][T16767] syz.3.2879: attempt to access beyond end of device [ 505.850654][T16767] loop3: rw=2049, sector=202, nr_sectors = 16 limit=128 [ 505.876288][T16767] syz.3.2879: attempt to access beyond end of device [ 505.876288][T16767] loop3: rw=2049, sector=234, nr_sectors = 16 limit=128 [ 505.921170][T16767] syz.3.2879: attempt to access beyond end of device [ 505.921170][T16767] loop3: rw=2049, sector=154, nr_sectors = 16 limit=128 [ 505.953947][T16767] syz.3.2879: attempt to access beyond end of device [ 505.953947][T16767] loop3: rw=2049, sector=218, nr_sectors = 16 limit=128 [ 505.967955][T16767] syz.3.2879: attempt to access beyond end of device [ 505.967955][T16767] loop3: rw=2049, sector=186, nr_sectors = 16 limit=128 [ 506.341094][T16795] loop6: detected capacity change from 0 to 1024 [ 506.351499][T16795] EXT4-fs: Ignoring removed nomblk_io_submit option [ 506.376971][T16790] 8021q: adding VLAN 0 to HW filter on device bond6 [ 506.477155][T16795] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.115844][T16168] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.224916][T16811] loop1: detected capacity change from 0 to 128 [ 507.234616][T16809] loop6: detected capacity change from 0 to 2048 [ 507.241985][T16811] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 507.259384][T16811] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 507.270759][T16813] macvtap0: entered promiscuous mode [ 507.284617][T16174] loop6: p3 < > p4 < > [ 507.288789][T16174] loop6: partition table partially beyond EOD, truncated [ 507.299369][T16813] batadv0: entered promiscuous mode [ 507.305482][T16174] loop6: p3 start 4284289 is beyond EOD, truncated [ 507.312365][T16813] macvtap0: entered allmulticast mode [ 507.328260][T16809] loop6: p3 < > p4 < > [ 507.332548][T16809] loop6: partition table partially beyond EOD, truncated [ 507.340500][T16813] batadv0: entered allmulticast mode [ 507.346594][T16813] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 507.353533][T16809] loop6: p3 start 4284289 is beyond EOD, truncated [ 507.374171][T16813] batadv0: left allmulticast mode [ 507.389022][T16813] batadv0: left promiscuous mode [ 507.416752][T16174] udevd[16174]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 507.444715][T16816] loop6: detected capacity change from 0 to 128 [ 507.540346][T16174] udevd[16174]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 507.566671][T16820] loop3: detected capacity change from 0 to 512 [ 507.590151][T16824] loop1: detected capacity change from 0 to 512 [ 507.613007][T16826] loop6: detected capacity change from 0 to 128 [ 507.629410][T16820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.642964][T16824] EXT4-fs: Ignoring removed oldalloc option [ 507.668963][T16826] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 507.681246][T16824] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 507.711372][T16820] ext4 filesystem being mounted at /588/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.749528][T16824] EXT4-fs (loop1): 1 truncate cleaned up [ 507.760803][T16826] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 507.781609][T16824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.795895][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.808793][T16836] netlink: 89 bytes leftover after parsing attributes in process `syz.0.2900'. [ 507.845454][T16836] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2900'. [ 507.856988][T16826] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2898'. [ 507.869193][T16836] netlink: 'syz.0.2900': attribute type 4 has an invalid length. [ 507.886218][T16826] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2898'. [ 507.898071][T16838] loop5: detected capacity change from 0 to 1024 [ 507.904590][ T28] kauditd_printk_skb: 194 callbacks suppressed [ 507.904602][ T28] audit: type=1400 audit(1774082019.651:5785): avc: denied { ioctl } for pid=16823 comm="syz.1.2897" path="cgroup:[4026533186]" dev="nsfs" ino=4026533186 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 507.928430][T16841] netlink: 'syz.0.2900': attribute type 4 has an invalid length. [ 507.949682][T16836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5138 sclass=netlink_route_socket pid=16836 comm=syz.0.2900 [ 507.960589][T13104] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.973005][T16838] EXT4-fs: Ignoring removed nomblk_io_submit option [ 507.980741][T13104] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.991714][T13104] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.021054][T16838] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.021373][T13104] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.084187][T16847] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2903'. [ 508.096318][ T5542] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.154625][T16855] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2906'. [ 508.165484][ T4263] Bluetooth: hci0: Frame reassembly failed (-84) [ 508.239749][T16859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2908'. [ 508.249066][T16859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2908'. [ 508.311627][T16132] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.491777][T16886] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.2915: corrupted in-inode xattr: invalid ea_ino [ 508.522491][T16886] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 508.523705][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 508.539300][ C0] EXT4-fs (loop3): initial error at time 1774082020: ext4_iget_extra_inode:5025: inode 15 [ 508.545849][T16886] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2915: couldn't read orphan inode 15 (err -117) [ 508.549251][ C0] EXT4-fs (loop3): last error at time 1774082020: ext4_iget_extra_inode:5025: inode 15 [ 508.599029][T16886] loop3: lost filesystem error report for type 5 error -117 [ 508.600790][T16886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.654111][T16886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2915'. [ 508.661681][ T28] audit: type=1400 audit(1774082020.411:5786): avc: denied { setopt } for pid=16885 comm="syz.3.2915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 508.701517][T16895] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 508.731701][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.742972][T16895] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 508.812277][T16895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2916'. [ 508.857176][T16899] loop3: p3 < > p4 < > [ 508.868570][T16899] loop3: partition table partially beyond EOD, truncated [ 508.880285][T16899] loop3: p3 start 4284289 is beyond EOD, truncated [ 509.221334][T16910] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 509.235267][T16910] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 509.451272][T16915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.495581][T16915] ext4 filesystem being mounted at /595/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 509.645293][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.982748][T16958] syzkaller0: entered promiscuous mode [ 509.995101][T16958] syzkaller0: entered allmulticast mode [ 510.172544][T16975] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 510.195306][ T9975] Bluetooth: hci0: command 0x1003 tx timeout [ 510.233780][ T5327] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 510.247425][T16975] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 510.304041][T16174] loop6: p3 < > p4 < > [ 510.308229][T16174] loop6: partition table partially beyond EOD, truncated [ 510.315805][T16174] loop6: p3 start 4284289 is beyond EOD, truncated [ 510.546789][T16977] loop6: p3 < > p4 < > [ 510.563811][T16977] loop6: partition table partially beyond EOD, truncated [ 510.583238][T16977] loop6: p3 start 4284289 is beyond EOD, truncated [ 510.617248][T16986] EXT4-fs: Ignoring removed nomblk_io_submit option [ 510.669833][T16986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.686835][T16174] udevd[16174]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 510.705445][T16991] set_capacity_and_notify: 9 callbacks suppressed [ 510.705455][T16991] loop6: detected capacity change from 0 to 512 [ 510.745617][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.801859][ T28] audit: type=1326 audit(1774082022.551:5787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16997 comm="syz.5.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98e4ac799 code=0x7ffc0000 [ 510.806692][T16991] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 510.826266][ T28] audit: type=1326 audit(1774082022.551:5788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16997 comm="syz.5.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98e4ac799 code=0x7ffc0000 [ 510.859647][ T28] audit: type=1326 audit(1774082022.551:5789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16997 comm="syz.5.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98e4ac799 code=0x7ffc0000 [ 510.883523][ T28] audit: type=1326 audit(1774082022.631:5790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16997 comm="syz.5.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98e4ac799 code=0x7ffc0000 [ 510.907556][ T28] audit: type=1326 audit(1774082022.631:5791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16997 comm="syz.5.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98e4ac799 code=0x7ffc0000 [ 510.931181][ T28] audit: type=1326 audit(1774082022.681:5792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16997 comm="syz.5.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa98e4ac799 code=0x7ffc0000 [ 510.957897][ T28] audit: type=1326 audit(1774082022.681:5793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16997 comm="syz.5.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98e4ac799 code=0x7ffc0000 [ 510.993763][T16998] netlink: 'syz.5.2937': attribute type 25 has an invalid length. [ 511.001699][T16998] netlink: 'syz.5.2937': attribute type 28 has an invalid length. [ 511.007641][ T28] audit: type=1326 audit(1774082022.681:5794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16997 comm="syz.5.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98e4ac799 code=0x7ffc0000 [ 511.057127][ T4263] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.112362][ T4263] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.130317][T17012] syzkaller0: entered promiscuous mode [ 511.136317][T17012] syzkaller0: entered allmulticast mode [ 511.175261][ T4263] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.257831][T17000] chnl_net:caif_netlink_parms(): no params data found [ 511.305683][T17027] loop1: detected capacity change from 0 to 128 [ 511.313092][T17027] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 511.328897][ T4263] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.355753][T17030] loop5: detected capacity change from 0 to 2048 [ 511.363130][T17027] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 511.414013][T14469] loop5: p3 < > p4 < > [ 511.418312][T14469] loop5: partition table partially beyond EOD, truncated [ 511.432669][T14469] loop5: p3 start 4284289 is beyond EOD, truncated [ 511.492215][T17000] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.500141][T17000] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.616507][T17000] bridge_slave_0: entered allmulticast mode [ 511.656548][T17000] bridge_slave_0: entered promiscuous mode [ 511.763571][T17000] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.824408][T17000] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.835027][T17040] loop1: detected capacity change from 0 to 1024 [ 511.884787][T17000] bridge_slave_1: entered allmulticast mode [ 511.894405][T17040] EXT4-fs: Ignoring removed nomblk_io_submit option [ 511.944710][T17000] bridge_slave_1: entered promiscuous mode [ 512.097488][ T4263] bridge_slave_0: left allmulticast mode [ 512.121724][ T4263] bridge_slave_0: left promiscuous mode [ 512.140617][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.232479][ T4263] bridge0 (unregistering): left promiscuous mode [ 512.301123][T17030] loop5: p3 < > p4 < > [ 512.312356][T17030] loop5: partition table partially beyond EOD, truncated [ 512.321293][T17062] FAULT_INJECTION: forcing a failure. [ 512.321293][T17062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.337577][T17030] loop5: p3 start 4284289 is beyond EOD, truncated [ 512.349454][T17062] CPU: 0 UID: 0 PID: 17062 Comm: syz.1.2950 Tainted: G W syzkaller #0 PREEMPT(full) [ 512.349511][T17062] Tainted: [W]=WARN [ 512.349517][T17062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 512.349529][T17062] Call Trace: [ 512.349536][T17062] [ 512.349544][T17062] __dump_stack+0x1d/0x30 [ 512.349572][T17062] dump_stack_lvl+0x95/0xd0 [ 512.349594][T17062] dump_stack+0x15/0x1b [ 512.349634][T17062] should_fail_ex+0x263/0x280 [ 512.349663][T17062] should_fail+0xb/0x20 [ 512.349693][T17062] should_fail_usercopy+0x1a/0x20 [ 512.349724][T17062] _copy_from_iter+0xcf/0xea0 [ 512.349750][T17062] ? __alloc_skb+0x4f6/0x690 [ 512.349889][T17062] ? __alloc_skb+0x200/0x690 [ 512.349957][T17062] netlink_sendmsg+0x4ae/0x6f0 [ 512.350042][T17062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.350070][T17062] ____sys_sendmsg+0x563/0x5b0 [ 512.350108][T17062] ___sys_sendmsg+0x195/0x1e0 [ 512.350199][T17062] __x64_sys_sendmsg+0xd4/0x160 [ 512.350290][T17062] x64_sys_call+0x194c/0x3020 [ 512.350321][T17062] do_syscall_64+0x12c/0x370 [ 512.350352][T17062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.350421][T17062] RIP: 0033:0x7f8149fbc799 [ 512.350492][T17062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.350513][T17062] RSP: 002b:00007f8148a17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 512.350558][T17062] RAX: ffffffffffffffda RBX: 00007f814a235fa0 RCX: 00007f8149fbc799 [ 512.350571][T17062] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 512.350583][T17062] RBP: 00007f8148a17090 R08: 0000000000000000 R09: 0000000000000000 [ 512.350598][T17062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.350611][T17062] R13: 00007f814a236038 R14: 00007f814a235fa0 R15: 00007ffdee4c7a08 [ 512.350629][T17062] [ 512.572989][T16174] udevd[16174]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 512.589959][T16174] udevd[16174]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 512.643283][T17066] loop1: detected capacity change from 0 to 128 [ 512.704253][T17066] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 512.720557][T17066] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 512.885726][ T4263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 512.895145][ T4263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.905023][ T4263] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 512.914323][ T4263] bond0 (unregistering): Released all slaves [ 512.922518][ T4263] bond1 (unregistering): Released all slaves [ 512.931367][ T4263] bond2 (unregistering): Released all slaves [ 512.939995][ T4263] bond3 (unregistering): Released all slaves [ 512.948898][ T4263] bond4 (unregistering): Released all slaves [ 512.957814][ T4263] bond5 (unregistering): Released all slaves [ 512.966980][ T4263] bond6 (unregistering): Released all slaves [ 512.975647][ T4263] bond7 (unregistering): Released all slaves [ 512.986479][ T4263] bond8 (unregistering): Released all slaves [ 512.995332][ T4263] bond9 (unregistering): Released all slaves [ 513.004835][ T4263] bond10 (unregistering): Released all slaves [ 513.014006][ T4263] bond11 (unregistering): Released all slaves [ 513.022639][ T4263] bond12 (unregistering): Released all slaves [ 513.059780][T17000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.102873][T17000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.119624][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 513.119640][ T28] audit: type=1400 audit(1774082024.871:5823): avc: denied { mount } for pid=17075 comm="syz.6.2955" name="/" dev="rpc_pipefs" ino=41027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 513.163107][T17000] team0: Port device team_slave_0 added [ 513.169025][ T4263] tipc: Left network mode [ 513.174581][T17000] team0: Port device team_slave_1 added [ 513.198712][T17000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.205816][T17000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.232150][T17000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.249533][T17000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.265339][T17000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.320580][T17000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.322758][ T3416] IPVS: starting estimator thread 0... [ 513.347452][ T28] audit: type=1400 audit(1774082025.101:5824): avc: denied { create } for pid=17086 comm="syz.1.2957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 513.413977][ T4263] hsr_slave_0: left promiscuous mode [ 513.420777][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.427999][T17096] IPVS: using max 1968 ests per chain, 98400 per kthread [ 513.435671][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.442798][T17100] loop5: detected capacity change from 0 to 2048 [ 513.464973][ T4263] pim6reg (unregistering): left allmulticast mode [ 513.503027][ T4263] team0 (unregistering): Port device team_slave_1 removed [ 513.520615][ T4263] team0 (unregistering): Port device team_slave_0 removed [ 513.546344][T16174] loop5: p3 < > p4 < > [ 513.550598][T16174] loop5: partition table partially beyond EOD, truncated [ 513.557774][T16174] loop5: p3 start 4284289 is beyond EOD, truncated [ 513.584252][T17100] loop5: p3 < > p4 < > [ 513.588498][T17100] loop5: partition table partially beyond EOD, truncated [ 513.595851][T17100] loop5: p3 start 4284289 is beyond EOD, truncated [ 513.623317][ T3000] loop5: p3 < > p4 < > [ 513.628948][ T3000] loop5: partition table partially beyond EOD, truncated [ 513.642461][ T3000] loop5: p3 start 4284289 is beyond EOD, truncated [ 513.664817][T17100] __nla_validate_parse: 15 callbacks suppressed [ 513.664830][T17100] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2960'. [ 513.759947][T17000] hsr_slave_0: entered promiscuous mode [ 513.792993][T16174] udevd[16174]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 513.803560][T17000] hsr_slave_1: entered promiscuous mode [ 513.817073][T17119] loop5: detected capacity change from 0 to 512 [ 513.948558][T17119] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2964: bg 0: block 4: invalid block bitmap [ 513.982926][T17119] loop5: lost filesystem error report for type 5 error -117 [ 513.983069][T17119] EXT4-fs (loop5): Remounting filesystem read-only [ 513.990416][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 513.990437][ C0] EXT4-fs (loop5): initial error at time 1774082025: ext4_validate_block_bitmap:432 [ 513.990461][ C0] EXT4-fs (loop5): last error at time 1774082025: ext4_validate_block_bitmap:432 [ 514.082978][T17132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2965'. [ 514.118387][T17119] EXT4-fs (loop5): 1 truncate cleaned up [ 514.136487][T17134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2965'. [ 514.180407][T17119] xt_ecn: cannot match TCP bits for non-tcp packets [ 514.510460][T17000] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 514.567922][T17000] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 514.614091][T17000] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 514.662207][T17000] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 514.862531][T17000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.897221][T17000] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.926948][T13104] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.934073][T13104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.971289][T17000] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 515.150191][T17000] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 515.707290][ T28] audit: type=1326 audit(1774082027.451:5825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17154 comm="syz.1.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8149fbc799 code=0x7ffc0000 [ 515.741782][T17156] loop5: detected capacity change from 0 to 512 [ 515.748623][T17156] EXT4-fs: Ignoring removed i_version option [ 515.754734][T17156] EXT4-fs: Ignoring removed bh option [ 515.760308][T17156] ext3: Unknown parameter 'uid>00000000000000000000' [ 515.804032][T13104] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.811173][T13104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.004937][T17155] netlink: 'syz.1.2968': attribute type 25 has an invalid length. [ 516.042737][ T28] audit: type=1326 audit(1774082027.451:5826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17154 comm="syz.1.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8149fbc799 code=0x7ffc0000 [ 516.073269][T17155] netlink: 'syz.1.2968': attribute type 28 has an invalid length. [ 516.199477][ T28] audit: type=1326 audit(1774082027.531:5827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17154 comm="syz.1.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8149fbc799 code=0x7ffc0000 [ 516.238146][T17168] loop6: detected capacity change from 0 to 1024 [ 516.273699][ T28] audit: type=1326 audit(1774082027.541:5828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17154 comm="syz.1.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8149fbc799 code=0x7ffc0000 [ 516.299014][ T28] audit: type=1326 audit(1774082027.541:5829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17154 comm="syz.1.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8149fbc799 code=0x7ffc0000 [ 516.322799][ T28] audit: type=1326 audit(1774082027.551:5830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17154 comm="syz.1.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8149fbc799 code=0x7ffc0000 [ 516.347368][ T28] audit: type=1326 audit(1774082027.551:5831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17154 comm="syz.1.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8149fbc799 code=0x7ffc0000 [ 516.378918][T17000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.386465][T17168] EXT4-fs mount: 6 callbacks suppressed [ 516.386482][T17168] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 516.429388][ T28] audit: type=1326 audit(1774082027.551:5832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17154 comm="syz.1.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8149fbc799 code=0x7ffc0000 [ 516.606739][T17000] veth0_vlan: entered promiscuous mode [ 516.633344][T17000] veth1_vlan: entered promiscuous mode [ 516.688336][T17000] veth0_macvtap: entered promiscuous mode [ 516.710472][T17000] veth1_macvtap: entered promiscuous mode [ 516.755425][T17000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.785047][T17000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.822308][ T4263] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.844110][ T4263] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.877944][ T4263] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.903937][ T4263] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.039792][T17207] loop3: detected capacity change from 0 to 512 [ 517.069453][T17207] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 517.109264][T17207] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 517.130555][T17207] EXT4-fs (loop3): 1 truncate cleaned up [ 517.137604][T16168] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 517.166643][T17207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.229621][T17223] netlink: 'syz.6.2971': attribute type 12 has an invalid length. [ 517.240653][T17221] loop1: detected capacity change from 0 to 2048 [ 517.257227][T17207] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm \%*: Logical block already allocated [ 517.262188][T17223] netlink: 'syz.6.2971': attribute type 29 has an invalid length. [ 517.278826][T17223] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2971'. [ 517.312973][T17236] loop6: detected capacity change from 0 to 736 [ 517.319634][T16174] loop1: p3 < > p4 < > [ 517.324010][T16174] loop1: partition table partially beyond EOD, truncated [ 517.339285][T16174] loop1: p3 start 4284289 is beyond EOD, truncated [ 517.355211][T17221] loop1: p3 < > p4 < > [ 517.365617][T17221] loop1: partition table partially beyond EOD, truncated [ 517.373865][T17221] loop1: p3 start 4284289 is beyond EOD, truncated [ 517.392349][T17221] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2973'. [ 517.418213][T17000] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.447893][T17241] loop3: detected capacity change from 0 to 512 [ 517.461777][T17241] EXT4-fs (loop3): 1 orphan inode deleted [ 517.504112][T17241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.537708][T17241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2977'. [ 517.580207][T17000] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.711434][T17252] loop3: detected capacity change from 0 to 512 [ 517.740045][T17252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.768898][T17252] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 517.845422][T17260] netlink: 'syz.6.2984': attribute type 25 has an invalid length. [ 517.853514][T17260] netlink: 'syz.6.2984': attribute type 28 has an invalid length. [ 517.891045][T17262] loop6: detected capacity change from 0 to 512 [ 517.914681][T17262] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 517.922790][T17262] EXT4-fs (loop6): orphan cleanup on readonly fs [ 517.931721][T17262] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.2985: corrupted inode contents [ 517.943845][T17262] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 517.946384][T17262] EXT4-fs (loop6): Remounting filesystem read-only [ 517.962255][T17262] EXT4-fs (loop6): 1 truncate cleaned up [ 517.963711][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 517.974378][ C1] EXT4-fs (loop6): initial error at time 1774082029: ext4_do_update_inode:5569: inode 16 [ 517.983024][T13104] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 517.984196][ C1] EXT4-fs (loop6): last error at time 1774082029: ext4_do_update_inode:5569: inode 16 [ 518.004579][T13104] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 518.015106][T13104] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 518.025871][T17262] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 518.053231][T16168] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.123382][T17272] loop6: detected capacity change from 0 to 2048 [ 518.165117][T17272] loop6: p3 < > p4 < > [ 518.169398][T17272] loop6: partition table partially beyond EOD, truncated [ 518.176938][T17272] loop6: p3 start 4284289 is beyond EOD, truncated [ 518.189123][T17272] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2988'. [ 518.221439][T17277] loop6: detected capacity change from 0 to 512 [ 518.232653][T17277] EXT4-fs (loop6): 1 orphan inode deleted [ 518.243088][T17277] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.257081][T17277] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2990'. [ 518.278655][T16168] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.379496][T17282] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 518.405133][ T28] kauditd_printk_skb: 96 callbacks suppressed [ 518.405147][ T28] audit: type=1400 audit(1774082030.161:5923): avc: denied { setopt } for pid=17283 comm="syz.6.2993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 518.462369][T17282] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 518.516140][T17282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2992'. [ 518.525948][T17000] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.539696][T17282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2992'. [ 518.654776][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 518.722871][ T28] audit: type=1400 audit(1774082030.471:5924): avc: denied { shutdown } for pid=17312 comm="syz.1.3001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 518.767897][T17314] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3001'. [ 518.777671][T17314] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3001'. [ 518.792691][T17292] cgroup: fork rejected by pids controller in /syz3 [ 518.905168][T17482] syzkaller0: entered promiscuous mode [ 518.910684][T17482] syzkaller0: entered allmulticast mode [ 519.001042][T17652] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3005'. [ 519.112299][T17806] netlink: 'syz.5.3009': attribute type 1 has an invalid length. [ 519.120241][T17806] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3009'. [ 519.250882][ T28] audit: type=1326 audit(1774082031.001:5925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17807 comm="syz.0.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2451cc799 code=0x7ffc0000 [ 519.282177][ T28] audit: type=1326 audit(1774082031.001:5926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17807 comm="syz.0.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2451cc799 code=0x7ffc0000 [ 519.307087][ T28] audit: type=1326 audit(1774082031.031:5927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17807 comm="syz.0.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fc2451cc799 code=0x7ffc0000 [ 519.339044][ T28] audit: type=1326 audit(1774082031.031:5928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17807 comm="syz.0.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2451cc799 code=0x7ffc0000 [ 519.373031][ T28] audit: type=1326 audit(1774082031.031:5929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17807 comm="syz.0.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2451cc799 code=0x7ffc0000 [ 519.402364][T17292] ================================================================== [ 519.410469][T17292] BUG: KCSAN: data-race in memcpy_and_pad / perf_remove_from_owner [ 519.418459][T17292] [ 519.420784][T17292] write to 0xffff888104c28a10 of 8 bytes by task 17291 on cpu 0: [ 519.428515][T17292] perf_remove_from_owner+0xe6/0x1f0 [ 519.433814][T17292] perf_event_release_kernel+0x6a/0x510 [ 519.439369][T17292] perf_release+0x1f/0x30 [ 519.443726][T17292] __fput+0x29b/0x650 [ 519.447758][T17292] ____fput+0x1c/0x30 [ 519.451746][T17292] task_work_run+0x130/0x1a0 [ 519.456349][T17292] exit_to_user_mode_loop+0x1f4/0x6f0 [ 519.461751][T17292] do_syscall_64+0x249/0x370 [ 519.466360][T17292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.472271][T17292] [ 519.474597][T17292] read to 0xffff888104c28000 of 3328 bytes by task 17292 on cpu 1: [ 519.482487][T17292] memcpy_and_pad+0x48/0x80 [ 519.487010][T17292] arch_dup_task_struct+0x2c/0x40 [ 519.492064][T17292] dup_task_struct+0x6e/0x950 [ 519.496792][T17292] copy_process+0x37e/0x20b0 [ 519.501404][T17292] create_io_thread+0x8f/0xc0 [ 519.506130][T17292] create_worker_cont+0x5f/0x380 [ 519.511093][T17292] task_work_run+0x130/0x1a0 [ 519.515755][T17292] get_signal+0xe0e/0xf60 [ 519.520114][T17292] arch_do_signal_or_restart+0x96/0x450 [ 519.525681][T17292] exit_to_user_mode_loop+0x6a/0x6f0 [ 519.530971][T17292] do_syscall_64+0x249/0x370 [ 519.535577][T17292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.541479][T17292] [ 519.543849][T17292] Reported by Kernel Concurrency Sanitizer on: [ 519.550006][T17292] CPU: 1 UID: 0 PID: 17292 Comm: syz.3.2996 Tainted: G W syzkaller #0 PREEMPT(full) [ 519.560946][T17292] Tainted: [W]=WARN [ 519.564754][T17292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 519.574914][T17292] ================================================================== [ 519.584374][ T28] audit: type=1326 audit(1774082031.031:5930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17807 comm="syz.0.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc2451cc799 code=0x7ffc0000 [ 519.620198][ T28] audit: type=1326 audit(1774082031.031:5931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17807 comm="syz.0.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2451cc799 code=0x7ffc0000 [ 519.644775][ T28] audit: type=1326 audit(1774082031.071:5932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17807 comm="syz.0.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc2451cc799 code=0x7ffc0000 [ 520.663737][ T9975] Bluetooth: hci0: command 0x1003 tx timeout [ 520.663790][ T5327] Bluetooth: hci0: Opcode 0x1003 failed: -110