last executing test programs: 10m25.86342745s ago: executing program 3 (id=4): r0 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = getpid() r2 = syz_clone3(&(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) kcmp(r2, r1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x108, 0x91, 0xf8, 0xff, 0x1a, @remote}, 0x10) wait4(r0, 0x0, 0x8, 0x0) ptrace$setregset(0x4205, r0, 0x2, &(0x7f0000000100)={&(0x7f0000000580)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282857f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f2dfbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0xfffffffffffffd68}) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0xc76, 0x0, 0x0, 0x0, 0x2000000020000003}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000008, 0x4010, r3, 0xebc42000) unshare(0x400) ptrace$setsig(0x4203, r0, 0x6, &(0x7f0000000040)={0xe, 0x4, 0x85}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x10001}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1007}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x75) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r4, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) socketpair(0x29, 0x2, 0x0, &(0x7f0000000380)) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000600)={r5, 0xffffffffffffffff, 0x2008, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) pivot_root(&(0x7f00000003c0)='./bus\x00', &(0x7f00000000c0)='./file0\x00') 10m25.555888239s ago: executing program 3 (id=17): r0 = socket$inet6(0xa, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}]) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x64, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 10m23.606295398s ago: executing program 3 (id=33): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000c30000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) fgetxattr(0xffffffffffffffff, &(0x7f0000001040)=@known='system.sockprotoname\x00', 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000240)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xe, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1027, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4458}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x6}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @ldst={0x2, 0x2, 0x3, 0xe, 0x8, 0x2, 0x10}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x6, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)=[{0x2, 0x5, 0xf, 0x9}], 0x10, 0x3}, 0x94) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000500), &(0x7f0000000540)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeba, 0x0, 0x0, 0x6, 0x0, 0x2}, 0x69) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r5, &(0x7f00000003c0)="a6bea8a120e5f8320c30ce5086dda5e986f34c10", 0x14, 0x4040040, &(0x7f0000000140)={0x11, 0x1c, r8, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x100, 0x70bd28, 0x25dfdbfd, {0x60, 0x0, 0x0, r1, {0x5, 0xffe0}, {0xc, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xf}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x25a4, 0x24000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000000101040000000000000000020000000800154000000064240001801400018008000100e000000108000200e00000010c0002800500010000000000080008"], 0x50}}, 0x40c0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000200)={r9, &(0x7f0000000100)='macvlan\x00', 0x101000, &(0x7f0000000140)={@_ha_fsid={[0xd637, 0x9]}, {0xfff0, 0x10, 0x0, 0x5}}, 0x7, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x3}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xba01, 0x0, 0x4000000}, 0x0) 10m23.53070649s ago: executing program 32 (id=33): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000c30000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) fgetxattr(0xffffffffffffffff, &(0x7f0000001040)=@known='system.sockprotoname\x00', 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000240)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xe, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1027, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4458}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x6}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @ldst={0x2, 0x2, 0x3, 0xe, 0x8, 0x2, 0x10}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x6, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)=[{0x2, 0x5, 0xf, 0x9}], 0x10, 0x3}, 0x94) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000500), &(0x7f0000000540)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeba, 0x0, 0x0, 0x6, 0x0, 0x2}, 0x69) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r5, &(0x7f00000003c0)="a6bea8a120e5f8320c30ce5086dda5e986f34c10", 0x14, 0x4040040, &(0x7f0000000140)={0x11, 0x1c, r8, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x100, 0x70bd28, 0x25dfdbfd, {0x60, 0x0, 0x0, r1, {0x5, 0xffe0}, {0xc, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xf}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x25a4, 0x24000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000000101040000000000000000020000000800154000000064240001801400018008000100e000000108000200e00000010c0002800500010000000000080008"], 0x50}}, 0x40c0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000200)={r9, &(0x7f0000000100)='macvlan\x00', 0x101000, &(0x7f0000000140)={@_ha_fsid={[0xd637, 0x9]}, {0xfff0, 0x10, 0x0, 0x5}}, 0x7, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x3}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xba01, 0x0, 0x4000000}, 0x0) 10m21.658570917s ago: executing program 4 (id=46): fcntl$notify(0xffffffffffffffff, 0x402, 0x26) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000a00)="$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") r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x3250c0, 0x0) ioctl$FITRIM(r1, 0x40e8662e, &(0x7f0000000080)={0xae, 0xd000007}) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'veth1_to_team\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0x4, "050000009582"}}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r4, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e00030000000300"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) setitimer(0x2, 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x1c, r7, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x1c}}, 0x20000034) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f687372000000"], 0xe8}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) 10m20.759687065s ago: executing program 4 (id=51): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009f43c2ea422a10bd00850800"], 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x9, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000009800000001"], 0x50) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0x20, 0x1, 0x1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000340)}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x9, 0x5, 0x7, 0xc1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r2}, 0x38) (async, rerun: 64) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x1, r2}, 0x38) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) fcntl$getownex(r3, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$setsig(0x4203, r5, 0x80000000, &(0x7f0000000100)={0x3c, 0x9, 0x8}) (async) syz_clone(0x81200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1001000, 0x0, 0x0, &(0x7f0000001000), 0x0, 0x0) 10m20.568561861s ago: executing program 4 (id=52): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x2c180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x7, &(0x7f00000000c0)=[{0x1, 0x1, 0x5, 0x6}, {0x10, 0x7f, 0x7, 0x7}, {0xffff, 0xb, 0x10, 0xcf1d}, {0x8000, 0x2, 0x3, 0x1d1b3f81}, {0x8, 0xc, 0xd6}, {0x4, 0x2, 0x3, 0x8}, {0x4, 0x7, 0xff, 0xfff}]}) rt_tgsigqueueinfo(0x0, 0x0, 0x10, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="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", 0x360}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) accept4(r0, &(0x7f00000002c0)=@in={0x2, 0x0, @broadcast}, &(0x7f00000003c0)=0x80, 0x80000) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001d14d9"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f4305", 0x0, 0x6f12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x66b8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000480)={r2, r3}, 0xc) 10m20.327409258s ago: executing program 4 (id=55): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.events\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a141, 0x59) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a141, 0x59) pwrite64(r1, &(0x7f0000000140)="f6", 0x1, 0x7fff) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) r2 = timerfd_create(0x5, 0xc0000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) getpriority(0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r2, 0x8002f515, &(0x7f0000000100)) (async) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r2, 0x8002f515, &(0x7f0000000100)) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) rename(0x0, 0x0) (async) rename(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) splice(r7, 0x0, r9, 0x0, 0xf3a, 0x0) tee(r4, r9, 0x8f5, 0x100000000000000) (async) tee(r4, r9, 0x8f5, 0x100000000000000) ioctl$sock_inet_sctp_SIOCINQ(r9, 0x541b, 0x0) write(r6, 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x8da6) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x10) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x10) ioctl$RFKILL_IOC_MAX_SIZE(r8, 0x2, &(0x7f0000000000)=0x2) (async) ioctl$RFKILL_IOC_MAX_SIZE(r8, 0x2, &(0x7f0000000000)=0x2) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x0, 0x0, 0x7f}) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x4}) (async) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x4}) 10m19.983886118s ago: executing program 4 (id=57): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r0, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 10m19.687639957s ago: executing program 4 (id=59): socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={0x0, &(0x7f0000000540)=""/246, 0x0, 0xf6, 0x1}, 0x28) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{}, &(0x7f0000000180), &(0x7f0000000280)='%+9llu \x00'}, 0x20) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @private, @dev}, 0x0) mknod(0x0, 0x8001420, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c004}, 0x20000014) r1 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001840), 0x0, &(0x7f00000018c0)=""/146, 0x92}, 0x40000042) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000005c0), 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000380)=[0x0], &(0x7f0000000480)=[0x0], 0x0, 0x82, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000680), 0x8, 0xd, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)={@fallback, 0xffffffffffffffff, 0x33}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000440)=0x30) 10m19.633530639s ago: executing program 33 (id=59): socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={0x0, &(0x7f0000000540)=""/246, 0x0, 0xf6, 0x1}, 0x28) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{}, &(0x7f0000000180), &(0x7f0000000280)='%+9llu \x00'}, 0x20) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @private, @dev}, 0x0) mknod(0x0, 0x8001420, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c004}, 0x20000014) r1 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001840), 0x0, &(0x7f00000018c0)=""/146, 0x92}, 0x40000042) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000005c0), 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000380)=[0x0], &(0x7f0000000480)=[0x0], 0x0, 0x82, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000680), 0x8, 0xd, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)={@fallback, 0xffffffffffffffff, 0x33}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000440)=0x30) 9m42.987603985s ago: executing program 5 (id=291): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000)) (fail_nth: 5) 9m42.623312927s ago: executing program 5 (id=295): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32], 0x0, 0x3}, 0x94) r1 = socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="24000000660091ef"], 0xfe33) 9m42.539857529s ago: executing program 5 (id=296): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x20, 0x0, 0x0) 9m42.539014449s ago: executing program 5 (id=298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000002c0)=""/168) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r2 = open_tree(r1, &(0x7f0000000300)='./cgroup\x00', 0x89801) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x2}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20045090}, 0x200000d4) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) unshare(0x22020400) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) poll(&(0x7f00000003c0)=[{r5, 0xd091}], 0x1, 0xfffffffc) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x140000, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@usrjquota}, {@resuid}, {@jqfmt_vfsv1}, {@nogrpid}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x48f, &(0x7f00000013c0)="$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") r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x89101) move_mount(r2, 0x0, r6, 0x0, 0x46) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') preadv(r7, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) 9m41.842572471s ago: executing program 5 (id=303): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x22) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x1b, 0x0, 0x1, 0xf9, 0x6, @remote}, 0x14) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket(0x10, 0x3, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4ea0, @empty}, 0x10) syz_emit_ethernet(0x102b, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xffffffff00000001}, 0x108850, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x34, r4, 0x905, 0x0, 0x0, {0x24}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0xa00}, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 9m40.627809307s ago: executing program 5 (id=310): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) 9m40.569382569s ago: executing program 34 (id=310): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) 8m8.379948847s ago: executing program 1 (id=1017): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000006c00010026bd7000fbdbdf250000feff", @ANYRES32=0x0, @ANYBLOB="00000400088004001400030064756d6d79300000000000000000000018003480140035"], 0x4c}, 0x1, 0x0, 0x0, 0x6}, 0x0) 8m8.379353727s ago: executing program 1 (id=1019): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0xffffffffffffffff, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setpgid(0x0, 0x0) (fail_nth: 3) 8m8.235077211s ago: executing program 1 (id=1024): r0 = socket(0xa, 0x5, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x10, 0x1411, 0x701, 0x70bd2b, 0x25dfdbfd}, 0x10}}, 0x84) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x34, 0x2c, 0x1, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x1, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20045091}, 0x0) 8m8.203056632s ago: executing program 1 (id=1025): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x121c, &(0x7f0000008440)="$eJzs201rXFUYB/AnL30xNZlRa7WC9KAb3VyaLNwoSJAUpANK2witINyaGx1ynQm5Q2BETF259Su4FZfuBHGnm2z8DO6ycZmFeKUzaZ2UREhpOtH+fpt5mHP/3OfMmRk4w5ydt775bG21ylbzXkxOvB2T6xFpN0WKybjnTrz+5i+/vnz95q2ri63W0rWUrizemH8jpTR36acPv/j+lZ975z74Ye7HM7Hd/Gjnj4Xfty9sX9z568an7Sq1q9Tp9lKebne7vfx2WaSVdrWWpfR+WeRVkdqdqtjYN75adtfX+ynvrMzOrG8UVZXyTj+tFf3U66beRj/ln+TtTsqyLM3OBCOmjhpY/m63rutm1PWpOB11XddPxUyci6djNuaiEc14Jp6N5+J8PB8X4oV4MS4Orjqe9gEAAAAAAAAAAAAAAAAAAOBJtTs4zf+Q5/8vjbl5AAAAAAAAAAAAAAAAAAAA+J+4fvPW1cVWa+laSmcjyq83lzeXh4/D8cXVaEcZRVyORvwZg9P/Q8P6yrutpctpoBlflVt7+a3N5an9+flGRPPg/Pwwn/bnz8TMaH4hGnH+fn5ir/1BfuHA/Nl47dWRfBaN+O3j6EYZK3eDI/f/cj6ld95rjeSnxrcgAAAAcAyydN+B+/csO2x8mD/C7wMP7M+n46Xp8c6diKr/+VpelsXGA8XdpTlk6JiKex0Nn9mKiMd59/9scXrvZXuo+KmTMotHWUzteyONv5+TXXw7fcgHbTzfRzxe/yz6uDsBAAAAAAAAAADgKB7Rvwgn7vzLNeOeIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDf7MCxAAAAAIAwf+s0OjYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvgoAAP//zsu+ig==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x26) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto="9843cabf11e09c34"}}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x3, 0x1, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) tkill(r4, 0x7) wait4(r4, 0x0, 0x0, 0x0) r5 = getpgid(0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x74, 0x0, 0x0, 0x8508}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_NET_NS_PID={0x8, 0x13, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048801}, 0x20008000) mount$9p_rdma(&(0x7f0000000200), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f00000001c0)={'trans=rdma,', {'port', 0x3d, 0x4e25}}) socket(0x2, 0x80805, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r6 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000080)) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x8100, r8, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newtfilter={0x89c, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x600, r8, {0xf, 0x1}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x870, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x9, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_POLICE={0x848, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x1c79, 0x3, 0x2, 0x7, 0xff, 0x8, 0x1, 0x1, 0x2d0, 0x2, 0x1, 0xb, 0x6, 0x0, 0x2, 0x2, 0x9, 0x7, 0x0, 0xffffffff, 0x6, 0x1, 0x5, 0xc4, 0xa117, 0x8, 0xab, 0xfffffffa, 0x1, 0x0, 0x4, 0x1fc0000, 0x4, 0x203, 0x80, 0x4, 0x1, 0x0, 0x4, 0x7, 0x2, 0x1, 0x610, 0x2, 0xb, 0xfb, 0x4, 0xa29, 0x80, 0x82, 0x200, 0x44, 0x2, 0x1, 0x2, 0x101, 0x30720d00, 0xdd, 0x5, 0x8, 0x431d3ae0, 0xc03, 0x9, 0x5, 0x9349, 0x6, 0x100, 0x5, 0x1, 0x1, 0x8, 0x401, 0x3, 0x4, 0x5, 0x6, 0x19e, 0x2, 0x2, 0xf, 0xbffffc, 0x6, 0x7, 0x3326ea0a, 0x8007, 0x80000001, 0x25, 0x1, 0x8, 0x8001, 0x9, 0x6, 0x54773818, 0x8, 0x8001, 0x6, 0x7f, 0xffffffff, 0x4, 0x4, 0x80, 0xc000000, 0x7ff, 0x6138, 0x49e, 0x3ff, 0x8, 0x0, 0x3, 0x0, 0x2, 0x10000, 0x3, 0x2, 0x9, 0x1, 0x9, 0x101, 0x3, 0xc42, 0x4, 0x7, 0x401, 0x5, 0x0, 0x4, 0x80000001, 0xe000, 0x5, 0x2fb, 0x5907, 0x8, 0x81, 0x7, 0x4, 0xffff7ffc, 0xffff0001, 0x2, 0xffff, 0x8, 0x2396, 0x8000, 0xfffffffc, 0x5, 0x1, 0xfff, 0x91e0000, 0x4, 0x3, 0xfae, 0x40, 0x900, 0x6, 0x0, 0x2, 0x6, 0x1, 0xdc, 0x9, 0x7ff, 0xfffffff7, 0x4, 0x2, 0x30, 0xff, 0x3, 0x80, 0x6, 0x7, 0x9, 0x4, 0x0, 0x5, 0x4342, 0xfa52, 0x4, 0x7fff, 0x7, 0x381, 0xfffffff2, 0xfffffff6, 0x100, 0x8, 0xf73, 0x80000001, 0x0, 0x5, 0xe, 0x0, 0x3, 0xfffffc01, 0x2, 0xe, 0x4, 0x4, 0xf5f, 0x2, 0x0, 0x6, 0x1, 0x9, 0x80, 0x2, 0x0, 0x0, 0xfb, 0x3, 0x9, 0x0, 0x80000001, 0x5, 0x0, 0xb, 0x3159, 0x1000006, 0xfffffff7, 0xe4f7, 0x6, 0xffffffff, 0xfffffffc, 0x8, 0x9, 0x6, 0xa098, 0x0, 0x0, 0x6, 0xb, 0x6, 0x2, 0x80000001, 0x9, 0xfffffed0, 0x2, 0x7, 0x56, 0x2, 0x4, 0x7, 0x2009, 0xb, 0x6, 0x4, 0x1, 0x5, 0x7, 0x9, 0x2007, 0xe, 0x0, 0x1, 0x9, 0x1, 0x0, 0x40, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x8, 0xffffffff, 0xffff0d7b, 0x6, 0x3, 0xc79, 0x74100000, 0x800, 0xc, 0xfffffffd, 0x76e8, 0x4, 0x0, 0x9, 0xb046, 0x7, 0x101, 0x8, 0x0, 0x6, 0x3ff, 0xfffffffe, 0x0, 0x7f, 0x3, 0x7c68081b, 0x4, 0x9, 0x3, 0x80000001, 0x0, 0xa, 0x7, 0x2, 0x4, 0x62f1, 0x2, 0x995, 0x1, 0xf, 0xb, 0x7f, 0x9, 0x7, 0x4, 0x6, 0xc39, 0x6, 0x7, 0x2, 0x5, 0x7, 0x3ff, 0x3, 0x93, 0x5, 0x2, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x200, 0x9, 0xffffffff, 0x4, 0x9, 0xa2c, 0xda0b, 0x7, 0x40, 0x9, 0xefa8, 0x1, 0x9, 0x0, 0xe, 0x2, 0x4, 0x6, 0xfffffff9, 0x40000004, 0x8, 0x4, 0x0, 0xea, 0xbed1, 0x18, 0x8, 0x7fff, 0x3, 0x4, 0x0, 0x9, 0x5dac, 0x21ef, 0x1, 0x8, 0x9, 0x2, 0x2000, 0xfc000003, 0xfffffff9, 0x3, 0x4, 0x0, 0x0, 0x4, 0xfffffffc, 0xfffffff9, 0x5, 0x3, 0xe2000, 0x6, 0x8001, 0xa, 0x6, 0x5, 0x0, 0xef83, 0x8, 0x4, 0x3ff, 0x0, 0x5, 0x10000, 0xf6, 0x7, 0x3, 0x3ff, 0x5, 0xaf7e, 0x5, 0x7ff, 0xeab9, 0x3, 0x8, 0x525, 0x9, 0x0, 0x3, 0x401, 0x9, 0x6, 0x8, 0x1, 0x8, 0x7, 0xfffffffb, 0x7, 0x80000001, 0xfffffffd, 0x4, 0x8fb3, 0x7fffffff, 0xfffffff9, 0x800, 0x2, 0x7fff, 0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x82, 0xff, 0x6, 0x3, 0x46, 0x1, 0x958, 0x3, 0x80000001, 0x7, 0x9, 0x5, 0xfffffffa, 0x0, 0x5, 0x4d4, 0x9, 0x8, 0x75968511, 0x0, 0x46cc, 0x8, 0x6, 0x3c, 0x9, 0x8, 0x4, 0x7054, 0x3, 0x3, 0x1, 0x70, 0x9, 0x9, 0x9, 0x400, 0x3dc1, 0x0, 0xe6a2, 0x8, 0x6, 0x8, 0x6, 0x80000001, 0xff, 0x2, 0x6, 0x80000000, 0x0, 0xd42700, 0x8001, 0x8, 0x8000, 0x9, 0x4, 0x6302, 0x1eeacb39, 0xe, 0x2, 0x5, 0xd9a, 0x9, 0x0, 0x8, 0x3, 0x2, 0x0, 0x100, 0x3ff, 0x5, 0x3ff, 0x40, 0x7ffffffe, 0xff, 0x2, 0x6, 0x1000, 0x37, 0x81, 0x7fffffff, 0x9, 0x5ca, 0x5, 0x7, 0x2, 0x3, 0x6, 0x81, 0x10000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x7f, 0x4, 0x9, {0x3, 0x1, 0x4, 0x7f, 0x8, 0x1ff}, {0x6, 0x0, 0xff, 0x7, 0x5, 0xffffffff}, 0x9, 0xe90, 0x6db5cd0}}]}]}}]}, 0x89c}, 0x1, 0x0, 0x0, 0x1}, 0x2404c084) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x7, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000000000050000008111a8000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r9, 0x0) 8m7.991865709s ago: executing program 1 (id=1027): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 8m7.553644543s ago: executing program 1 (id=1029): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000300000ff0000000000000000940001000800000095"], &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000a40000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590) 8m7.528746223s ago: executing program 35 (id=1029): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000300000ff0000000000000000940001000800000095"], &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000a40000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590) 1m33.206571006s ago: executing program 2 (id=4120): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x29, 0x61, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) request_key(&(0x7f0000000000)='.request_key_auth\x00', 0x0, 0x0, 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@generic={0x66, 0x8, 0x0, 0xfffd}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xea, &(0x7f0000000100)=""/234, 0x0, 0x8}, 0x94) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) write$nci(r2, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x5c}}, 0x0) 1m29.850646628s ago: executing program 2 (id=4133): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=0x0) prlimit64(r2, 0x6, &(0x7f00000000c0)={0xfffffffffffffffa, 0xd}, &(0x7f0000000040)) futex(&(0x7f000000cffc)=0x1, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x1) 1m28.381798992s ago: executing program 2 (id=4140): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x101c91c, &(0x7f0000000400)={[{@inode_readahead_blks}, {@noblock_validity}, {@resgid}, {@inlinecrypt}, {@errors_remount}, {@noblock_validity}, {@usrjquota}, {@nodelalloc}, {@resgid, 0x32}]}, 0x1d, 0x4e8, &(0x7f0000000540)="$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") r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r3, r3, 0x0, 0x80000000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) recvmmsg$unix(r2, &(0x7f0000006900)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000001080)=[{&(0x7f00000002c0)=""/168, 0xa8}, {&(0x7f0000000a40)=""/173, 0xad}, {&(0x7f0000000b80)=""/168, 0xa8}, {&(0x7f0000000c40)=""/68, 0x44}, {&(0x7f0000000d80)=""/240, 0xf0}, {&(0x7f0000000f80)=""/227, 0xe3}], 0x6}}, {{&(0x7f0000001180), 0x6e, &(0x7f0000001680)=[{0x0}, {&(0x7f0000001440)=""/197, 0xc5}, {&(0x7f0000001540)=""/219, 0xdb}], 0x3}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001740)=""/253, 0xfd}, {0x0}, {0x0}, {&(0x7f0000003440)=""/177, 0xb1}], 0x4}}, {{&(0x7f0000003640), 0x6e, &(0x7f0000003d40)=[{&(0x7f00000036c0)=""/141, 0x8d}, {&(0x7f0000003780)=""/173, 0xad}, {&(0x7f0000003840)=""/193, 0xc1}, {0x0}, {&(0x7f0000003980)=""/201, 0xc9}, {&(0x7f0000003a80)=""/199, 0xc7}, {&(0x7f0000003b80)=""/131, 0x83}, {&(0x7f0000003c80)=""/137, 0x89}], 0x8}}, {{&(0x7f0000003e00)=@abs, 0x6e, &(0x7f00000051c0)=[{&(0x7f0000003e80)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/210, 0xd2}, {&(0x7f0000004f80)=""/250, 0xfa}, {&(0x7f0000005080)=""/193, 0xc1}, {&(0x7f0000005180)=""/51, 0x33}], 0x5}}, {{&(0x7f0000005280), 0x6e, &(0x7f0000006780)=[{0x0}, {0x0}, {&(0x7f0000005440)=""/4096, 0x1000}, {&(0x7f0000006440)=""/95, 0x5f}, {&(0x7f00000064c0)=""/79, 0x4f}, {&(0x7f0000006540)=""/77, 0x4d}, {&(0x7f0000006600)=""/125, 0x7d}, {&(0x7f0000006680)}, {&(0x7f00000066c0)=""/134, 0x86}], 0x9, &(0x7f0000006840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}], 0x60}}], 0x6, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000003c0)={0x8, 0x5, 0x8000, 0x6, 0x800, 0x1, 0xfffffffe, 0x1, 0x0}, &(0x7f0000000b00)=0x20) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000002300)={r7, 0x1000, "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"}, &(0x7f0000003340)=0x1008) sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x1000803c, 0x0, 0x0) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 1m24.418829012s ago: executing program 2 (id=4147): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) timerfd_create(0x3, 0x80800) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x104108, 0x0, 0x0, 0x7, 0x100002, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) process_vm_writev(0x0, &(0x7f0000005200)=[{&(0x7f00000004c0)=""/204, 0xcc}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/63, 0x3f}, {&(0x7f0000003e40)=""/144, 0x90}, {&(0x7f0000003f00)=""/200, 0xc8}, {&(0x7f0000004000)=""/47, 0x2f}, {&(0x7f0000004040)=""/230, 0xe6}, {&(0x7f0000004140)=""/64, 0x40}, {&(0x7f0000004180)=""/113, 0x71}, {&(0x7f0000004200)=""/4096, 0x1000}], 0xa, &(0x7f0000121000)=[{&(0x7f0000000340)=""/231, 0xe7}], 0x1, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000000}, 0x1c) connect$inet6(r3, &(0x7f0000001dc0)={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x44}, 0x7ff}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x127) write$binfmt_script(r4, &(0x7f00000005c0)={'#! ', '', [{0x20, 'D\xa9\x940\x8f+Y6ontrollers\x00'}, {0x20, 'ext4\x00\x1d\x9d\x81%:\xea\xe4\x9bu69\x8bK\xd8\xe7\xaf\x00iNg\xce3\xdc\x7f\xaf\x05\xacI\xff\x84o\xc0\xa8\xe0\x11d\x0fu\xab\x11\x98\xad\xca\v\xe3^y\x04\x87\x88ij\xe4{%\xa3EMH\f\xb4\x14\x1c\xa2\rX\xa8\x11&\x0fK0\xdb\xca\x892\x1f\x96 \x96`\xf3\xe6\xca\xb4Y\xf6\x02m,\xccN\x00\xc3'}, {0x20, '/dev/loop'}, {0x20, '{'}, {}, {}]}, 0x8a) ioctl$FITHAW(r5, 0xc0045878) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fffffff3180100006400000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c800000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800e4cf02000000000000000a0002000000000008000500", @ANYRES32=r2, @ANYBLOB="14000600fe8000000000000000000000000000aa0600070001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x882}, 0x20000800) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4bc, &(0x7f00000007c0)="$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") chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0xd0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) open(&(0x7f00000001c0)='./bus/file0\x00', 0x8000, 0x25) 1m24.207936499s ago: executing program 2 (id=4148): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000480)={{0xffffffffffffffff, &(0x7f0000000000)='/\x00', 0x212800, &(0x7f0000000040)={@align=0xfff, {0x8, 0x8975, 0xffffffc0, 0x80000001}}, 0x81, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000400)=0x80}, {[0x2, 0x1, 0x10000, 0x7ff]}, 0x3, 0x24, &(0x7f0000000440)=""/36}) syz_open_dev$loop(&(0x7f0000000140), 0x7, 0x4080) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1fa, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x125926bd, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000000)='./file1\x00', 0x101000c, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfd, 0x64e, &(0x7f0000019200)="$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") r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket(0x10, 0x3, 0x4) r7 = eventfd2(0x0, 0x0) io_pgetevents(0x0, 0x9, 0x4e, &(0x7f0000000040), 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1fd, r7, 0x0, 0x0, 0x40, 0x0, 0x1, r7}]) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x70, 0x14, 0xf0b, 0x70bd29, 0x3, {0x2, 0x0, 0x0, 0x0, {0xe, 0x9}, {0x4}, {0x7, 0xd}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x44, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x9}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8b}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0xfffffffa}, @TCA_HHF_RESET_TIMEOUT={0x8}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x40}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xc56}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x9000}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x642}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x408c1}, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x403e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0x26}], 0x1}, 0x0) r8 = fsmount(r2, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095000000000000002f81c461b3fea834ceb0e17d9838c2830ca7ce46e581a192326a3698c79205e02f1561b0a3c595448e9f7024b45fb2006c9917fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd8"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000680)={0x0, 0x9, [0x4, 0x96d, 0x8, 0xffffffff00000001, 0x5a6, 0x2a]}) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200102}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="080227bd7000fbdbdf2572000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x20000880) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1e0411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffe, 0x0, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x3, 0x80, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m23.391878303s ago: executing program 2 (id=4153): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2e, 0xff, 0x0, 0x0, 0x0, 0x9, 0xf50b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x7, 0x100}, 0x10204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x7, 0x0, 0x200b}, 0x0, 0x24000000000, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x4862, 0x1000, 0x22da, 0x8, 0x9, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 1m23.391643133s ago: executing program 36 (id=4153): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2e, 0xff, 0x0, 0x0, 0x0, 0x9, 0xf50b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x7, 0x100}, 0x10204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x7, 0x0, 0x200b}, 0x0, 0x24000000000, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x4862, 0x1000, 0x22da, 0x8, 0x9, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 6.62733509s ago: executing program 7 (id=4612): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575", 0xe}, {&(0x7f0000000100)="11000000", 0x4}, {&(0x7f0000000a00)="68d711", 0x3}], 0x3) 6.531510193s ago: executing program 7 (id=4616): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08004500005800000000002f907800000000000000002480655800000000"], 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000002c80)=@gcm_128={{0x304}, '\x00', "362574ad5924c0c5aedd72261081b10f", "0700d871", "d97ab19fbd9a8e17"}, 0x28) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000ff000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007c000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) 4.96623233s ago: executing program 8 (id=4636): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getpgrp(0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1019, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r5}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000214"], 0x54}, 0x1, 0x0, 0x0, 0x4011}, 0x20000000) 4.534642293s ago: executing program 6 (id=4638): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d1bf91b4d090955f70e06d038e7ff7fc6e5539b0d3f0e8b089b3f390768090890e0878f0e1ac6e7049b3346959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0xf8d}}, 0x96d) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$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") socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) 3.994827409s ago: executing program 6 (id=4639): r0 = socket(0x2a, 0x2, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x100, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3a42806, &(0x7f00000000c0)={[{@errors_remount}, {@dax_always}, {@min_batch_time={'min_batch_time', 0x3d, 0xc0000}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@bsdgroups}, {@noblock_validity}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0xfffffffffffffffa}}], [{@pcr={'pcr', 0x3d, 0x6}}, {@seclabel}, {@uid_lt}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}, 0xfd, 0x57e, &(0x7f0000001240)="$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") ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) syz_open_dev$tty1(0xc, 0x4, 0x4) perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x3000c894) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x8, 0x1ff, 0xfffbfffd, 0x7, 0x0, "0c41920887e8d2b791f805000000000000006b", 0x4e1, 0x8001}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x7, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 3.99346212s ago: executing program 0 (id=4640): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)=0xb) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3607e723, 0x3, @perf_config_ext={0xfffffffffffffffa, 0xf375}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000080)) socket$kcm(0x2b, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffc732, 0x0, 0x0, 0x0, 0x9}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000180)='GPL\x00', 0x9, 0xbe, &(0x7f00000001c0)=""/190, 0x41100, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x8, 0x38, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380), 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x37, 0x0, @val=@netkit={@void, @value=r4}}, 0x1c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000440)='(\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup, 0xffffffffffffffff, 0x3a, 0x28, 0x0, @void, @void, @void, @value=r5}, 0x20) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r3, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0], 0x0, 0x79, &(0x7f0000000600)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$xdp(0x2c, 0x3, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000002380), r10) sendmsg$NFC_CMD_ENABLE_SE(r10, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010029bd7000ffdbdf25110000000800150000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0x2, 0x4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r8, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x8, 0x0, 0x0, 0x35, 0x0, 0x0, 0x4}, 0x50) 3.848425344s ago: executing program 9 (id=4641): socket(0x3, 0x5, 0xffffffdc) unshare(0x22020400) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a04f1a, &(0x7f00000000c0), 0x82, 0x4a8, &(0x7f0000001c40)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[], 0xfdef) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000200eab556a705251e618294ff0051f60a", 0x43}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000810502000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="16d0050000000000140012800b0001006c6f7770616e0000040002800a000100aaaaaaaaaa1e0000d20c86b662ee32db89df217816e3739a633a5a7d08d67a05a7eb40deedf1163981de6444d83f5aae54effd2219"], 0x40}, 0x1, 0x0, 0x0, 0x20004003}, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f7ffff50068d4c8d5ed5f6ff3d2793b6e287fd251687c217"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="0580c20000000180c200000008004510005c00000000002f90780000000000000000248065580000000010"], 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r5, 0x70, &(0x7f0000000100)}, 0x1c) pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000005c0)='fd', 0x0, r6) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10008, 0x209a, 0x5, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x4, &(0x7f0000000300)=ANY=[@ANYRES64], 0x0, 0x20000, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r9, &(0x7f0000000040)}, 0x20) fchdir(r8) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2.933615592s ago: executing program 8 (id=4642): socket$kcm(0xa, 0x1, 0x106) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="54a4df67", 0x4}], 0x1}, 0x891) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0xcd, "06514320f5f49869b9aba0dd24bcdd7e4f84951f001c5bdac26eb8a7f131e7c95649b361e84605198a1d71e1ad260c330f27177b15135ed6beb75aae837f6d18f91c0a20ee50dc6282bb35eefa297ff6d76e3156a5b804026f1dbbc6e8b2457cd772ad7ad80e3289e8f583e0355568d4be734f078ad410396ed52bb1de94745d4865ebb4e158bb85f44a4bc3cdaf1812d27540a2bb05152e541cfef90f24d81864f4dd0709aee0066de6fffd391df1aa124293146864e5a156e114a4b72aac7b9d1555142e5a8a7b19384df464"}, &(0x7f0000000280)=0xf1) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x23, 0x0, 0x1) r1 = socket$phonet(0x23, 0x2, 0x1) recvmmsg(r1, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0xcd03, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x11efa, 0x4, 0xfffd, 0x0, 0x2, 0xf7fff273, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) capset(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000080)={0x2, 0x10000, 0x0, 0x94, 0x92, "3567c267a0000000f4ffffff00005b18d8e800", 0x81, 0x82}) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0xf0, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@mcast2, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2e, 0x3504, 0xa, 0x1, 0xfd, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@loopback, @in=@multicast1, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xfffffffffffffffe, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0x40800) 2.932969312s ago: executing program 0 (id=4643): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value=0x18000000}, 0x48) 2.861449024s ago: executing program 9 (id=4644): syz_ublk_setup_io_uring(0x1c6e, &(0x7f0000000000)={0x0, 0xa98c, 0x10, 0x0, 0x22c}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x1, 0x8010800000000084) socket$inet_tcp(0x2, 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) listen(r0, 0x0) socket$unix(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) 2.859462154s ago: executing program 6 (id=4645): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0x11, &(0x7f00000001c0)={@random="659b3dfadf01", @random="2179e7392765", @void, {@llc={0x4, {@llc={0x0, 0x0, "af"}}}}}, 0x0) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd}, 0x10}, 0x1, 0x7}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000010c0)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYRESOCT, @ANYRES16=r1], 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001b40)=@mangle={'mangle\x00', 0x10, 0x6, 0xf40, 0xc40, 0xb28, 0xb28, 0xd80, 0x0, 0xe70, 0xe70, 0xe70, 0xe70, 0xe70, 0x6, 0x0, {[{{@uncond, 0x0, 0x8b8, 0x8e0, 0x0, {0x7a00000000000000}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x959, 0x1}, {0x3}, {}, {0x8, 0x3}, {0xffffffff, 0x3}, {0x7fff, 0x2}, {0x7}, {0xb}, {0x1, 0x2}, {0x9, 0x1}, {0x8001, 0x2}], [{0x9, 0x401}, {0x3, 0x6}, {0x3, 0x5}, {0x3, 0x4}, {0x7, 0xa5}, {0x5, 0x400}, {0x8, 0x101}, {0x0, 0x4}, {0x5, 0x70000}, {0x1, 0xc10}, {0x80000001, 0x7}], 0x2, 0x6}, {[{0x5e23, 0x1}, {0xc04, 0x1}, {0x3, 0x1}, {0x4, 0x2}, {0xfffffffe, 0x1}, {0x7, 0x1}, {0x7, 0x1}, {0x8, 0x2}, {0x0, 0x3}, {0x7, 0x2}, {0x3, 0x3}], [{0x7ff, 0x9}, {0x5, 0xfffff12e}, {0x167f, 0x81}, {0x2, 0xe}, {0x7, 0xffff}, {0x5, 0x9}, {0x73d, 0x9}, {0x3, 0xdb}, {0x3, 0xffffffff}, {0x1, 0x8}, {0x7, 0x9}], 0x2, 0x5}, {[{0x1ff, 0x1}, {0x3, 0x3}, {0xb, 0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x3}, {0x2, 0x3}, {0xffff8001, 0x1}, {0x3, 0x1}, {0x9, 0x1}, {0x3, 0x1}], [{0x4}, {0x7, 0x7}, {0x32, 0x6a1}, {0x9, 0x8001}, {0xafc, 0x5}, {0x1e0000, 0x3}, {0x2, 0xc86}, {0x9, 0x7}, {0x8, 0x4}, {0x1, 0x1}, {0x8, 0x2d1d}], 0x5, 0x2}, {[{0x6, 0x1}, {0x8, 0x2}, {0x1, 0x1}, {0x7f, 0x2}, {0x4, 0x2}, {0x549, 0x2}, {0xfffffa2f, 0x1}, {0xa55, 0x2}, {0x8, 0x1}, {0xfff}, {0x3, 0x2}], [{0xa22}, {0x7, 0x8001}, {0xfff, 0x5675}, {0x5, 0x7}, {0xfffffff8, 0x9}, {0x3, 0x8}, {0x9, 0x5}, {0x1, 0x1}, {0x3, 0x7f}, {0x5, 0x7}], 0x3, 0x6}, {[{0x39, 0x1}, {0x6, 0x1}, {0x8}, {0xffff, 0x2}, {0x7, 0x1}, {0x3}, {0x2, 0x3}, {0xb, 0x3}, {0x800, 0x1}, {0x1, 0x3}, {0x50, 0x3}], [{0x40, 0x9}, {0x10000, 0x825}, {0x8, 0x3}, {0x1, 0x4}, {0x6, 0x30}, {0x200, 0xd}, {0x8, 0xffffff7f}, {0x3, 0x7}, {0x80000000, 0x1}, {}, {0xfffffff7, 0x400}], 0x6, 0x6}, {[{0xd5bf, 0x3}, {0x6, 0x1}, {0x6, 0x2}, {0x0, 0x1}, {0x4}, {0x0, 0x3}, {0x7fffffff, 0x3}, {0xb}, {0x4d, 0x3}, {0x1, 0x13103fd830a8255d}, {0x8, 0x2}], [{0x1b6}, {0xfffffff9, 0x56d2}, {0x0, 0x80000000}, {0x1, 0x9}, {0x400, 0x3}, {0x9, 0x40}, {0x6, 0x8}, {0x23, 0xffff}, {0x3ff, 0xc0}, {0x800, 0x8}, {0x4a, 0xf91a}], 0x9, 0x8}, {[{0x0, 0x1}, {0x6, 0x2}, {0x1, 0x2}, {0x4}, {0x3a55, 0x1}, {0x0, 0x3}, {0x8, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x8, 0x2}, {0x8000}], [{0x6, 0x54}, {0x6}, {0x715d, 0xbb}, {0xe60e, 0xab43}, {0x10, 0x1}, {0x10, 0x6}, {0x3, 0x4}, {0x6, 0x6}, {0x40000000, 0x7}, {0x80000001, 0x19}, {0x4, 0x2}], 0x7, 0x7}, {[{0x1, 0x1}, {}, {}, {0x8}, {0x7, 0x1}, {0x2}, {0x6}, {0x7, 0x2}, {0x6c31b608}, {0x81, 0x1}, {0x7ff, 0x3}], [{0x200, 0x7}, {0x1, 0xd3}, {0x80000, 0x9}, {0xc, 0x9}, {0x8, 0xa91}, {0x7fffffff, 0xfffffffa}, {0xfffffffe, 0x4}, {0x3, 0x93}, {0x400, 0x6}, {0x420f, 0x6}, {0xb1, 0x3ff}], 0x9, 0x8}, {[{0x7}, {0xf793, 0x2}, {0xf}, {0x6, 0x3}, {0x5, 0x3}, {0x9, 0x3}, {0x10000, 0x5}, {0xa1, 0x1}, {0x4, 0x2}, {0x6, 0x2}, {0xb9}], [{0x8, 0x5}, {0x2, 0xc}, {0x7, 0x401}, {0x3, 0xa8}, {0x8, 0x2}, {0x7, 0xab09}, {0x8001, 0xfffffe01}, {}, {0x7, 0x5}, {0x7, 0x7}, {0x3, 0x80000000}], 0x1, 0x4}, {[{0x4, 0x2}, {0x1000}, {0x6, 0x1}, {0x4, 0x3}, {0x0, 0x2}, {0x1969, 0x2}, {0x0, 0x1}, {0x8, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0xd, 0x2}], [{0x6, 0x3}, {0x9, 0x486a}, {0x24, 0xb4b}, {0x1, 0x4}, {0x81, 0x8}, {0xffffffff, 0xfffffff1}, {0xe3eb, 0x9}, {0x100, 0x3}, {0x8, 0xffffffff}, {0x1, 0x35c08c74}, {0x4, 0x7358}], 0xff, 0xb}, {[{0x4, 0x3}, {0xfffffff9}, {0x75, 0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x2}, {0x10001}, {0x7, 0x3}, {0xd, 0x1}, {0xffff0000, 0x1}, {0x7, 0x1}], [{0x1000, 0x5}, {0x4, 0x4}, {0x480000, 0x48d7}, {0x8, 0x6}, {0xfb, 0x6}, {0x3ff, 0x4}, {0xfffffff7, 0x6}, {0x1, 0xfffffffa}, {0x6, 0x9}, {0x6, 0x9}, {0x5, 0x3}], 0xb, 0x9}], 0x7, 0x1}}, @common=@srh={{0x30}, {0x3c, 0x8, 0xcd, 0x9, 0x5, 0x800, 0x820}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x2e29, 0x1}}}, {{@uncond, 0x0, 0x200, 0x248, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x8, 0x5, 0x3c, 0x97, 0x6, 0x401, 0x4, 0x120e, 0x80, 0x40}, {0x5}}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@mcast1, 0x37, 0x33}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@local, 0x10}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffffff00], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x17}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@private=0xa010101}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'erspan0\x00', {0xff}, {}, 0x3c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfa0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@local, 0x3, 0x2, 0x0, 0x9, 0x4, 0x6}, 0x20) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="180100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000001040)) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f0000003000), 0x201, 0x0) socket$igmp6(0xa, 0x3, 0x2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r6) sendmsg$IEEE802154_LIST_PHY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001000)={0x14, r7, 0x30b, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x0) 2.771525627s ago: executing program 0 (id=4646): ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, 0x0}) rt_sigsuspend(0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) unshare(0x42040400) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) socket$packet(0x11, 0x2, 0x300) setreuid(0xee01, 0xee01) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) syz_genetlink_get_family_id$nl80211(0x0, r2) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x201000, 0x3a, 0x109, 0x0, 0x8000}, 0x1c) 2.752677577s ago: executing program 6 (id=4647): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000b00)=""/4096, 0x1000}], 0x1) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffc, 0x7fffffff}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xee01, 0xee01, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x8001) r4 = getpgid(0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000140)={0x2, r4}) sendmmsg$unix(r2, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="f5", 0x1}], 0x1, 0x0, 0x0, 0x4044040}}], 0x1, 0x40015) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x8916, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES64=r1, @ANYRES32=0x0, @ANYRESOCT=r0], 0x50}}, 0x20044000) 2.722333438s ago: executing program 8 (id=4648): syz_emit_ethernet(0x86, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x4, "aa4038dcafc0c05df9ceb1a0327d62d6d661c0b619142339fc260d53717300ea", "24ee97a1a3ce11dc8dedc215514f5ef5", {"f513402b69f8b11f4d2cb3a5b78c686f", "af3b29e79a169295719bc01ee815b526"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x1, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0), 0x2, 0x53a, &(0x7f0000000c80)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4090000000000006111100000000000851000ba0002000000000800000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) r1 = socket$kcm(0x2c, 0x3, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) mknod$loop(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x0) socket$netlink(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) listxattr(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x11) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x6, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0xa9525000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@fallback, 0xffffffffffffffff, 0x6}, 0x20) link(0x0, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') close_range(r2, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000100100000100000043000000000000001800000000000000100100000d"], 0x30}, 0xfc40) setsockopt$sock_attach_bpf(r1, 0x11b, 0x2, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in={{0xa, 0x4, @multicast2}}, 0xffff, 0x4}, 0x90) 2.550795803s ago: executing program 6 (id=4649): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x101c91c, &(0x7f0000000400)={[{@inode_readahead_blks}, {@noblock_validity}, {@resgid}, {@inlinecrypt}, {@errors_remount}, {@noblock_validity}, {@usrjquota}, {@nodelalloc}, {@resgid, 0x32}]}, 0x1d, 0x4e8, &(0x7f0000000540)="$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") r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r3, r3, 0x0, 0x80000000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) recvmmsg$unix(r2, &(0x7f0000006900)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000001080)=[{&(0x7f00000002c0)=""/168, 0xa8}, {&(0x7f0000000a40)=""/173, 0xad}, {&(0x7f0000000b80)=""/168, 0xa8}, {&(0x7f0000000c40)=""/68, 0x44}, {&(0x7f0000000d80)=""/240, 0xf0}, {&(0x7f0000000f80)=""/227, 0xe3}], 0x6}}, {{&(0x7f0000001180), 0x6e, &(0x7f0000001680)=[{0x0}, {&(0x7f0000001440)=""/197, 0xc5}, {&(0x7f0000001540)=""/219, 0xdb}], 0x3}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001740)=""/253, 0xfd}, {0x0}, {0x0}, {&(0x7f0000003440)=""/177, 0xb1}], 0x4}}, {{&(0x7f0000003640), 0x6e, &(0x7f0000003d40)=[{&(0x7f00000036c0)=""/141, 0x8d}, {&(0x7f0000003780)=""/173, 0xad}, {&(0x7f0000003840)=""/193, 0xc1}, {0x0}, {&(0x7f0000003980)=""/201, 0xc9}, {&(0x7f0000003a80)=""/199, 0xc7}, {&(0x7f0000003b80)=""/131, 0x83}, {&(0x7f0000003c80)=""/137, 0x89}], 0x8}}, {{&(0x7f0000003e00)=@abs, 0x6e, &(0x7f00000051c0)=[{&(0x7f0000003e80)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/210, 0xd2}, {&(0x7f0000004f80)=""/250, 0xfa}, {&(0x7f0000005080)=""/193, 0xc1}, {&(0x7f0000005180)=""/51, 0x33}], 0x5}}, {{&(0x7f0000005280), 0x6e, &(0x7f0000006780)=[{0x0}, {0x0}, {&(0x7f0000005440)=""/4096, 0x1000}, {&(0x7f0000006440)=""/95, 0x5f}, {&(0x7f00000064c0)=""/79, 0x4f}, {&(0x7f0000006540)=""/77, 0x4d}, {&(0x7f0000006600)=""/125, 0x7d}, {&(0x7f0000006680)}, {&(0x7f00000066c0)=""/134, 0x86}], 0x9, &(0x7f0000006840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}], 0x60}}], 0x6, 0x1, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000380)={0x8, 0x1, 0x94e, 0x37e, 0x7, 0x400000}) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000003c0)={0x8, 0x5, 0x8000, 0x6, 0x800, 0x1, 0xfffffffe, 0x1, 0x0}, &(0x7f0000000b00)=0x20) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000002300)={r7, 0x1000, "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"}, &(0x7f0000003340)=0x1008) sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x1000803c, 0x0, 0x0) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 2.307593351s ago: executing program 0 (id=4650): prctl$PR_GET_NAME(0x10, &(0x7f00000000c0)=""/169) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000006c0)=[@in6={0xa, 0x4e22, 0x28, @mcast2, 0xe}, @in6={0xa, 0x4e25, 0x0, @mcast1, 0x1066}, @in6={0xa, 0x4e23, 0x474c, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e21, 0x200, @mcast2, 0x7ff}, @in={0x2, 0x4e20, @private=0xa010101}, @in6={0xa, 0x4e26, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc8ae000}, @in={0x2, 0x4e21, @empty}], 0xbc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000020000100000000000000000002000000000000022f86f0a9080006000500004008000400fb17ffff08"], 0x34}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x6}, 0x102802, 0x2e, 0x0, 0x6, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) r2 = memfd_create(&(0x7f0000000800)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\xad\xa9\a\xde\x834\xdf\x9c\xc3\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xb7\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61\xdd\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9a\xa4\x84\x03\xc2\x9c\xcdw\xd9\xba\x97\xd1\x1cS\xdeN\xcc\xac\xce\x9c\xd3\xbc\xb5\xd2\xf0\xcb>\x84a\xdaQ0\x06\xb8\xb8\x93\xcf\x92\v\xe3n\xea\xf9%\x1dm\xaf\x80\xaa\x02o_\xde[\x9d\xb9CkBK\x8a}K\x82?x|H\x99M\x85\xae\xe5\x7fgE\xd4\x80!l\x94\x98\x1e\x11\xf5\x1d^\x11r*!-d\x1c\r5\xfb\x89\xb7\xf2h\x8f\xf7\xb9\xfaO0\xcb\xaf\x8c\xc5\xab\xda\xe6\xf9\xf0\xf9L\xfc\xfa\x0e\xf2d\xf3\x10\xa8D\\\x83\xb3\x0e0\xc2\x0fBT\xba\x03%\x9b\x05\xe5\xe8\xd7\x95Ayy\x17\xd7\x02\x93\x17\xa8A\xcf\x86\x9e\x16\x89\xd7\xc9g)\xec\xcad\x15\xd0\x03\xc3xi\xc5\xf7\"=\x947tdc\xba\xe2', 0x2) write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file0'}, 0xb) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) r4 = dup2(r1, r3) syz_io_uring_setup(0x5173, &(0x7f0000000540)={0x0, 0x17b2, 0x8, 0x1, 0x12e, 0x0, r4}, &(0x7f00000003c0), &(0x7f0000000680), 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a"], 0xe0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x5}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000a00)=""/217, 0xd9}, {&(0x7f0000000480)=""/16, 0x10}, {&(0x7f0000000b40)=""/167, 0xa7}, {&(0x7f0000000440)=""/54, 0x36}, {&(0x7f0000000c40)=""/241, 0xf1}, {&(0x7f0000001600)=""/4096, 0x1000}], &(0x7f0000000400)=[0x2, 0x2, 0x400008001, 0xffffffffffffffc0, 0x8000000000000000, 0x251, 0x5, 0x4], 0x6}, 0x20) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x6) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10, &(0x7f0000000000)={[{@resuid}, {@dioread_lock}]}, 0x8, 0x506, &(0x7f00000010c0)="$eJzs3c9vG1kdAPDvTOImm3U2XdgDIGDLslDQqs6P7kYrONC9gNBqJcSKE4duSLxRFLuO4qQ0oYfkyB2JSpzgT+DGAaknDty4wY1LOSBVUIEapB6MZjxNTGLHQU2cJv58pPHMezP19z3b7z3Pa90XwNC6FhE7EXElIj6JiKkiPym2uNXesuuePrm/uPfk/mISrdbH/0jy81ledPyZzKvFc45HxA+/F/GT5Gjc5tb26kKtVl0v0tMb9bXp5tb2jZW0yJmbn52fef/me3OnVtc36799/N2VD3/0+9996dGfdr75s6xY5Z9P5uc663Ga2lUvRbkjbzQiPjyLYOdktPj8cPFkre0zEfFW3v6nYiR/Nw9JoksLju6ZAMBLr9WaitZUZxoAuOyy+/9yJGmlmAsoR5pWKu05vDdiIq01mhvvTDU27yxFPod1NUrppyu16kwxV3g1SkmWns2PD9Jzh9I3I+L1iPjF2Ct5urLYqC2d5xcfABhirx4a//891h7/AYBLbvy8CwAADJzxHwCGj/EfAIbP/zH+d/l1IABwEbn/B4DhY/wHgOHTd/zfHUw5AICB+MFHH2Vba6/4/6+X7m5tfrt898ZStblaqW8uVhYb62uV5UZjuVatLLZa/Z6v1miszb67n2xubd+uNzbvbNxeqS8sV29XS2dcHwCgv9fffPiXJCJ2vvVKvkXHWg7Garjc0hPmAZfPSN8rJgdSDmDw/J4HhtcJ7vFNA8Al128tz57/ROiBxV/horr+efP/MKzM9cPw6j//3813Tr0cwOCZ/4fh1Wol1vwHgCFjjh94ob//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCFVzrckreRrge9kj2mlEjEZEVejlHy6UqvORMRrEfHnsdJYlp4970IDAC8o/XtSrP91fert8uGzV5L/jOX7iPjprz7+5b2FjY312Sz/n/v5Gw+K/Lkr51EBAKDTraNZ7XG62HfcyD99cn/x+TbIIj7+oL24aBZ3r9jaZ0ZjNN+PRykiJv6VFOm27PvKyCnE39mNiM8d1P9eR4RyPgfSXvn0cPws9uQZxD94/Q/HT/8nfpqfy/al/LX47CmUBYbNww/a/WTR9rImVrS/NK7l++7tfzzvoV7c8/5v70j/l+73fyNH4id5m7+2nz6+JI/f/cP3j2S2ptrndiO+MNotfrIfP+nR/759wjr+9YtffqvXudavI65H9/ht9bybnd6or003t7ZvrNQXlqvL1Ttzc/Oz8zPv33xvbjqfo24//vHQ0z8rlrl/redrsxsx0SP+eJ/6f+2E9f/Ns09+/JVj4n/jq93f/zeOiZ+NiV8/YfyFiVs9l+/O4i/1qH+/9/+dE8Z/9LftpRNeCgAMQHNre3WhVquu9znIvmv2u8bBxTyInYiXoBj9DtLiI/uylOeSHxzTaaQD6pyAM3XQ6M+7JAAAAAAAAAAAAAAAQC/Nre3VsTjbnxOddx0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4vP4bAAD//5aY0i4=") r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r8, 0x6628) 2.293010341s ago: executing program 7 (id=4651): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff1}, {0xffe0, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001800010000000000000003001d01000008000e00", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="1500010000000000000000007721", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0xa8d0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.259633072s ago: executing program 8 (id=4652): prctl$PR_GET_NAME(0x10, &(0x7f00000000c0)=""/169) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000020000100000000000000000002000000000000022f86f0a9080006000500004008000400fb17ffff08"], 0x34}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x6}, 0x102802, 0x2e, 0x0, 0x6, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) r2 = memfd_create(&(0x7f0000000800)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\xad\xa9\a\xde\x834\xdf\x9c\xc3\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xb7\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61\xdd\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9a\xa4\x84\x03\xc2\x9c\xcdw\xd9\xba\x97\xd1\x1cS\xdeN\xcc\xac\xce\x9c\xd3\xbc\xb5\xd2\xf0\xcb>\x84a\xdaQ0\x06\xb8\xb8\x93\xcf\x92\v\xe3n\xea\xf9%\x1dm\xaf\x80\xaa\x02o_\xde[\x9d\xb9CkBK\x8a}K\x82?x|H\x99M\x85\xae\xe5\x7fgE\xd4\x80!l\x94\x98\x1e\x11\xf5\x1d^\x11r*!-d\x1c\r5\xfb\x89\xb7\xf2h\x8f\xf7\xb9\xfaO0\xcb\xaf\x8c\xc5\xab\xda\xe6\xf9\xf0\xf9L\xfc\xfa\x0e\xf2d\xf3\x10\xa8D\\\x83\xb3\x0e0\xc2\x0fBT\xba\x03%\x9b\x05\xe5\xe8\xd7\x95Ayy\x17\xd7\x02\x93\x17\xa8A\xcf\x86\x9e\x16\x89\xd7\xc9g)\xec\xcad\x15\xd0\x03\xc3xi\xc5\xf7\"=\x947tdc\xba\xe2', 0x2) write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file0'}, 0xb) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) r4 = dup2(r1, r3) syz_io_uring_setup(0x5173, &(0x7f0000000540)={0x0, 0x17b2, 0x8, 0x1, 0x12e, 0x0, r4}, &(0x7f00000003c0), &(0x7f0000000680), 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a"], 0xe0}}, 0x0) r6 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x5}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000a00)=""/217, 0xd9}, {&(0x7f0000000480)=""/16, 0x10}, {&(0x7f0000000b40)=""/167, 0xa7}, {&(0x7f0000000440)=""/54, 0x36}, {&(0x7f0000000c40)=""/241, 0xf1}, {&(0x7f0000001600)=""/4096, 0x1000}], &(0x7f0000000400)=[0x2, 0x2, 0x400008001, 0xffffffffffffffc0, 0x8000000000000000, 0x251, 0x5, 0x4], 0x6}, 0x20) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x6) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10, &(0x7f0000000000)={[{@resuid}, {@dioread_lock}]}, 0x8, 0x506, &(0x7f00000010c0)="$eJzs3c9vG1kdAPDvTOImm3U2XdgDIGDLslDQqs6P7kYrONC9gNBqJcSKE4duSLxRFLuO4qQ0oYfkyB2JSpzgT+DGAaknDty4wY1LOSBVUIEapB6MZjxNTGLHQU2cJv58pPHMezP19z3b7z3Pa90XwNC6FhE7EXElIj6JiKkiPym2uNXesuuePrm/uPfk/mISrdbH/0jy81ledPyZzKvFc45HxA+/F/GT5Gjc5tb26kKtVl0v0tMb9bXp5tb2jZW0yJmbn52fef/me3OnVtc36799/N2VD3/0+9996dGfdr75s6xY5Z9P5uc663Ga2lUvRbkjbzQiPjyLYOdktPj8cPFkre0zEfFW3v6nYiR/Nw9JoksLju6ZAMBLr9WaitZUZxoAuOyy+/9yJGmlmAsoR5pWKu05vDdiIq01mhvvTDU27yxFPod1NUrppyu16kwxV3g1SkmWns2PD9Jzh9I3I+L1iPjF2Ct5urLYqC2d5xcfABhirx4a//891h7/AYBLbvy8CwAADJzxHwCGj/EfAIbP/zH+d/l1IABwEbn/B4DhY/wHgOHTd/zfHUw5AICB+MFHH2Vba6/4/6+X7m5tfrt898ZStblaqW8uVhYb62uV5UZjuVatLLZa/Z6v1miszb67n2xubd+uNzbvbNxeqS8sV29XS2dcHwCgv9fffPiXJCJ2vvVKvkXHWg7Garjc0hPmAZfPSN8rJgdSDmDw/J4HhtcJ7vFNA8Al128tz57/ROiBxV/horr+efP/MKzM9cPw6j//3813Tr0cwOCZ/4fh1Wol1vwHgCFjjh94ob//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCFVzrckreRrge9kj2mlEjEZEVejlHy6UqvORMRrEfHnsdJYlp4970IDAC8o/XtSrP91fert8uGzV5L/jOX7iPjprz7+5b2FjY312Sz/n/v5Gw+K/Lkr51EBAKDTraNZ7XG62HfcyD99cn/x+TbIIj7+oL24aBZ3r9jaZ0ZjNN+PRykiJv6VFOm27PvKyCnE39mNiM8d1P9eR4RyPgfSXvn0cPws9uQZxD94/Q/HT/8nfpqfy/al/LX47CmUBYbNww/a/WTR9rImVrS/NK7l++7tfzzvoV7c8/5v70j/l+73fyNH4id5m7+2nz6+JI/f/cP3j2S2ptrndiO+MNotfrIfP+nR/759wjr+9YtffqvXudavI65H9/ht9bybnd6or003t7ZvrNQXlqvL1Ttzc/Oz8zPv33xvbjqfo24//vHQ0z8rlrl/redrsxsx0SP+eJ/6f+2E9f/Ns09+/JVj4n/jq93f/zeOiZ+NiV8/YfyFiVs9l+/O4i/1qH+/9/+dE8Z/9LftpRNeCgAMQHNre3WhVquu9znIvmv2u8bBxTyInYiXoBj9DtLiI/uylOeSHxzTaaQD6pyAM3XQ6M+7JAAAAAAAAAAAAAAAQC/Nre3VsTjbnxOddx0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4vP4bAAD//5aY0i4=") r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r8, 0x6628) 2.103553047s ago: executing program 7 (id=4653): mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x19, 0x2, {0x1c8, {0x40, 0x6, 0x100}, 0x8b, 0x0, 0x0, 0xff, 0x5, 0x4000084, 0xbf44, 0x170a, 0x10001, 0x2, 0x5, 0x2, 0x5, 0x8, 0x4, 0x8000000000405, 0x4, 0x8}}, 0xa0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000c00)={0x0, 0x5, 0x5870, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000002380)={0x0, "2a39d314bc2f2f29e786c26919a5db87"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000003380)={0xd, 0x1, {0x6, @usage=0x5, 0x0, 0x4, 0xffffffffffffffff, 0xc222, 0xe, 0x90, 0x8, @struct={0x5d45, 0x306ddcfb}, 0xb09b, 0x9df2, [0xfffffffffffffff8, 0x1800000000000, 0x9, 0x9, 0x1, 0xfffffffffffffff7]}, {0x9, @struct={0x3, 0x7}, r0, 0x5, 0x4, 0x7, 0x5f, 0x6, 0x22, @usage, 0x80000001, 0x800, [0x1, 0x71, 0x8, 0x7, 0x4, 0x5]}, {0x10000, @usage=0x1, r1, 0x6, 0x6, 0x5, 0x0, 0x4, 0x108, @struct={0xfffffbff, 0x2}, 0x49c, 0xfffffff7, [0x7f, 0x7ff, 0x9, 0x8, 0x0, 0x3]}, {0x2, 0x0, 0x5}}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x18, 0x4e, 0x1, 0x70bd25, 0x25dfdbfb, {0x2, 0x3}, [@generic='\f']}, 0x18}}, 0x20040010) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) unshare(0x22060600) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x4) openat$cgroup_ro(r5, &(0x7f0000001100)='cpu.stat\x00', 0x5000000, 0x0) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0xa) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r2) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@nolazytime}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r6 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r6, &(0x7f0000000240)=[{0x0}], 0x1, 0x6400, 0x0, 0x3) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000300)={'ipvlan1\x00', @random="da9632c270a3"}) socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000280)=0x1) 1.809111955s ago: executing program 9 (id=4654): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000900)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) r2 = openat$cgroup_int(r1, &(0x7f0000000900)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) read(r2, &(0x7f00000000c0)=""/102, 0x66) r3 = socket$kcm(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000440)=r4, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) 1.607541322s ago: executing program 9 (id=4655): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000600), 0xfd, 0x571, &(0x7f0000000bc0)="$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") r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000380)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x25dfdbfb, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0), 0x0) 705.276619ms ago: executing program 0 (id=4656): prctl$PR_GET_NAME(0x10, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000020000100000000000000000002000000000000022f86f0a9080006000500004008000400fb17ffff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x6}, 0x102802, 0x2e, 0x0, 0x6, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)={'#! ', './file0'}, 0xb) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) dup2(0xffffffffffffffff, r1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a"], 0xe0}}, 0x0) syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x5}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x6) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10, &(0x7f0000000000)={[{@resuid}, {@dioread_lock}]}, 0x8, 0x506, &(0x7f00000010c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) 631.599321ms ago: executing program 9 (id=4657): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) readv(r0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, 0x0, &(0x7f0000000280)=r0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000000}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 468.682236ms ago: executing program 8 (id=4658): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x6, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x5, @loopback}, 0x1c) setsockopt$inet6_buf(r1, 0x29, 0xca, &(0x7f0000000880)="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", 0x1000) unshare(0x22020600) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x1, 0x70, 0x20000}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x52014, 0x22025}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x401}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_TTL={0x5, 0x8, 0x2c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x4}]}}}, @IFLA_LINKMODE={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x8841}, 0x280048c6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x6001, 0x4, 0x3f0, 0xe8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, 0xff, 0xff000000, 0x2, 0x7, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x7ff, 0x9d, 0xf9, 0xd, 0x0, 0x9, 'ip6tnl0\x00', 'hsr0\x00', {}, {}, 0x0, 0x600}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@multicast2, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 'veth1_vlan\x00', 'team_slave_0\x00', {0x101}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @multicast2, @private, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@local, @dev={0xac, 0x14, 0x14, 0x44}, @rand_addr=0x64010101, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x440) 338.63279ms ago: executing program 6 (id=4659): fstat(0xffffffffffffffff, &(0x7f0000000040)) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r0, r0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, 0x0, r0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b1a439, &(0x7f0000000800)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYBLOB="41319d36b19da0f92c34d4161aedb4d9c117bb97d9a14da38deb4d799f7396c16e53eea9b38952392679dc9965aff692fc7a1de3490b4e22f3468c98ec62faff6c802527cda5cb48c5bc97b57252bea2f306513526e3e61d4e206934c90150ba2c325365d34a4866416a647a2022e5485163e3fad30730c80a46b63900f5dfdd845440d244a1e889fb14a29c06fcc85f976afbb0ce220bde0da45028db74413dd6a37b7b63c2b7a26169fc2a44d210bd17af7173aa72d2ad45542299334fe9576104e3e3e7d25997fe6c8bb5fa15b761725a39fedaf8d5533570ba136ac826592163351666324320c93c98c4", @ANYRES8], 0xb, 0x0, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010000104fcffffff800000", @ANYRES32=0x0], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) socket$inet6_sctp(0xa, 0x1, 0x84) 239.816013ms ago: executing program 7 (id=4660): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, 0x0, 0x4e040) dup(0xffffffffffffffff) r1 = fsopen(&(0x7f00000004c0)='nfs4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r2, 0x0, 0xb2) sched_setscheduler(0x0, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x1fd, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, @perf_config_ext={0x9, 0x10001}, 0x3a30, 0x1, 0xbc6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000104feffff7f0300ffffffe40006", @ANYRES32=r7, @ANYBLOB="680000008008000008000300", @ANYRES32=r4, @ANYBLOB="c3ddbf7da76183e7b6ee2dd41919a44244809401ec5a6a24b6c35ed4e698390b4620e62f065e05d58ee1bdc74221334a9ed3ed99013983d8e96741c23c6f1c6b35fe429d8137464baaadbc08befe4c09e92ac6a52c2e6b6e8c91b000aa4f73e406ed71e588611e270dd9bd49ae3554287192"], 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) 238.953053ms ago: executing program 9 (id=4661): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x7, 0x7, 0x3a6c, 0x5, {{0x1a, 0x4, 0x1, 0x2c, 0x68, 0x67, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@timestamp_prespec={0x44, 0x14, 0x7d, 0x3, 0x3, [{@private=0xa010102, 0xfffffff9}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x8}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xff, [@local]}, @end, @timestamp_addr={0x44, 0x24, 0x6a, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x101}, {@dev={0xac, 0x14, 0x14, 0x29}, 0xffff8001}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x401}]}, @rr={0x7, 0xf, 0x5b, [@empty, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000340)={'erspan0\x00', r1, 0x1, 0x700, 0x7, 0xfff, {{0x9, 0x4, 0x1, 0x9, 0x24, 0x65, 0x0, 0x9, 0x2f, 0x0, @local, @broadcast, {[@rr={0x7, 0xf, 0x73, [@empty, @local, @loopback]}, @noop]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000200)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000002c0)={0x60, 0x3, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x1, 0x0, 0x0, 0x5, 0x0, 0xca9807cbba5b3690, 0x44, 0x7e}) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) 115.745917ms ago: executing program 7 (id=4662): r0 = getgid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@local, @in6=@ipv4={""/10, ""/2, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000280)=0xe8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x804800, &(0x7f00000002c0)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@grpquota}, {@resgid={'resgid', 0x3d, r0}}, {@barrier}, {@quota}, {@journal_dev={'journal_dev', 0x3d, 0xffff}}], [{@uid_gt={'uid>', r1}}]}, 0x1, 0x784, &(0x7f0000000a80)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XMjXunTegQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH9VV9fmJ7OsvFTtdyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0V/pTEhH5drJ4YmjnsweTP4qNx4h459NLH61M1mpLY/n+X1v7ax839599YOL151kDAAAA7HuvPcng7ev07et4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAXlVX1+Yns6y8tIeNuNHvKgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKfxdwAAAP//wK25Zg==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r2, 0x7f, 0x0, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x60) 54.187899ms ago: executing program 8 (id=4663): prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000008, &(0x7f0000000980)=ANY=[], 0x4, 0x28a, &(0x7f00000012c0)="$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") sched_setscheduler(0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x24842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000340)=0x9, 0x12) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes']) open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYBLOB="46060900000000001400350062726964bb0b800480050011cde312d8cf6500000000000054e79c55792576519ded5fd3dfa767b552ce570c84cfddb63231ae13455f5336d0b705b21354bfe3f609e7b87c6e15dff31e9496849b21db7044df67cd57ef1374ba78ffd73a8a31db994b5b2717023513976a7dd4e9a9b38eb9cbdba01079af5f1c86355a4a25e7cec9d80cfdb08861caad8b5c105ee5f043be0e235a0097"], 0x48}, 0x1, 0x0, 0x0, 0x4600}, 0x24044800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) faccessat2(0xffffffffffffffff, 0x0, 0x46, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x80) write$bt_hci(r4, &(0x7f00000002c0)=ANY=[], 0xa) sendfile(r4, r3, 0x0, 0x40001) 0s ago: executing program 0 (id=4664): syz_ublk_setup_io_uring(0x1c6e, &(0x7f0000000000)={0x0, 0xa98c, 0x10, 0x0, 0x22c}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x1, 0x8010800000000084) socket$inet_tcp(0x2, 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) listen(r0, 0x0) socket$unix(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) kernel console output (not intermixed with test programs): oop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.4284: corrupted in-inode xattr: e_name out of bounds [ 600.548978][T24951] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 600.549286][T24951] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.4284: couldn't read orphan inode 15 (err -117) [ 600.559037][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 600.559051][ C1] EXT4-fs (loop8): initial error at time 2000000028: ext4_iget_extra_inode:5128: inode 15 [ 600.559088][ C1] EXT4-fs (loop8): last error at time 2000000028: ext4_iget_extra_inode:5128: inode 15 [ 600.597220][T24951] loop8: lost filesystem error report for type 5 error -117 [ 600.650876][T24951] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.674869][T24951] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 600.686464][T24951] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 600.696586][T24951] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.4284: Corrupt directory, running e2fsck is recommended [ 600.987341][T24961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4285'. [ 601.279381][T24975] loop0: detected capacity change from 0 to 512 [ 601.420324][T24975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.465573][T24975] ext4 filesystem being mounted at /375/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 601.580891][T12172] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.635585][T24994] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.689904][T24994] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 601.783885][T15754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.854855][T22672] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.921655][T25027] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4295'. [ 601.934474][T25028] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4294'. [ 601.973683][T25028] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4294'. [ 601.999836][T25028] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4294'. [ 602.014200][T25037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4297'. [ 602.309217][T25064] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4296'. [ 602.318107][T25064] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4296'. [ 603.060707][T25067] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 603.228299][T25067] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 603.237650][T25067] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.4299: bad orphan inode 4 [ 603.247666][T25067] loop6: lost filesystem error report for type 5 error -117 [ 603.248153][T25067] EXT4-fs (loop6): 1 orphan inode deleted [ 603.255504][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 603.255520][ C0] EXT4-fs (loop6): initial error at time 2000000030: ext4_orphan_get:1423 [ 603.255548][ C0] EXT4-fs (loop6): last error at time 2000000030: ext4_orphan_get:1423 [ 603.285626][T25067] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 603.300708][T25067] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #2: block 4: comm syz.6.4299: lblock 0 mapped to illegal pblock 4 (length 1) [ 603.314953][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 603.320896][ T28] audit: type=1400 audit(2000000030.919:6009): avc: denied { write } for pid=25051 comm="syz.6.4299" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 603.772663][T25074] set_capacity_and_notify: 2 callbacks suppressed [ 603.772916][T25074] loop0: detected capacity change from 0 to 512 [ 603.840334][T25074] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 603.882741][T25074] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 603.891113][T12373] Bluetooth: hci0: Frame reassembly failed (-84) [ 603.931134][T25074] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.4300: bad orphan inode 13 [ 603.974471][T25074] loop0: lost filesystem error report for type 5 error -117 [ 603.975546][T25074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.009023][T25097] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 604.062585][ T4523] bond_slave_0: entered promiscuous mode [ 604.068276][ T4523] bond_slave_1: entered promiscuous mode [ 604.193224][T25076] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 604.238403][T12172] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.415701][T15754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.442366][T25095] loop8: detected capacity change from 0 to 512 [ 604.623140][T25095] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.658658][T25095] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 604.685815][T18562] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.702020][T25132] loop6: detected capacity change from 0 to 512 [ 604.743585][T25132] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 604.755213][T25132] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 604.765448][T25132] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.4305: Corrupt directory, running e2fsck is recommended [ 604.779774][T25132] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 604.789033][T25132] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.4305: corrupted in-inode xattr: e_name out of bounds [ 604.802940][T25132] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 604.805124][T25132] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.4305: couldn't read orphan inode 15 (err -117) [ 604.814321][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 604.814351][ C0] EXT4-fs (loop6): initial error at time 2000000032: ext4_iget_extra_inode:5128: inode 15 [ 604.814384][ C0] EXT4-fs (loop6): last error at time 2000000032: ext4_iget_extra_inode:5128: inode 15 [ 604.852281][T25132] loop6: lost filesystem error report for type 5 error -117 [ 604.857687][T25132] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 604.876633][T25132] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 604.886863][T25132] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.4305: Corrupt directory, running e2fsck is recommended [ 604.986712][T25135] loop0: detected capacity change from 0 to 512 [ 605.124742][T25135] ext4 filesystem being mounted at /379/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 605.299368][T22564] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.412902][T22564] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.495720][T22564] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.545999][T25076] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 605.564303][T22564] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.907282][T22564] bridge_slave_1: left allmulticast mode [ 605.927396][T22564] bridge_slave_1: left promiscuous mode [ 605.940343][T25200] loop0: detected capacity change from 0 to 1024 [ 605.958304][T22564] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.991126][T22564] bridge_slave_0: left allmulticast mode [ 606.000555][T25200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4310'. [ 606.012026][ T3582] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 606.029879][T22564] bridge_slave_0: left promiscuous mode [ 606.051791][T22564] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.107689][T25215] loop9: detected capacity change from 0 to 1024 [ 606.124870][T25215] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4312'. [ 606.192847][T22564] ip6gretap0 (unregistering): left allmulticast mode [ 606.285235][T22564] bond0 (unregistering): Released all slaves [ 606.380598][T25215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.398280][T25215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.418732][ T28] audit: type=1400 audit(2000000033.798:6010): avc: denied { write } for pid=25223 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 606.421060][T25215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.454582][T25215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.477424][ T28] audit: type=1400 audit(2000000033.844:6011): avc: denied { write } for pid=25237 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 606.502068][T25235] loop0: detected capacity change from 0 to 128 [ 606.539474][ T3020] 8021q: adding VLAN 0 to HW filter on device eth18 [ 606.636558][T25258] loop8: detected capacity change from 0 to 512 [ 606.647342][T22564] hsr_slave_0: left promiscuous mode [ 606.651873][T25235] bio_check_eod: 12 callbacks suppressed [ 606.651921][T25235] syz.0.4314: attempt to access beyond end of device [ 606.651921][T25235] loop0: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 606.673306][T22564] hsr_slave_1: left promiscuous mode [ 606.707220][T22564] veth1_macvtap: left promiscuous mode [ 606.716192][T25266] loop9: detected capacity change from 0 to 128 [ 606.719105][T22564] veth0_macvtap: left promiscuous mode [ 606.728063][T25235] buffer_io_error: 6 callbacks suppressed [ 606.728077][T25235] Buffer I/O error on dev loop0, logical block 132, lost async page write [ 606.748958][T22564] veth1_vlan: left promiscuous mode [ 606.758594][T25258] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 606.758811][T25235] syz.0.4314: attempt to access beyond end of device [ 606.758811][T25235] loop0: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 606.781265][T22564] veth0_vlan: left promiscuous mode [ 606.782475][T25235] Buffer I/O error on dev loop0, logical block 133, lost async page write [ 606.782505][T25235] syz.0.4314: attempt to access beyond end of device [ 606.782505][T25235] loop0: rw=2049, sector=134, nr_sectors = 1 limit=128 [ 606.810094][T25235] Buffer I/O error on dev loop0, logical block 134, lost async page write [ 606.818657][T25252] tmpfs: Bad value for 'nr_inodes' [ 606.818822][T25235] syz.0.4314: attempt to access beyond end of device [ 606.818822][T25235] loop0: rw=2049, sector=135, nr_sectors = 1 limit=128 [ 606.837136][T25235] Buffer I/O error on dev loop0, logical block 135, lost async page write [ 606.845738][T25235] syz.0.4314: attempt to access beyond end of device [ 606.845738][T25235] loop0: rw=2049, sector=137, nr_sectors = 1 limit=128 [ 606.864764][T25235] Buffer I/O error on dev loop0, logical block 137, lost async page write [ 606.877611][T25279] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4315'. [ 606.886198][T25235] syz.0.4314: attempt to access beyond end of device [ 606.886198][T25235] loop0: rw=2049, sector=138, nr_sectors = 1 limit=128 [ 606.899872][T25235] Buffer I/O error on dev loop0, logical block 138, lost async page write [ 606.910796][T25235] syz.0.4314: attempt to access beyond end of device [ 606.910796][T25235] loop0: rw=2049, sector=139, nr_sectors = 1 limit=128 [ 606.924212][T25235] Buffer I/O error on dev loop0, logical block 139, lost async page write [ 606.932744][T25235] syz.0.4314: attempt to access beyond end of device [ 606.932744][T25235] loop0: rw=2049, sector=140, nr_sectors = 1 limit=128 [ 606.947668][T25235] Buffer I/O error on dev loop0, logical block 140, lost async page write [ 606.956327][T25235] syz.0.4314: attempt to access beyond end of device [ 606.956327][T25235] loop0: rw=2049, sector=141, nr_sectors = 16 limit=128 [ 606.971336][T25278] syz.9.4317: attempt to access beyond end of device [ 606.971336][T25278] loop9: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 607.006451][ T28] audit: type=1400 audit(2000000034.333:6012): avc: denied { write } for pid=25256 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.028003][T25278] Buffer I/O error on dev loop9, logical block 156, lost async page write [ 607.068035][T25278] Buffer I/O error on dev loop9, logical block 157, lost async page write [ 607.099256][ T28] audit: type=1400 audit(2000000034.425:6013): avc: denied { write } for pid=25289 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.141222][T25278] tmpfs: Bad value for 'nr_inodes' [ 607.171797][T22564] team0 (unregistering): Port device team_slave_1 removed [ 607.193091][T22564] team0 (unregistering): Port device team_slave_0 removed [ 607.226497][ T3020] 8021q: adding VLAN 0 to HW filter on device eth17 [ 607.359199][ T28] audit: type=1400 audit(2000000034.665:6014): avc: denied { write } for pid=25306 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.382705][T25296] loop7: detected capacity change from 0 to 512 [ 607.415259][T25327] EXT4-fs: Ignoring removed nobh option [ 607.424596][T25322] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4316'. [ 607.446285][ T28] audit: type=1400 audit(2000000034.665:6015): avc: denied { write } for pid=25330 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.489005][T25327] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #3: comm syz.9.4321: corrupted inode contents [ 607.501791][T25296] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 607.511958][T25327] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 607.512352][T25327] EXT4-fs (loop9): Remounting filesystem read-only [ 607.533872][ T3020] 8021q: adding VLAN 0 to HW filter on device eth19 [ 607.540528][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 607.540545][ C1] EXT4-fs (loop9): initial error at time 2000000034: ext4_do_update_inode:5690: inode 3 [ 607.540589][ C1] EXT4-fs (loop9): last error at time 2000000034: ext4_do_update_inode:5690: inode 3 [ 607.567106][T25327] Quota error (device loop9): write_blk: dquota write failed [ 607.574690][T25327] Quota error (device loop9): qtree_write_dquot: Error -30 occurred while creating quota [ 607.585603][T25327] EXT4-fs (loop9): 1 truncate cleaned up [ 607.595937][T25327] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 607.660941][ T28] audit: type=1400 audit(2000000034.942:6016): avc: denied { write } for pid=25324 comm="syz.9.4321" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 607.802673][T25327] netlink: 'syz.9.4321': attribute type 1 has an invalid length. [ 607.836880][T25327] netlink: 224 bytes leftover after parsing attributes in process `syz.9.4321'. [ 607.964607][ T3020] 8021q: adding VLAN 0 to HW filter on device eth20 [ 608.175474][T25383] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 608.187218][T25383] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 608.197323][T25383] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.4324: Corrupt directory, running e2fsck is recommended [ 608.212735][T25383] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 608.221861][T25383] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.4324: corrupted in-inode xattr: e_name out of bounds [ 608.235803][T25383] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 608.236757][T25383] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.4324: couldn't read orphan inode 15 (err -117) [ 608.245897][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 608.245911][ C0] EXT4-fs (loop6): initial error at time 2000000035: ext4_iget_extra_inode:5128: inode 15 [ 608.245938][ C0] EXT4-fs (loop6): last error at time 2000000035: ext4_iget_extra_inode:5128: inode 15 [ 608.283888][T25383] loop6: lost filesystem error report for type 5 error -117 [ 608.288558][T25383] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 608.307449][T25383] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 608.317885][T25383] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.4324: Corrupt directory, running e2fsck is recommended [ 609.443420][T25411] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4330'. [ 609.653469][T25275] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 609.677472][T25415] set_capacity_and_notify: 2 callbacks suppressed [ 609.677490][T25415] loop9: detected capacity change from 0 to 8192 [ 609.704160][T25275] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 609.767063][T25411] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4330'. [ 609.803661][T25415] loop9: p1 < > p3 < > p4 [ 609.844838][T25411] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4330'. [ 609.864182][T25415] loop9: partition table partially beyond EOD, truncated [ 609.881131][T25430] loop7: detected capacity change from 0 to 512 [ 609.903371][T25415] loop9: p1 start 4294967040 is beyond EOD, truncated [ 609.912911][T25415] loop9: p4 size 851974 extends beyond EOD, truncated [ 609.986276][T25444] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4333'. [ 610.021430][T25430] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 610.273847][T25477] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4335'. [ 610.976755][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 610.976769][ T28] audit: type=1400 audit(2000000037.987:6019): avc: denied { listen } for pid=25492 comm="syz.6.4340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 611.133755][T25505] lo speed is unknown, defaulting to 1000 [ 611.139524][T25505] lo speed is unknown, defaulting to 1000 [ 611.145565][T25505] lo speed is unknown, defaulting to 1000 [ 611.183699][T25505] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 611.401295][T25505] lo speed is unknown, defaulting to 1000 [ 611.428070][T25515] loop0: detected capacity change from 0 to 512 [ 611.483853][T25519] bond1: option primary_reselect: invalid value (254) [ 611.503812][T25519] bond1 (unregistering): Released all slaves [ 611.552688][T25515] ext4 filesystem being mounted at /389/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 611.615611][T25505] lo speed is unknown, defaulting to 1000 [ 611.656102][T25505] lo speed is unknown, defaulting to 1000 [ 611.725183][T25505] lo speed is unknown, defaulting to 1000 [ 611.740322][T25505] lo speed is unknown, defaulting to 1000 [ 611.842910][T25597] __nla_validate_parse: 4 callbacks suppressed [ 611.842960][T25597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4345'. [ 612.015562][ T28] audit: type=1400 audit(2000000038.956:6020): avc: denied { write } for pid=25621 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.052892][T25634] loop8: detected capacity change from 0 to 512 [ 612.066284][ T28] audit: type=1400 audit(2000000038.956:6021): avc: denied { write } for pid=25635 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.156578][T25634] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 612.272334][T25671] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4355'. [ 612.293371][ T28] audit: type=1400 audit(2000000039.187:6022): avc: denied { write } for pid=25646 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.393454][ T28] audit: type=1400 audit(2000000039.307:6023): avc: denied { write } for pid=25676 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.434979][T25682] loop0: detected capacity change from 0 to 512 [ 612.484516][T25684] loop6: detected capacity change from 0 to 512 [ 612.579783][T25684] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 612.625420][T25684] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 612.637755][T25684] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.4354: bad orphan inode 4 [ 612.648423][T25684] loop6: lost filesystem error report for type 5 error -117 [ 612.649710][T25684] EXT4-fs (loop6): 1 orphan inode deleted [ 612.657431][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 612.657586][ C0] EXT4-fs (loop6): initial error at time 2000000039: ext4_orphan_get:1423 [ 612.657746][ C0] EXT4-fs (loop6): last error at time 2000000039: ext4_orphan_get:1423 [ 612.702157][T25684] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #2: block 4: comm syz.6.4354: lblock 0 mapped to illegal pblock 4 (length 1) [ 612.726701][ T28] audit: type=1400 audit(2000000039.593:6024): avc: denied { write } for pid=25662 comm="syz.6.4354" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 612.831302][T25682] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 612.866919][T25695] loop7: detected capacity change from 0 to 512 [ 612.919669][T25695] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 613.012707][T25707] loop8: detected capacity change from 0 to 512 [ 613.049719][T25707] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 613.070440][T25707] EXT4-fs (loop8): orphan cleanup on readonly fs [ 613.077051][T25707] Quota error (device loop8): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 613.098175][T25707] EXT4-fs warning (device loop8): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 613.113241][T25707] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 613.120298][T25707] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.4358: bg 0: block 15: invalid block bitmap [ 613.195163][T25707] loop8: lost filesystem error report for type 5 error -117 [ 613.195362][T25707] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 613.202727][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 613.202757][ C1] EXT4-fs (loop8): initial error at time 2000000040: ext4_validate_block_bitmap:432 [ 613.202806][ C1] EXT4-fs (loop8): last error at time 2000000040: ext4_validate_block_bitmap:432 [ 613.244531][T25707] loop8: lost filesystem error report for type 5 error -117 [ 613.244756][T25707] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #16: comm syz.8.4358: data will be lost [ 613.281672][T25707] EXT4-fs (loop8): 1 truncate cleaned up [ 613.348129][T25726] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4363'. [ 613.437912][T25733] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4362'. [ 613.446918][T25733] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4362'. [ 613.499589][ T28] audit: type=1326 audit(2000000040.321:6025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25725 comm="syz.9.4363" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d82bce59 code=0x7ffc0000 [ 613.546007][T25726] sg_write: data in/out 618496/132 bytes for SCSI command 0xff-- guessing data in; [ 613.546007][T25726] program syz.9.4363 not setting count and/or reply_len properly [ 613.574384][T25734] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4365'. [ 613.671420][T25732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4357'. [ 613.739156][ T28] audit: type=1326 audit(2000000040.321:6026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25725 comm="syz.9.4363" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d82bce59 code=0x7ffc0000 [ 613.875832][ T28] audit: type=1326 audit(2000000040.321:6027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25725 comm="syz.9.4363" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d82bce59 code=0x7ffc0000 [ 614.149237][T25746] loop8: detected capacity change from 0 to 512 [ 614.158487][T25454] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 614.178688][T25760] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4371'. [ 614.190588][T25746] EXT4-fs: Ignoring removed nobh option [ 614.206584][T25746] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 614.237091][T25746] EXT4-fs (loop8): 1 truncate cleaned up [ 614.253658][T25746] EXT4-fs (loop8): shut down requested (0) [ 614.360622][T25780] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4375'. [ 614.424096][T25780] sg_write: data in/out 684032/132 bytes for SCSI command 0xff-- guessing data in; [ 614.424096][T25780] program syz.9.4375 not setting count and/or reply_len properly [ 614.536190][T25783] loop7: detected capacity change from 0 to 512 [ 614.634670][T25783] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 614.680037][T25783] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 614.693523][T25783] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.4374: bad orphan inode 4 [ 614.704298][T25783] loop7: lost filesystem error report for type 5 error -117 [ 614.707247][T25783] EXT4-fs (loop7): 1 orphan inode deleted [ 614.715271][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 614.715422][ C1] EXT4-fs (loop7): initial error at time 2000000041: ext4_orphan_get:1423 [ 614.715784][ C1] EXT4-fs (loop7): last error at time 2000000041: ext4_orphan_get:1423 [ 614.768398][T25783] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #2: block 4: comm syz.7.4374: lblock 0 mapped to illegal pblock 4 (length 1) [ 615.166066][T25796] loop9: detected capacity change from 0 to 512 [ 615.219994][T25788] loop6: detected capacity change from 0 to 4096 [ 616.121204][T25796] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 616.135264][T25796] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 616.143674][T25796] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.4377: bad orphan inode 4 [ 616.153604][T25796] loop9: lost filesystem error report for type 5 error -117 [ 616.153861][T25796] EXT4-fs (loop9): 1 orphan inode deleted [ 616.175282][T25796] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #2: block 4: comm syz.9.4377: lblock 0 mapped to illegal pblock 4 (length 1) [ 616.218993][T25785] SELinux: policydb magic number 0x6f5f626d does not match expected magic number 0xf97cff8c [ 616.229229][T25785] SELinux: failed to load policy [ 616.587333][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 616.587348][ T28] audit: type=1400 audit(2000000043.173:6081): avc: denied { write } for pid=25822 comm="syz.6.4376" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 616.728025][T25827] random: crng reseeded on system resumption [ 616.789095][T25826] loop9: detected capacity change from 0 to 1764 [ 616.984236][ T28] audit: type=1400 audit(2000000043.542:6082): avc: denied { write } for pid=15754 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 617.010309][ T28] audit: type=1400 audit(2000000043.542:6083): avc: denied { rmdir } for pid=15754 comm="syz-executor" name="lost+found" dev="loop6" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 617.044089][ T28] audit: type=1400 audit(2000000043.542:6084): avc: denied { write } for pid=15754 comm="syz-executor" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 617.068965][ T28] audit: type=1400 audit(2000000043.542:6085): avc: denied { write } for pid=15754 comm="syz-executor" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 617.095901][ T28] audit: type=1400 audit(2000000043.542:6086): avc: denied { write } for pid=15754 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 617.190316][ T28] audit: type=1400 audit(2000000043.542:6087): avc: denied { write } for pid=15754 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 617.222625][ T28] audit: type=1400 audit(2000000043.542:6088): avc: denied { write } for pid=15754 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 617.302791][ T28] audit: type=1400 audit(2000000043.542:6089): avc: denied { write } for pid=15754 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 617.381413][ T28] audit: type=1400 audit(2000000043.542:6090): avc: denied { write } for pid=15754 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 617.459798][T25863] FAULT_INJECTION: forcing a failure. [ 617.459798][T25863] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 617.473038][T25863] CPU: 0 UID: 0 PID: 25863 Comm: syz.8.4386 Tainted: G W syzkaller #0 PREEMPT(full) [ 617.473079][T25863] Tainted: [W]=WARN [ 617.473088][T25863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 617.473103][T25863] Call Trace: [ 617.473161][T25863] [ 617.473169][T25863] __dump_stack+0x1d/0x30 [ 617.473197][T25863] dump_stack_lvl+0x95/0xd0 [ 617.473286][T25863] dump_stack+0x15/0x1b [ 617.473355][T25863] should_fail_ex+0x263/0x280 [ 617.473388][T25863] should_fail_alloc_page+0xf2/0x100 [ 617.473566][T25863] __alloc_frozen_pages_noprof+0x108/0x350 [ 617.473597][T25863] alloc_pages_mpol+0xb3/0x260 [ 617.473623][T25863] ? mod_lruvec_state+0x10c/0x120 [ 617.473744][T25863] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 617.473774][T25863] do_wp_page+0x70e/0x2040 [ 617.473804][T25863] ? _raw_spin_lock+0x52/0xa0 [ 617.473848][T25863] ? __rcu_read_lock+0x36/0x50 [ 617.473870][T25863] handle_mm_fault+0x8bb/0x2e70 [ 617.473916][T25863] ? vma_start_read+0x1c7/0x2c0 [ 617.473960][T25863] do_user_addr_fault+0x62f/0x1050 [ 617.473990][T25863] ? ksys_mmap_pgoff+0xc1/0x310 [ 617.474029][T25863] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 617.474121][T25863] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 617.474145][T25863] ? trace_page_fault_user+0x1f/0xa0 [ 617.474173][T25863] exc_page_fault+0x62/0xa0 [ 617.474253][T25863] asm_exc_page_fault+0x26/0x30 [ 617.474272][T25863] RIP: 0033:0x7f5b7c8b41d8 [ 617.474287][T25863] Code: 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 617.474303][T25863] RSP: 002b:00007f5b7b44e470 EFLAGS: 00010202 [ 617.474377][T25863] RAX: 0000000000006005 RBX: 00007f5b7b44e530 RCX: 0000000000000101 [ 617.474393][T25863] RDX: 00000000000000ff RSI: 0000000000000400 RDI: 00007f5b7b44e5d0 [ 617.474417][T25863] RBP: 0000000000000102 R08: 00007f5b7302f000 R09: 0000000000000004 [ 617.474438][T25863] R10: 0000200000002382 R11: 0000000000000437 R12: 0000000000000301 [ 617.474451][T25863] R13: 00007f5b7cab2900 R14: 0000000000000013 R15: 00007f5b7b44e5d0 [ 617.474473][T25863] [ 617.474483][T25863] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 617.743050][T25863] loop8: detected capacity change from 0 to 512 [ 617.749724][T25863] EXT4-fs: inline encryption not supported [ 617.759879][T25844] loop9: detected capacity change from 0 to 512 [ 617.766817][T25844] EXT4-fs: Ignoring removed oldalloc option [ 617.782445][T25844] EXT4-fs: Ignoring removed nobh option [ 617.788121][T25844] journal_path: Non-blockdev passed as './file2' [ 617.794867][T25863] journal_path: Non-blockdev passed as './file2' [ 617.801254][T25863] EXT4-fs: error: could not find journal device path [ 617.822360][T25844] EXT4-fs: error: could not find journal device path [ 618.127636][T25885] loop7: detected capacity change from 0 to 512 [ 618.166514][T25885] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 618.272316][T25904] loop8: detected capacity change from 0 to 512 [ 618.303158][T25906] loop9: detected capacity change from 0 to 512 [ 618.370620][T25906] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 618.388253][T25904] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 618.500552][T25939] loop9: detected capacity change from 0 to 512 [ 618.573986][T25942] loop7: detected capacity change from 0 to 512 [ 618.582489][T25942] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 618.782999][T25956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4399'. [ 618.811611][T25956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25956 comm=syz.0.4399 [ 619.485637][T25942] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 619.496364][T25942] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.4391: bad orphan inode 4 [ 619.506419][T25942] loop7: lost filesystem error report for type 5 error -117 [ 619.506653][T25942] EXT4-fs (loop7): 1 orphan inode deleted [ 619.529494][T25942] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #2: block 4: comm syz.7.4391: lblock 0 mapped to illegal pblock 4 (length 1) [ 619.564723][T25976] ext4 filesystem being mounted at /400/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 619.960735][T25939] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 620.069916][T25999] bio_check_eod: 13 callbacks suppressed [ 620.069935][T25999] syz.6.4404: attempt to access beyond end of device [ 620.069935][T25999] loop6: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 620.089466][T25999] syz.6.4404: attempt to access beyond end of device [ 620.089466][T25999] loop6: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 620.104990][T25999] buffer_io_error: 6 callbacks suppressed [ 620.105004][T25999] Buffer I/O error on dev loop6, logical block 156, lost async page write [ 620.145061][T26012] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 620.159564][T25999] syz.6.4404: attempt to access beyond end of device [ 620.159564][T25999] loop6: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 620.191127][T26012] EXT4-fs (loop7): 1 truncate cleaned up [ 620.207672][T25999] Buffer I/O error on dev loop6, logical block 157, lost async page write [ 620.239980][T25999] syz.6.4404: attempt to access beyond end of device [ 620.239980][T25999] loop6: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 620.253801][T25999] Buffer I/O error on dev loop6, logical block 158, lost async page write [ 620.262459][T25999] syz.6.4404: attempt to access beyond end of device [ 620.262459][T25999] loop6: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 620.275916][T25999] Buffer I/O error on dev loop6, logical block 159, lost async page write [ 620.284442][T25999] syz.6.4404: attempt to access beyond end of device [ 620.284442][T25999] loop6: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 620.299242][T25999] Buffer I/O error on dev loop6, logical block 160, lost async page write [ 620.308268][T25999] syz.6.4404: attempt to access beyond end of device [ 620.308268][T25999] loop6: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 620.322788][T25999] Buffer I/O error on dev loop6, logical block 161, lost async page write [ 620.331872][T26014] tmpfs: Bad value for 'nr_inodes' [ 620.337274][T25999] syz.6.4404: attempt to access beyond end of device [ 620.337274][T25999] loop6: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 620.353660][T25999] Buffer I/O error on dev loop6, logical block 150, lost async page write [ 620.382697][T26032] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4403'. [ 620.383285][T25999] syz.6.4404: attempt to access beyond end of device [ 620.383285][T25999] loop6: rw=2049, sector=151, nr_sectors = 1 limit=128 [ 620.396438][T26038] 9pnet_fd: Insufficient options for proto=fd [ 620.412074][T25999] Buffer I/O error on dev loop6, logical block 151, lost async page write [ 620.421436][T26034] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 620.453644][T25999] syz.6.4404: attempt to access beyond end of device [ 620.453644][T25999] loop6: rw=2049, sector=153, nr_sectors = 1 limit=128 [ 620.506472][T26042] Buffer I/O error on dev loop8, logical block 156, lost async page write [ 620.515058][T26042] Buffer I/O error on dev loop8, logical block 157, lost async page write [ 620.711680][T26063] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4413'. [ 620.734752][T26063] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4413'. [ 620.765337][T26063] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4413'. [ 620.789084][T26042] tmpfs: Bad value for 'nr_inodes' [ 620.799357][T26069] SELinux: policydb magic number 0xff does not match expected magic number 0xf97cff8c [ 620.827034][T26069] SELinux: failed to load policy [ 620.942240][T26071] set_capacity_and_notify: 6 callbacks suppressed [ 620.942256][T26071] loop9: detected capacity change from 0 to 512 [ 621.117294][T26071] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 621.129010][T26071] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 621.139138][T26071] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.4414: Corrupt directory, running e2fsck is recommended [ 621.155132][T26071] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 621.163451][T26071] EXT4-fs error (device loop9): ext4_iget_extra_inode:5128: inode #15: comm syz.9.4414: corrupted in-inode xattr: e_name out of bounds [ 621.177372][T26071] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 621.179089][T26071] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.4414: couldn't read orphan inode 15 (err -117) [ 621.188299][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 621.188336][ C0] EXT4-fs (loop9): initial error at time 2000000047: ext4_iget_extra_inode:5128: inode 15 [ 621.188375][ C0] EXT4-fs (loop9): last error at time 2000000047: ext4_iget_extra_inode:5128: inode 15 [ 621.226221][T26071] loop9: lost filesystem error report for type 5 error -117 [ 621.232393][T26071] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 621.251303][T26071] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 621.261446][T26071] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.4414: Corrupt directory, running e2fsck is recommended [ 622.946899][T25770] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 623.959504][T26082] loop6: detected capacity change from 0 to 512 [ 623.982414][T23621] EXT4-fs unmount: 51 callbacks suppressed [ 623.982442][T23621] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.005210][T26082] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 624.016901][T26082] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 624.027001][T26082] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.4415: Corrupt directory, running e2fsck is recommended [ 624.054779][T26082] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 624.113618][T26082] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.4415: corrupted in-inode xattr: e_name out of bounds [ 624.127554][T26082] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 624.143470][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 624.159057][ C1] EXT4-fs (loop6): initial error at time 2000000050: ext4_iget_extra_inode:5128: inode 15 [ 624.168996][ C1] EXT4-fs (loop6): last error at time 2000000050: ext4_iget_extra_inode:5128: inode 15 [ 624.197669][T26082] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.4415: couldn't read orphan inode 15 (err -117) [ 624.299607][T26082] loop6: lost filesystem error report for type 5 error -117 [ 624.306024][T26082] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 624.336837][T26082] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 624.348471][T26082] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 624.358676][T26082] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.4415: Corrupt directory, running e2fsck is recommended [ 624.623634][T26105] loop8: detected capacity change from 0 to 512 [ 624.899599][T26105] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 625.169059][T26105] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 625.177835][T26105] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.4417: bad orphan inode 4 [ 625.187925][T26105] loop8: lost filesystem error report for type 5 error -117 [ 625.188294][T26105] EXT4-fs (loop8): 1 orphan inode deleted [ 625.202399][T26105] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 625.219400][T26105] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #2: block 4: comm syz.8.4417: lblock 0 mapped to illegal pblock 4 (length 1) [ 625.233442][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 625.233499][ T28] audit: type=1400 audit(2000000051.145:6098): avc: denied { write } for pid=26097 comm="syz.8.4417" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 625.381169][ T28] audit: type=1400 audit(2000000051.292:6099): avc: denied { write } for pid=26080 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 625.478438][T15754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.600213][ T28] audit: type=1400 audit(2000000051.403:6100): avc: denied { write } for pid=26124 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 625.630613][T22672] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.656772][T26137] loop6: detected capacity change from 0 to 128 [ 625.664166][T26090] loop7: detected capacity change from 0 to 512 [ 625.696983][T26144] loop8: detected capacity change from 0 to 128 [ 625.733293][T26144] bio_check_eod: 15 callbacks suppressed [ 625.733341][T26144] syz.8.4422: attempt to access beyond end of device [ 625.733341][T26144] loop8: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 625.752740][T26144] syz.8.4422: attempt to access beyond end of device [ 625.752740][T26144] loop8: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 625.804373][T26147] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4420'. [ 625.813326][T26147] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4420'. [ 625.890517][T26144] buffer_io_error: 6 callbacks suppressed [ 625.890692][T26144] Buffer I/O error on dev loop8, logical block 156, lost async page write [ 625.905404][T26144] syz.8.4422: attempt to access beyond end of device [ 625.905404][T26144] loop8: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 625.920076][T26144] Buffer I/O error on dev loop8, logical block 157, lost async page write [ 625.929237][T26144] syz.8.4422: attempt to access beyond end of device [ 625.929237][T26144] loop8: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 625.943381][T26144] Buffer I/O error on dev loop8, logical block 158, lost async page write [ 625.952922][T26144] syz.8.4422: attempt to access beyond end of device [ 625.952922][T26144] loop8: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 625.994612][T26144] Buffer I/O error on dev loop8, logical block 159, lost async page write [ 626.028734][T26090] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.126476][T26090] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 626.157999][T26144] syz.8.4422: attempt to access beyond end of device [ 626.157999][T26144] loop8: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 626.231189][T26144] Buffer I/O error on dev loop8, logical block 160, lost async page write [ 626.239741][T26144] syz.8.4422: attempt to access beyond end of device [ 626.239741][T26144] loop8: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 626.253126][T26144] Buffer I/O error on dev loop8, logical block 161, lost async page write [ 626.261675][T26144] syz.8.4422: attempt to access beyond end of device [ 626.261675][T26144] loop8: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 626.275101][T26144] Buffer I/O error on dev loop8, logical block 150, lost async page write [ 626.283608][T26144] syz.8.4422: attempt to access beyond end of device [ 626.283608][T26144] loop8: rw=2049, sector=151, nr_sectors = 1 limit=128 [ 626.297008][T26144] Buffer I/O error on dev loop8, logical block 151, lost async page write [ 626.331330][T26149] tmpfs: Bad value for 'nr_inodes' [ 626.355641][T18562] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.432298][T26144] syz.8.4422: attempt to access beyond end of device [ 626.432298][T26144] loop8: rw=2049, sector=153, nr_sectors = 1 limit=128 [ 626.514299][ T28] audit: type=1400 audit(2000000052.298:6101): avc: denied { write } for pid=26154 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.574415][T26194] loop7: detected capacity change from 0 to 512 [ 626.609350][ T28] audit: type=1400 audit(2000000052.298:6102): avc: denied { write } for pid=26186 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.631759][T26195] syz.6.4426 (26195): attempted to duplicate a private mapping with mremap. This is not supported. [ 626.690431][T26203] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4425'. [ 626.730186][T26185] loop6: detected capacity change from 0 to 1764 [ 626.745108][T26194] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.779593][T26194] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 626.938907][ T28] audit: type=1400 audit(2000000052.723:6103): avc: denied { write } for pid=26193 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.964449][T26203] lo speed is unknown, defaulting to 1000 [ 627.006769][T18562] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.022440][ T28] audit: type=1400 audit(2000000052.806:6104): avc: denied { write } for pid=26240 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 627.056766][ T28] audit: type=1326 audit(2000000052.833:6105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26251 comm="syz.7.4430" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269aedce59 code=0x7ffc0000 [ 627.164095][ T28] audit: type=1326 audit(2000000052.833:6106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26251 comm="syz.7.4430" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269aedce59 code=0x7ffc0000 [ 627.211102][T26254] loop6: detected capacity change from 0 to 4096 [ 627.226863][T26254] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 627.302159][ T28] audit: type=1326 audit(2000000052.879:6107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26251 comm="syz.7.4430" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f269aedce59 code=0x7ffc0000 [ 627.414457][T26273] loop9: detected capacity change from 0 to 1024 [ 627.436803][T26269] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4441'. [ 627.486033][T26280] netlink: 128 bytes leftover after parsing attributes in process `syz.7.4432'. [ 628.089005][T26308] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4437'. [ 628.098002][T26308] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4437'. [ 628.304463][T26300] loop8: detected capacity change from 0 to 512 [ 628.393621][T26300] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 628.406118][T26300] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 628.439068][T22672] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.845176][T15754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.988669][T12172] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.087265][T26358] loop9: detected capacity change from 0 to 512 [ 629.134604][T26358] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 629.146183][T26358] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 629.156436][T26358] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.4442: Corrupt directory, running e2fsck is recommended [ 629.171993][T26358] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 629.181423][T26358] EXT4-fs error (device loop9): ext4_iget_extra_inode:5128: inode #15: comm syz.9.4442: corrupted in-inode xattr: e_name out of bounds [ 629.195315][T26358] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 629.196009][T26358] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.4442: couldn't read orphan inode 15 (err -117) [ 629.205176][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 629.205191][ C1] EXT4-fs (loop9): initial error at time 2000000054: ext4_iget_extra_inode:5128: inode 15 [ 629.205227][ C1] EXT4-fs (loop9): last error at time 2000000054: ext4_iget_extra_inode:5128: inode 15 [ 629.243076][T26358] loop9: lost filesystem error report for type 5 error -117 [ 629.249398][T26358] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.272693][T26358] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 629.284236][T26358] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 629.294418][T26358] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.4442: Corrupt directory, running e2fsck is recommended [ 629.423973][T26361] loop8: detected capacity change from 0 to 512 [ 629.521759][T26361] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.571194][T26347] loop6: detected capacity change from 0 to 512 [ 629.644818][T26361] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 629.775426][T26347] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.880292][T26347] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 630.127712][T26387] loop0: detected capacity change from 0 to 512 [ 630.149799][T22672] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.165808][T15754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.196265][T26387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.234483][T26387] ext4 filesystem being mounted at /401/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 630.749491][T26398] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4444'. [ 630.809611][T23621] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.961355][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 630.961376][ T28] audit: type=1400 audit(2000000056.423:6132): avc: denied { write } for pid=26388 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 631.179550][T26420] loop8: detected capacity change from 0 to 512 [ 631.192363][T26420] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 631.256260][T26420] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 631.266944][T26420] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.4445: bad orphan inode 4 [ 631.277581][T26420] loop8: lost filesystem error report for type 5 error -117 [ 631.285534][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 631.299306][ C0] EXT4-fs (loop8): initial error at time 2000000056: ext4_orphan_get:1423 [ 631.307857][ C0] EXT4-fs (loop8): last error at time 2000000056: ext4_orphan_get:1423 [ 632.055943][T26420] EXT4-fs (loop8): 1 orphan inode deleted [ 633.098626][T26364] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 633.105179][T26427] loop6: detected capacity change from 0 to 512 [ 633.144615][ T28] audit: type=1400 audit(2000000058.453:6133): avc: denied { write } for pid=26428 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 634.195124][T26427] EXT4-fs warning (device loop6): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop6. [ 634.256602][T26426] loop9: detected capacity change from 0 to 512 [ 634.284803][T26420] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.422392][T26426] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 634.435823][T26426] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 634.436583][T26426] EXT4-fs: failed to create workqueue [ 634.473384][T26426] EXT4-fs (loop9): mount failed [ 634.556584][T22672] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.574912][T26448] loop9: detected capacity change from 0 to 512 [ 634.585545][T26448] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 634.602653][T26448] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349) [ 634.632078][T26448] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec029, mo2=0002] [ 634.658688][T26448] System zones: 1-12 [ 634.667081][T26448] EXT4-fs (loop9): orphan cleanup on readonly fs [ 634.688784][T26457] loop8: detected capacity change from 0 to 128 [ 634.695579][T26448] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:517: comm syz.9.4451: Block bitmap for bg 0 marked uninitialized [ 634.708703][T26448] loop9: lost filesystem error report for type 5 error -117 [ 634.758072][T26448] EXT4-fs (loop9): Remounting filesystem read-only [ 634.771943][T26448] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 634.784958][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 634.784993][ C0] EXT4-fs (loop9): initial error at time 2000000059: ext4_read_block_bitmap_nowait:517 [ 634.785018][ C0] EXT4-fs (loop9): last error at time 2000000059: ext4_read_block_bitmap_nowait:517 [ 634.818089][T26457] bio_check_eod: 1 callbacks suppressed [ 634.818118][T26457] syz.8.4449: attempt to access beyond end of device [ 634.818118][T26457] loop8: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 634.838968][T26448] EXT4-fs (loop9): 1 truncate cleaned up [ 634.845210][T26448] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 634.858172][T26457] syz.8.4449: attempt to access beyond end of device [ 634.858172][T26457] loop8: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 634.891963][T23621] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.908515][T26457] Buffer I/O error on dev loop8, logical block 156, lost async page write [ 634.936010][ T28] audit: type=1400 audit(2000000060.104:6134): avc: denied { create } for pid=26464 comm="syz.9.4452" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=socket permissive=1 [ 634.968271][T26457] syz.8.4449: attempt to access beyond end of device [ 634.968271][T26457] loop8: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 634.988596][T26460] tmpfs: Bad value for 'nr_inodes' [ 634.995477][T26457] Buffer I/O error on dev loop8, logical block 157, lost async page write [ 635.011906][T26460] syz.8.4449: attempt to access beyond end of device [ 635.011906][T26460] loop8: rw=2049, sector=153, nr_sectors = 1 limit=128 [ 635.025894][T26457] syz.8.4449: attempt to access beyond end of device [ 635.025894][T26457] loop8: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 635.040791][T26460] syz.8.4449: attempt to access beyond end of device [ 635.040791][T26460] loop8: rw=2049, sector=153, nr_sectors = 1 limit=128 [ 635.059633][ T28] audit: type=1400 audit(2000000060.224:6135): avc: denied { create } for pid=26464 comm="syz.9.4452" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 635.089394][T26457] Buffer I/O error on dev loop8, logical block 158, lost async page write [ 635.105990][T26457] syz.8.4449: attempt to access beyond end of device [ 635.105990][T26457] loop8: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 635.125809][ T28] audit: type=1400 audit(2000000060.252:6136): avc: denied { ioctl } for pid=26464 comm="syz.9.4452" path="socket:[58720]" dev="sockfs" ino=58720 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 635.159726][T26457] Buffer I/O error on dev loop8, logical block 159, lost async page write [ 635.182075][T26457] syz.8.4449: attempt to access beyond end of device [ 635.182075][T26457] loop8: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 635.217774][T26457] Buffer I/O error on dev loop8, logical block 160, lost async page write [ 635.239396][T26457] syz.8.4449: attempt to access beyond end of device [ 635.239396][T26457] loop8: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 635.271167][T26457] Buffer I/O error on dev loop8, logical block 161, lost async page write [ 635.290422][T26457] syz.8.4449: attempt to access beyond end of device [ 635.290422][T26457] loop8: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 635.320578][T26457] Buffer I/O error on dev loop8, logical block 150, lost async page write [ 635.340234][T26457] Buffer I/O error on dev loop8, logical block 151, lost async page write [ 635.547031][T26475] loop8: detected capacity change from 0 to 736 [ 635.868657][T26479] loop6: detected capacity change from 0 to 128 [ 635.907569][T26482] loop9: detected capacity change from 0 to 1764 [ 636.471572][T26508] loop9: detected capacity change from 0 to 4096 [ 636.518730][T26508] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.537775][ T28] audit: type=1400 audit(2000000061.590:6137): avc: denied { write } for pid=26481 comm="syz.9.4454" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 636.927699][ T28] audit: type=1400 audit(2000000061.950:6138): avc: denied { write } for pid=26503 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 637.031777][ T28] audit: type=1400 audit(2000000061.996:6139): avc: denied { write } for pid=26523 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 637.053996][T26490] loop6: detected capacity change from 0 to 512 [ 637.125104][T23621] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.302880][ T28] audit: type=1400 audit(2000000062.300:6140): avc: denied { write } for pid=26525 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 637.342664][ T28] audit: type=1400 audit(2000000062.328:6141): avc: denied { write } for pid=26549 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 637.350278][T26490] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.377231][T26490] ext4 filesystem being mounted at /270/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 637.507221][T26551] loop7: detected capacity change from 0 to 512 [ 637.561778][T15754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.578386][T26551] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 637.589889][T26551] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 637.599982][T26551] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4458: Corrupt directory, running e2fsck is recommended [ 637.614674][T26551] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 637.627204][T26551] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.4458: corrupted in-inode xattr: e_name out of bounds [ 637.641121][T26551] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 637.641503][T26551] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.4458: couldn't read orphan inode 15 (err -117) [ 637.662462][T26551] loop7: lost filesystem error report for type 5 error -117 [ 637.664506][T26551] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.695419][T26551] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 637.706954][T26551] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 637.717131][T26551] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4458: Corrupt directory, running e2fsck is recommended [ 638.252304][T26559] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4457'. [ 638.484671][T26559] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4457'. [ 638.530221][T26473] syz.8.4453 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 638.544454][T26473] CPU: 1 UID: 0 PID: 26473 Comm: syz.8.4453 Tainted: G W syzkaller #0 PREEMPT(full) [ 638.544564][T26473] Tainted: [W]=WARN [ 638.544571][T26473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 638.544589][T26473] Call Trace: [ 638.544598][T26473] [ 638.544609][T26473] __dump_stack+0x1d/0x30 [ 638.544637][T26473] dump_stack_lvl+0x95/0xd0 [ 638.544658][T26473] dump_stack+0x15/0x1b [ 638.544699][T26473] dump_header+0x80/0x240 [ 638.544728][T26473] oom_kill_process+0x295/0x350 [ 638.544773][T26473] out_of_memory+0x97d/0xb80 [ 638.544845][T26473] try_charge_memcg+0x62f/0xa10 [ 638.544892][T26473] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 638.544923][T26473] __alloc_frozen_pages_noprof+0x18a/0x350 [ 638.544953][T26473] alloc_pages_mpol+0xb3/0x260 [ 638.545001][T26473] alloc_pages_noprof+0x8f/0x140 [ 638.545048][T26473] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 638.545082][T26473] __kvmalloc_node_noprof+0x3d4/0x640 [ 638.545111][T26473] ? futex_hash_allocate+0x190/0x9a0 [ 638.545155][T26473] ? futex_hash_allocate+0x190/0x9a0 [ 638.545264][T26473] futex_hash_allocate+0x190/0x9a0 [ 638.545297][T26473] ? cap_task_prctl+0x13f/0x6b0 [ 638.545325][T26473] futex_hash_prctl+0xd8/0xf0 [ 638.545440][T26473] __se_sys_prctl+0x4f4/0x1400 [ 638.545484][T26473] __x64_sys_prctl+0x67/0x80 [ 638.545510][T26473] x64_sys_call+0x2533/0x3020 [ 638.545535][T26473] do_syscall_64+0x12c/0x3b0 [ 638.545581][T26473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.545603][T26473] RIP: 0033:0x7f5b7c9fce59 [ 638.545618][T26473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.545704][T26473] RSP: 002b:00007f5b7b44f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 638.545723][T26473] RAX: ffffffffffffffda RBX: 00007f5b7cc75fa0 RCX: 00007f5b7c9fce59 [ 638.545771][T26473] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 638.545783][T26473] RBP: 00007f5b7ca92d6f R08: 0000000000000000 R09: 0000000000000000 [ 638.545795][T26473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 638.545807][T26473] R13: 00007f5b7cc76038 R14: 00007f5b7cc75fa0 R15: 00007ffdea46ee08 [ 638.545844][T26473] [ 639.025312][T26565] random: crng reseeded on system resumption [ 639.025720][T26473] memory: usage 188896kB, limit 307200kB, failcnt 1029 [ 639.081417][T26473] memory+swap: usage 182536kB, limit 9007199254740988kB, failcnt 0 [ 639.172167][T26473] kmem: usage 152228kB, limit 9007199254740988kB, failcnt 0 [ 639.192031][T26473] Memory cgroup stats for /syz8: [ 639.192369][T26473] cache 0 [ 639.216869][T26473] rss 5255168 [ 639.220284][T26473] shmem 0 [ 639.267479][T26572] loop9: detected capacity change from 0 to 1024 [ 639.285947][T26473] mapped_file 0 [ 639.289435][T26473] dirty 0 [ 639.292376][T26473] writeback 0 [ 639.295839][T26473] workingset_refault_anon 2345 [ 639.300625][T26473] workingset_refault_file 0 [ 639.305139][T26473] swap 7065600 [ 639.308570][T26473] swapcached 18944000 [ 639.340192][T18562] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.359861][T26572] EXT4-fs: test_dummy_encryption option not supported [ 639.404607][T26473] pgpgin 461397 [ 639.418035][T26473] pgpgout 460110 [ 639.430350][T26473] pgfault 456023 [ 639.453141][T26473] pgmajfault 310 [ 639.456716][T26473] inactive_anon 0 [ 639.467247][T26473] active_anon 28672 [ 639.471140][T26473] inactive_file 0 [ 639.474802][T26473] active_file 4096 [ 639.478653][T26473] unevictable 5238784 [ 639.482652][T26473] hierarchical_memory_limit 314572800 [ 639.488024][T26473] hierarchical_memsw_limit 9223372036854771712 [ 639.494242][T26473] total_cache 0 [ 639.497729][T26473] total_rss 5255168 [ 639.501663][T26473] total_shmem 0 [ 639.505174][T26473] total_mapped_file 0 [ 639.509173][T26473] total_dirty 0 [ 639.512870][T26473] total_writeback 0 [ 639.516746][T26473] total_workingset_refault_anon 2345 [ 639.522062][T26473] total_workingset_refault_file 0 [ 639.527124][T26473] total_swap 7065600 [ 639.531148][T26473] total_swapcached 18944000 [ 639.535732][T26473] total_pgpgin 461397 [ 639.539726][T26473] total_pgpgout 460110 [ 639.543976][T26473] total_pgfault 456023 [ 639.548122][T26473] total_pgmajfault 310 [ 639.552205][T26473] total_inactive_anon 0 [ 639.556415][T26473] total_active_anon 28672 [ 639.560774][T26473] total_inactive_file 0 [ 639.565213][T26473] total_active_file 4096 [ 639.590041][T26473] total_unevictable 5238784 [ 639.603277][T26473] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.4453,pid=26472,uid=0 [ 639.635495][T26473] Memory cgroup out of memory: Killed process 26473 (syz.8.4453) total-vm:96348kB, anon-rss:6368kB, file-rss:22560kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 639.664832][T12172] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.676568][T26582] loop7: detected capacity change from 0 to 512 [ 639.732310][T26582] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.746202][T26582] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 639.758052][T26595] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4464'. [ 639.783079][T18562] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.864295][T26608] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 639.934218][T26611] sg_write: data in/out 487424/132 bytes for SCSI command 0xff-- guessing data in; [ 639.934218][T26611] program syz.8.4467 not setting count and/or reply_len properly [ 639.962697][T26616] loop9: detected capacity change from 0 to 128 [ 639.969167][T26595] loop0: detected capacity change from 0 to 512 [ 640.033678][T26616] Buffer I/O error on dev loop9, logical block 156, lost async page write [ 640.047165][T26616] Buffer I/O error on dev loop9, logical block 157, lost async page write [ 640.060675][T26595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.073304][T26595] ext4 filesystem being mounted at /402/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 640.120810][T26616] tmpfs: Bad value for 'nr_inodes' [ 640.156165][T26640] loop7: detected capacity change from 0 to 512 [ 640.211279][T26640] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.230980][T12172] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.278425][T26640] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 640.295482][T26655] loop6: detected capacity change from 0 to 1024 [ 640.308286][T26655] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4473'. [ 640.308390][T26666] loop8: detected capacity change from 0 to 128 [ 640.353306][ T28] audit: type=1400 audit(2000000065.105:6142): avc: denied { write } for pid=26638 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 640.383869][T26666] bio_check_eod: 12 callbacks suppressed [ 640.383889][T26666] syz.8.4475: attempt to access beyond end of device [ 640.383889][T26666] loop8: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 640.418235][T18562] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.430991][T26666] syz.8.4475: attempt to access beyond end of device [ 640.430991][T26666] loop8: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 640.442025][ T28] audit: type=1400 audit(2000000065.105:6143): avc: denied { write } for pid=26681 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 640.444405][T26666] buffer_io_error: 6 callbacks suppressed [ 640.444433][T26666] Buffer I/O error on dev loop8, logical block 156, lost async page write [ 640.542789][T26666] syz.8.4475: attempt to access beyond end of device [ 640.542789][T26666] loop8: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 640.561819][T26666] Buffer I/O error on dev loop8, logical block 157, lost async page write [ 640.570400][T26666] syz.8.4475: attempt to access beyond end of device [ 640.570400][T26666] loop8: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 640.583879][T26666] Buffer I/O error on dev loop8, logical block 158, lost async page write [ 640.592432][T26666] syz.8.4475: attempt to access beyond end of device [ 640.592432][T26666] loop8: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 640.639137][T26666] Buffer I/O error on dev loop8, logical block 159, lost async page write [ 640.647657][T26666] syz.8.4475: attempt to access beyond end of device [ 640.647657][T26666] loop8: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 640.662353][T26705] tmpfs: Bad value for 'nr_inodes' [ 640.688419][T26705] syz.8.4475: attempt to access beyond end of device [ 640.688419][T26705] loop8: rw=2049, sector=153, nr_sectors = 1 limit=128 [ 640.703372][T26714] loop0: detected capacity change from 0 to 512 [ 640.715131][ T28] audit: type=1400 audit(2000000065.419:6144): avc: denied { write } for pid=26686 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 640.745637][T26718] syz.8.4475: attempt to access beyond end of device [ 640.745637][T26718] loop8: rw=2049, sector=153, nr_sectors = 1 limit=128 [ 640.760749][T26666] Buffer I/O error on dev loop8, logical block 160, lost async page write [ 640.779024][T26666] syz.8.4475: attempt to access beyond end of device [ 640.779024][T26666] loop8: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 640.801582][T26723] loop7: detected capacity change from 0 to 512 [ 640.810005][T26714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.822577][T26714] ext4 filesystem being mounted at /404/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 640.835137][ T28] audit: type=1400 audit(2000000065.502:6145): avc: denied { write } for pid=26719 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 640.858031][T26666] Buffer I/O error on dev loop8, logical block 161, lost async page write [ 640.866683][T26666] syz.8.4475: attempt to access beyond end of device [ 640.866683][T26666] loop8: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 640.880130][T26666] Buffer I/O error on dev loop8, logical block 150, lost async page write [ 640.889682][T26666] Buffer I/O error on dev loop8, logical block 151, lost async page write [ 640.911164][T12172] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.933077][T26723] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.971789][T26723] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 641.190168][T18562] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.215545][ T28] audit: type=1400 audit(2000000065.853:6146): avc: denied { write } for pid=26737 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 641.241739][T26767] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4483'. [ 641.278871][T26760] loop9: detected capacity change from 0 to 512 [ 641.449105][T26787] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 641.473410][T26788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 641.515430][T26760] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 641.535359][T26787] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 641.556258][T26760] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 641.568180][T26788] ext4 filesystem being mounted at /406/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 641.641337][T22672] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.649918][T26819] netlink: 136 bytes leftover after parsing attributes in process `syz.6.4485'. [ 641.664941][T12172] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.710001][T26829] FAULT_INJECTION: forcing a failure. [ 641.710001][T26829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.728585][T26820] random: crng reseeded on system resumption [ 641.750852][T26829] CPU: 0 UID: 0 PID: 26829 Comm: syz.0.4488 Tainted: G W syzkaller #0 PREEMPT(full) [ 641.750925][T26829] Tainted: [W]=WARN [ 641.750932][T26829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 641.750946][T26829] Call Trace: [ 641.750953][T26829] [ 641.750979][T26829] __dump_stack+0x1d/0x30 [ 641.751038][T26829] dump_stack_lvl+0x95/0xd0 [ 641.751063][T26829] dump_stack+0x15/0x1b [ 641.751084][T26829] should_fail_ex+0x263/0x280 [ 641.751117][T26829] should_fail+0xb/0x20 [ 641.751207][T26829] should_fail_usercopy+0x1a/0x20 [ 641.751241][T26829] _copy_from_user+0x1c/0xb0 [ 641.751342][T26829] kstrtouint_from_user+0x69/0xf0 [ 641.751369][T26829] ? 0xffffffff81000000 [ 641.751383][T26829] ? selinux_file_permission+0x1e1/0x320 [ 641.751423][T26829] proc_fail_nth_write+0x50/0x160 [ 641.751456][T26829] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 641.751550][T26829] vfs_write+0x269/0x9f0 [ 641.751619][T26829] ? __rcu_read_unlock+0x4e/0x70 [ 641.751642][T26829] ? __fget_files+0x184/0x1c0 [ 641.751663][T26829] ? mutex_lock+0x57/0x90 [ 641.751689][T26829] ksys_write+0xdc/0x1a0 [ 641.751757][T26829] __x64_sys_write+0x40/0x50 [ 641.751790][T26829] x64_sys_call+0x27e1/0x3020 [ 641.751897][T26829] do_syscall_64+0x12c/0x3b0 [ 641.751930][T26829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.751954][T26829] RIP: 0033:0x7f01c18dd68e [ 641.752032][T26829] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 641.752052][T26829] RSP: 002b:00007f01c036efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 641.752118][T26829] RAX: ffffffffffffffda RBX: 00007f01c036f6c0 RCX: 00007f01c18dd68e [ 641.752134][T26829] RDX: 0000000000000001 RSI: 00007f01c036f0a0 RDI: 0000000000000005 [ 641.752160][T26829] RBP: 00007f01c036f090 R08: 0000000000000000 R09: 0000000000000000 [ 641.752173][T26829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.752185][T26829] R13: 00007f01c1b96038 R14: 00007f01c1b95fa0 R15: 00007ffc57f30758 [ 641.752205][T26829] [ 641.761541][T23621] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.930220][T26842] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4489'. [ 642.198384][T26866] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4496'. [ 642.249121][T26875] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4497'. [ 642.295943][T26879] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4498'. [ 642.351137][T26882] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.373459][T26882] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 642.410851][T26890] random: crng reseeded on system resumption [ 642.487042][T23621] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.607400][T26908] FAULT_INJECTION: forcing a failure. [ 642.607400][T26908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 642.620872][T26908] CPU: 0 UID: 0 PID: 26908 Comm: syz.0.4502 Tainted: G W syzkaller #0 PREEMPT(full) [ 642.620946][T26908] Tainted: [W]=WARN [ 642.621008][T26908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 642.621026][T26908] Call Trace: [ 642.621033][T26908] [ 642.621042][T26908] __dump_stack+0x1d/0x30 [ 642.621074][T26908] dump_stack_lvl+0x95/0xd0 [ 642.621170][T26908] dump_stack+0x15/0x1b [ 642.621197][T26908] should_fail_ex+0x263/0x280 [ 642.621238][T26908] should_fail+0xb/0x20 [ 642.621354][T26908] should_fail_usercopy+0x1a/0x20 [ 642.621467][T26908] _copy_from_user+0x1c/0xb0 [ 642.621509][T26908] ___sys_sendmsg+0xc1/0x1e0 [ 642.621586][T26908] __x64_sys_sendmsg+0xd4/0x160 [ 642.621616][T26908] x64_sys_call+0x194c/0x3020 [ 642.621657][T26908] do_syscall_64+0x12c/0x3b0 [ 642.621767][T26908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.621796][T26908] RIP: 0033:0x7f01c191ce59 [ 642.621817][T26908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.621841][T26908] RSP: 002b:00007f01c036f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 642.621890][T26908] RAX: ffffffffffffffda RBX: 00007f01c1b95fa0 RCX: 00007f01c191ce59 [ 642.621909][T26908] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000007 [ 642.621924][T26908] RBP: 00007f01c036f090 R08: 0000000000000000 R09: 0000000000000000 [ 642.621976][T26908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.621990][T26908] R13: 00007f01c1b96038 R14: 00007f01c1b95fa0 R15: 00007ffc57f30758 [ 642.622011][T26908] [ 642.632499][T26879] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.852219][T26879] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 642.946612][T15754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.481473][T26973] sg_write: data in/out 487424/132 bytes for SCSI command 0xff-- guessing data in; [ 643.481473][T26973] program syz.7.4516 not setting count and/or reply_len properly [ 643.516494][T26976] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.547574][T26976] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 643.641438][T23621] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.838125][T26992] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.877477][T26992] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 643.926951][T26997] __nla_validate_parse: 2 callbacks suppressed [ 643.927035][T26997] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4520'. [ 644.014677][T18562] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.023992][T27009] random: crng reseeded on system resumption [ 644.134117][T27020] 9p: Bad value for 'rfdno' [ 644.156338][T27020] netlink: 112 bytes leftover after parsing attributes in process `syz.7.4522'. [ 644.173186][T27020] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4522'. [ 644.302877][T27020] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4522'. [ 644.633867][T27031] netlink: 399 bytes leftover after parsing attributes in process `syz.8.4524'. [ 644.659381][T27031] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 644.696014][T27031] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 645.977591][T27052] set_capacity_and_notify: 11 callbacks suppressed [ 645.977613][T27052] loop8: detected capacity change from 0 to 512 [ 646.980408][T27052] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.017765][T27052] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 647.075143][T27068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58384 sclass=netlink_route_socket pid=27068 comm=syz.7.4531 [ 647.130729][T27081] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4533'. [ 647.144934][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 647.144949][ T28] audit: type=1400 audit(2000000071.380:6150): avc: denied { write } for pid=27055 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 647.219385][T22672] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.231883][T27081] loop9: detected capacity change from 0 to 512 [ 647.249331][ T28] audit: type=1400 audit(2000000071.463:6151): avc: denied { write } for pid=27084 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 647.341246][T27100] loop7: detected capacity change from 0 to 128 [ 647.355283][T27081] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.374206][T27081] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 647.489816][T23621] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.514569][T27117] sg_write: data in/out 487424/132 bytes for SCSI command 0xff-- guessing data in; [ 647.514569][T27117] program syz.6.4529 not setting count and/or reply_len properly [ 647.618572][T27125] loop0: detected capacity change from 0 to 512 [ 647.630496][T27125] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 647.690365][ T28] audit: type=1400 audit(2000000071.869:6152): avc: denied { write } for pid=27089 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 647.738822][T27125] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 647.753115][T27125] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.4536: bad orphan inode 4 [ 647.764102][T27125] loop0: lost filesystem error report for type 5 error -117 [ 647.765253][T27125] EXT4-fs (loop0): 1 orphan inode deleted [ 647.773295][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 647.773349][ C0] EXT4-fs (loop0): initial error at time 2000000071: ext4_orphan_get:1423 [ 647.773661][ C0] EXT4-fs (loop0): last error at time 2000000071: ext4_orphan_get:1423 [ 647.804064][T27125] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.819843][T27125] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 4: comm syz.0.4536: lblock 0 mapped to illegal pblock 4 (length 1) [ 647.935237][ T28] audit: type=1400 audit(2000000071.961:6153): avc: denied { write } for pid=27098 comm="syz.0.4536" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 648.189175][ T28] audit: type=1400 audit(2000000072.339:6154): avc: denied { write } for pid=27136 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.299467][T27141] loop9: detected capacity change from 0 to 512 [ 648.569757][T27149] loop6: detected capacity change from 0 to 128 [ 648.598809][T27141] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 648.626506][T12172] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.657554][T27141] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 648.672456][T27141] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.4537: bad orphan inode 4 [ 648.683376][T27141] loop9: lost filesystem error report for type 5 error -117 [ 648.684384][T27141] EXT4-fs (loop9): 1 orphan inode deleted [ 648.692367][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 648.692430][ C1] EXT4-fs (loop9): initial error at time 2000000072: ext4_orphan_get:1423 [ 648.692624][ C1] EXT4-fs (loop9): last error at time 2000000072: ext4_orphan_get:1423 [ 648.734455][T27141] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 648.768737][T27141] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #2: block 4: comm syz.9.4537: lblock 0 mapped to illegal pblock 4 (length 1) [ 648.892991][ T28] audit: type=1400 audit(2000000072.865:6155): avc: denied { write } for pid=27134 comm="syz.9.4537" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 649.060740][T27164] loop0: detected capacity change from 0 to 512 [ 649.074920][T27164] EXT4-fs: dax option not supported [ 649.347700][T23621] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.644398][T27177] random: crng reseeded on system resumption [ 649.812507][T27195] loop9: detected capacity change from 0 to 512 [ 649.820430][T27195] EXT4-fs: Ignoring removed bh option [ 649.826523][T27195] EXT4-fs: inline encryption not supported [ 649.852758][T27195] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 649.897097][T27189] loop8: detected capacity change from 0 to 512 [ 649.913055][T27195] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 649.997423][T27189] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 650.008461][T27195] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4546: bg 0: block 248: padding at end of block bitmap is not set [ 650.069493][T27195] loop9: lost filesystem error report for type 5 error -117 [ 650.072349][T27195] Quota error (device loop9): write_blk: dquota write failed [ 650.087460][T27195] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 650.097349][T27195] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.4546: Failed to acquire dquot type 1 [ 650.108715][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 650.108737][ C0] EXT4-fs (loop9): last error at time 2000000074: ext4_validate_block_bitmap:441 [ 650.125964][T27195] loop9: lost filesystem error report for type 5 error -28 [ 650.165454][T27195] EXT4-fs (loop9): 1 truncate cleaned up [ 650.222840][ T28] audit: type=1400 audit(2000000074.203:6156): avc: denied { write } for pid=27205 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 650.365077][T27217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.379885][ T28] audit: type=1400 audit(2000000074.332:6157): avc: denied { write } for pid=27248 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 650.403578][T27217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.445129][T27258] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4553'. [ 650.506549][T27260] loop0: detected capacity change from 0 to 128 [ 650.553715][T27261] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 650.568396][T27261] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 650.576863][T27261] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.4551: bad orphan inode 4 [ 650.586851][T27261] loop8: lost filesystem error report for type 5 error -117 [ 650.587031][T27261] EXT4-fs (loop8): 1 orphan inode deleted [ 650.604750][T27261] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #2: block 4: comm syz.8.4551: lblock 0 mapped to illegal pblock 4 (length 1) [ 650.740422][T27260] ext4 filesystem being mounted at /427/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 651.014121][T27281] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4554'. [ 651.090931][T27297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4556'. [ 651.092290][T27258] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 651.099842][T27297] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4556'. [ 651.134404][T27296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4556'. [ 651.143567][T27296] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4556'. [ 651.169673][T27304] sg_write: data in/out 487424/132 bytes for SCSI command 0xff-- guessing data in; [ 651.169673][T27304] program syz.9.4557 not setting count and/or reply_len properly [ 651.290260][T27281] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 651.477298][T27342] set_capacity_and_notify: 5 callbacks suppressed [ 651.477317][T27342] loop0: detected capacity change from 0 to 128 [ 651.504373][T27345] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4563'. [ 651.517191][T27342] bio_check_eod: 1 callbacks suppressed [ 651.517208][T27342] syz.0.4562: attempt to access beyond end of device [ 651.517208][T27342] loop0: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 651.536254][T27342] syz.0.4562: attempt to access beyond end of device [ 651.536254][T27342] loop0: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 651.555337][T27342] Buffer I/O error on dev loop0, logical block 156, lost async page write [ 651.560259][T27310] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 651.567192][T27342] syz.0.4562: attempt to access beyond end of device [ 651.567192][T27342] loop0: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 651.587800][T27342] Buffer I/O error on dev loop0, logical block 157, lost async page write [ 651.596563][T27342] syz.0.4562: attempt to access beyond end of device [ 651.596563][T27342] loop0: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 651.609981][T27342] Buffer I/O error on dev loop0, logical block 158, lost async page write [ 651.618499][T27342] syz.0.4562: attempt to access beyond end of device [ 651.618499][T27342] loop0: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 651.631944][T27342] Buffer I/O error on dev loop0, logical block 159, lost async page write [ 651.640464][T27342] syz.0.4562: attempt to access beyond end of device [ 651.640464][T27342] loop0: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 651.653844][T27342] Buffer I/O error on dev loop0, logical block 160, lost async page write [ 651.662584][T27342] syz.0.4562: attempt to access beyond end of device [ 651.662584][T27342] loop0: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 651.680774][T27342] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 651.689515][T27342] syz.0.4562: attempt to access beyond end of device [ 651.689515][T27342] loop0: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 651.707397][T27342] Buffer I/O error on dev loop0, logical block 150, lost async page write [ 651.715989][T27342] syz.0.4562: attempt to access beyond end of device [ 651.715989][T27342] loop0: rw=2049, sector=151, nr_sectors = 1 limit=128 [ 651.729457][T27342] Buffer I/O error on dev loop0, logical block 151, lost async page write [ 651.740757][T27355] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4564'. [ 651.754277][T27342] tmpfs: Bad value for 'nr_inodes' [ 651.761783][T27355] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4564'. [ 651.773756][T27342] syz.0.4562: attempt to access beyond end of device [ 651.773756][T27342] loop0: rw=2049, sector=153, nr_sectors = 1 limit=128 [ 651.812356][T27361] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4567'. [ 651.837900][T27361] loop9: detected capacity change from 0 to 512 [ 651.885905][T27372] netlink: 'syz.7.4565': attribute type 14 has an invalid length. [ 651.889485][T27361] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 651.917629][T27372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.989497][T27358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.007802][T27358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.089988][T27392] FAULT_INJECTION: forcing a failure. [ 652.089988][T27392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 652.103669][T27392] CPU: 0 UID: 0 PID: 27392 Comm: syz.9.4572 Tainted: G W syzkaller #0 PREEMPT(full) [ 652.103701][T27392] Tainted: [W]=WARN [ 652.103708][T27392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 652.103721][T27392] Call Trace: [ 652.103728][T27392] [ 652.103817][T27392] __dump_stack+0x1d/0x30 [ 652.103844][T27392] dump_stack_lvl+0x95/0xd0 [ 652.103867][T27392] dump_stack+0x15/0x1b [ 652.103887][T27392] should_fail_ex+0x263/0x280 [ 652.103997][T27392] should_fail+0xb/0x20 [ 652.104025][T27392] should_fail_usercopy+0x1a/0x20 [ 652.104059][T27392] _copy_to_user+0x20/0xa0 [ 652.104094][T27392] simple_read_from_buffer+0xb5/0x130 [ 652.104147][T27392] proc_fail_nth_read+0x10e/0x150 [ 652.104180][T27392] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 652.104212][T27392] vfs_read+0x1ab/0x7f0 [ 652.104316][T27392] ? __sys_bpf+0x557/0x7e0 [ 652.104354][T27392] ksys_read+0xdc/0x1a0 [ 652.104384][T27392] __x64_sys_read+0x40/0x50 [ 652.104412][T27392] x64_sys_call+0x2886/0x3020 [ 652.104443][T27392] do_syscall_64+0x12c/0x3b0 [ 652.104475][T27392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.104498][T27392] RIP: 0033:0x7f20d827d68e [ 652.104514][T27392] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 652.104601][T27392] RSP: 002b:00007f20d6d16fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 652.104622][T27392] RAX: ffffffffffffffda RBX: 00007f20d6d176c0 RCX: 00007f20d827d68e [ 652.104637][T27392] RDX: 000000000000000f RSI: 00007f20d6d170a0 RDI: 0000000000000006 [ 652.104650][T27392] RBP: 00007f20d6d17090 R08: 0000000000000000 R09: 0000000000000000 [ 652.104663][T27392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.104726][T27392] R13: 00007f20d8536038 R14: 00007f20d8535fa0 R15: 00007ffe2958bec8 [ 652.104746][T27392] [ 652.374928][T27396] loop9: detected capacity change from 0 to 512 [ 652.384014][T27396] EXT4-fs: Ignoring removed mblk_io_submit option [ 652.410451][T27398] loop6: detected capacity change from 0 to 512 [ 652.504663][T27398] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 652.566070][T27398] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 652.584158][T27398] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.4570: bad orphan inode 4 [ 652.595954][T27398] loop6: lost filesystem error report for type 5 error -117 [ 652.597465][T27398] EXT4-fs (loop6): 1 orphan inode deleted [ 652.605271][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 652.605316][ C1] EXT4-fs (loop6): initial error at time 2000000076: ext4_orphan_get:1423 [ 652.605456][ C1] EXT4-fs (loop6): last error at time 2000000076: ext4_orphan_get:1423 [ 652.645885][T27398] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #2: block 4: comm syz.6.4570: lblock 0 mapped to illegal pblock 4 (length 1) [ 652.660285][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 652.660296][ T28] audit: type=1400 audit(2000000076.445:6163): avc: denied { write } for pid=27378 comm="syz.6.4570" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 652.722997][T27396] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 652.734508][T27396] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 652.790046][T27396] EXT4-fs (loop9): orphan cleanup on readonly fs [ 652.808998][T27396] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.4573: Invalid block bitmap block 0 in block_group 0 [ 652.824986][T27396] loop9: lost filesystem error report for type 5 error -117 [ 652.827880][T27396] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.4573: Invalid block bitmap block 0 in block_group 0 [ 652.835384][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 652.835407][ C0] EXT4-fs (loop9): last error at time 2000000076: ext4_read_block_bitmap_nowait:483 [ 652.865200][T27396] loop9: lost filesystem error report for type 5 error -117 [ 652.865369][T27396] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.4573: Invalid block bitmap block 0 in block_group 0 [ 652.887970][T27396] loop9: lost filesystem error report for type 5 error -117 [ 652.889982][T27396] Quota error (device loop9): write_blk: dquota write failed [ 652.907291][T27396] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 652.917188][T27396] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.4573: Failed to acquire dquot type 1 [ 652.928545][T27396] loop9: lost filesystem error report for type 5 error -28 [ 652.928874][T27396] EXT4-fs (loop9): 1 orphan inode deleted [ 652.965881][T12373] Quota error (device loop9): do_check_range: Getting block 0 out of range 1-5 [ 652.979804][T12373] EXT4-fs error (device loop9): ext4_release_dquot:7070: comm kworker/u8:18: Failed to release dquot type 1 [ 653.060635][T27425] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 653.063876][T27435] loop0: detected capacity change from 0 to 128 [ 653.099120][T27438] loop7: detected capacity change from 0 to 512 [ 653.149958][T27438] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 653.192225][T27435] Buffer I/O error on dev loop0, logical block 156, lost async page write [ 653.200811][T27435] Buffer I/O error on dev loop0, logical block 157, lost async page write [ 653.219034][T27450] nftables ruleset with unbound chain [ 653.244043][ T35] IPVS: starting estimator thread 0... [ 653.263173][T27463] loop6: detected capacity change from 0 to 164 [ 653.270583][T27463] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 653.280805][ T28] audit: type=1400 audit(2000000076.980:6164): avc: denied { write } for pid=27439 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 653.305040][T27463] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 653.328761][T27435] tmpfs: Bad value for 'nr_inodes' [ 653.348102][ T28] audit: type=1400 audit(2000000077.100:6165): avc: denied { write } for pid=27468 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 653.449975][T27461] IPVS: using max 2688 ests per chain, 134400 per kthread [ 653.471675][ T28] audit: type=1326 audit(2000000077.202:6166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27481 comm="syz.7.4584" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269aedce59 code=0x7ffc0000 [ 653.500041][T27495] loop7: detected capacity change from 0 to 512 [ 653.519623][T27495] EXT4-fs: Ignoring removed mblk_io_submit option [ 653.592940][T27495] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (43466!=33349) [ 653.636600][ T28] audit: type=1326 audit(2000000077.202:6167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27481 comm="syz.7.4584" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269aedce59 code=0x7ffc0000 [ 653.662284][ T28] audit: type=1326 audit(2000000077.202:6168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27481 comm="syz.7.4584" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269aedce59 code=0x7ffc0000 [ 653.713265][T27495] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e11c, mo2=0002] [ 653.728304][T27495] System zones: 1-12 [ 653.732594][T27495] EXT4-fs (loop7): orphan cleanup on readonly fs [ 653.739000][T27495] EXT4-fs error (device loop7): ext4_read_inode_bitmap:167: comm syz.7.4584: Inode bitmap for bg 0 marked uninitialized [ 653.751650][T27495] fserror_report: 1 callbacks suppressed [ 653.751688][T27495] loop7: lost filesystem error report for type 5 error -117 [ 653.781696][T27518] loop8: detected capacity change from 0 to 128 [ 653.796627][T27518] EXT4-fs: Ignoring removed oldalloc option [ 654.396606][T27519] loop6: detected capacity change from 0 to 512 [ 654.737465][ T28] audit: type=1326 audit(2000000077.202:6169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27481 comm="syz.7.4584" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f269aedce59 code=0x7ffc0000 [ 655.063562][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 655.070029][ C0] EXT4-fs (loop7): initial error at time 2000000078: ext4_read_inode_bitmap:167 [ 655.079096][ C0] EXT4-fs (loop7): last error at time 2000000078: ext4_read_inode_bitmap:167 [ 655.833981][T27529] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 656.158264][T27518] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c01c, mo2=0002] [ 656.167148][T27518] System zones: 1-3, 19-19, 35-36 [ 656.816706][T27531] syz_tun: entered allmulticast mode [ 656.886477][T27518] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 657.041250][T27519] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 657.052940][T27519] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 657.063210][T27519] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.4587: Corrupt directory, running e2fsck is recommended [ 657.077472][T27519] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 657.085778][T27519] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.4587: corrupted in-inode xattr: e_name out of bounds [ 657.108959][T27519] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 657.109864][T18562] EXT4-fs unmount: 24 callbacks suppressed [ 657.109878][T18562] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 657.111948][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 657.140271][ C0] EXT4-fs (loop6): initial error at time 2000000080: ext4_iget_extra_inode:5128: inode 15 [ 657.150253][ C0] EXT4-fs (loop6): last error at time 2000000080: ext4_iget_extra_inode:5128: inode 15 [ 657.160132][T27519] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.4587: couldn't read orphan inode 15 (err -117) [ 657.172249][T27519] loop6: lost filesystem error report for type 5 error -117 [ 657.175695][T27519] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.242771][T27530] syz_tun: left allmulticast mode [ 657.256782][T15754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.266899][T27545] loop7: detected capacity change from 0 to 128 [ 657.277369][T22672] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 657.358804][T27561] __nla_validate_parse: 8 callbacks suppressed [ 657.358825][T27561] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4596'. [ 657.373465][T27560] 9pnet_fd: Insufficient options for proto=fd [ 657.384633][T27545] bio_check_eod: 12 callbacks suppressed [ 657.384650][T27545] syz.7.4594: attempt to access beyond end of device [ 657.384650][T27545] loop7: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 657.410048][T27545] syz.7.4594: attempt to access beyond end of device [ 657.410048][T27545] loop7: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 657.423459][T27545] buffer_io_error: 6 callbacks suppressed [ 657.423474][T27545] Buffer I/O error on dev loop7, logical block 156, lost async page write [ 657.437716][T27545] syz.7.4594: attempt to access beyond end of device [ 657.437716][T27545] loop7: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 657.451245][T27545] Buffer I/O error on dev loop7, logical block 157, lost async page write [ 657.459814][T27545] syz.7.4594: attempt to access beyond end of device [ 657.459814][T27545] loop7: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 657.473703][T27545] Buffer I/O error on dev loop7, logical block 158, lost async page write [ 657.529277][T27545] syz.7.4594: attempt to access beyond end of device [ 657.529277][T27545] loop7: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 657.563256][T27582] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4600'. [ 657.586193][T27545] Buffer I/O error on dev loop7, logical block 159, lost async page write [ 657.596471][T27545] syz.7.4594: attempt to access beyond end of device [ 657.596471][T27545] loop7: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 657.609519][T27566] tmpfs: Bad value for 'nr_inodes' [ 657.610733][T27545] Buffer I/O error on dev loop7, logical block 160, lost async page write [ 657.626280][T27547] loop0: detected capacity change from 0 to 512 [ 657.655695][T27545] syz.7.4594: attempt to access beyond end of device [ 657.655695][T27545] loop7: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 657.670404][T27596] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4602'. [ 657.680713][T27566] syz.7.4594: attempt to access beyond end of device [ 657.680713][T27566] loop7: rw=2049, sector=153, nr_sectors = 1 limit=128 [ 657.696299][T27596] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4602'. [ 657.709669][T27545] Buffer I/O error on dev loop7, logical block 161, lost async page write [ 657.721215][T27545] syz.7.4594: attempt to access beyond end of device [ 657.721215][T27545] loop7: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 657.739146][T27603] syz.7.4594: attempt to access beyond end of device [ 657.739146][T27603] loop7: rw=2049, sector=153, nr_sectors = 1 limit=128 [ 657.744382][T27545] Buffer I/O error on dev loop7, logical block 150, lost async page write [ 657.761310][T27545] Buffer I/O error on dev loop7, logical block 151, lost async page write [ 657.778633][T27547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.794153][T27610] xt_hashlimit: size too large, truncated to 1048576 [ 657.801381][T27547] ext4 filesystem being mounted at /439/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 657.843821][T12172] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.048972][T27653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4607'. [ 658.113764][T27658] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=27658 comm=syz.0.4608 [ 658.138549][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 658.138566][ T28] audit: type=1400 audit(2000000081.520:6203): avc: denied { write } for pid=27662 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 658.177833][T27619] lo speed is unknown, defaulting to 1000 [ 658.332179][T27706] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4614'. [ 658.341699][T27706] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4614'. [ 658.472615][T27716] lo speed is unknown, defaulting to 1000 [ 658.602937][T27743] loop9: detected capacity change from 0 to 1764 [ 658.639608][T27743] sg_read: process 298 (syz.9.4618) changed security contexts after opening file descriptor, this is not allowed. [ 658.665012][T27743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54783 sclass=netlink_route_socket pid=27743 comm=syz.9.4618 [ 658.881196][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888119b2c600: rx timeout, send abort [ 658.889653][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888119b2c600: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 658.917566][T27772] loop6: detected capacity change from 0 to 4096 [ 658.929203][T27774] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4626'. [ 658.942398][T27772] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.956839][T27774] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4626'. [ 658.968885][ T28] audit: type=1400 audit(2000000082.277:6204): avc: denied { write } for pid=27771 comm="syz.6.4625" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 659.000392][T15754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.063341][T27784] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4627'. [ 659.106340][T27784] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27784 comm=syz.6.4627 [ 659.151074][T27823] xt_hl: Unknown Hop Limit match mode: 221 [ 659.281128][T27834] loop8: detected capacity change from 0 to 512 [ 659.303535][T27834] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 659.358325][T27834] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 659.403074][T22672] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.867304][T27847] loop9: detected capacity change from 0 to 256 [ 659.894316][T27851] netlink: 'syz.8.4635': attribute type 5 has an invalid length. [ 660.427430][T27868] loop0: detected capacity change from 0 to 512 [ 660.459324][T27869] loop6: detected capacity change from 0 to 512 [ 660.545214][T27869] EXT4-fs (loop6): 1 orphan inode deleted [ 660.597315][T27868] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 660.626873][T27869] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 660.692169][T27868] ext4 filesystem being mounted at /451/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 660.713675][T27869] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 660.784982][ T28] audit: type=1400 audit(2000000083.956:6205): avc: denied { write } for pid=27867 comm="syz.6.4638" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 661.045871][ T28] audit: type=1400 audit(2000000084.196:6206): avc: denied { write } for pid=27882 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 661.144678][ T28] audit: type=1400 audit(2000000084.270:6207): avc: denied { create } for pid=27896 comm="syz.9.4641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 661.175762][T15754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.187162][T12172] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.230129][T27897] loop9: detected capacity change from 0 to 512 [ 661.267554][ T28] audit: type=1400 audit(2000000084.288:6208): avc: denied { write } for pid=27898 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 661.344064][T27897] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 661.361302][T27918] loop6: detected capacity change from 0 to 1024 [ 661.430551][T27897] EXT4-fs (loop9): 1 truncate cleaned up [ 661.470913][T27897] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 661.521416][ T28] audit: type=1400 audit(2000000084.639:6209): avc: denied { write } for pid=27896 comm="syz.9.4641" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 661.566472][T27897] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4641: bg 0: block 465: padding at end of block bitmap is not set [ 661.666631][ T28] audit: type=1400 audit(2000000084.639:6210): avc: denied { write } for pid=27896 comm="syz.9.4641" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 661.705013][T27897] EXT4-fs (loop9): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 10 with error 28 [ 661.717852][T27897] EXT4-fs (loop9): This should not happen!! Data will be lost [ 661.717852][T27897] [ 661.728587][T27897] EXT4-fs (loop9): Total free blocks count 0 [ 661.738241][T27897] EXT4-fs (loop9): Free/Dirty block details [ 661.751730][T27897] EXT4-fs (loop9): free_blocks=0 [ 661.762422][T27897] EXT4-fs (loop9): dirty_blocks=10 [ 661.786339][T27897] EXT4-fs (loop9): Block reservation details [ 661.799337][T27897] EXT4-fs (loop9): i_reserved_data_blocks=10 [ 662.018075][ T28] audit: type=1400 audit(2000000085.100:6211): avc: denied { read } for pid=27932 comm="syz.8.4642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 662.069058][T23621] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #13: comm syz-executor: data will be lost [ 662.083703][ T28] audit: type=1400 audit(2000000085.128:6212): avc: denied { write } for pid=27902 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 662.113802][T23621] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.294959][T27947] lo speed is unknown, defaulting to 1000 [ 662.344764][T27961] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 662.357587][T27961] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 662.670841][T22672] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.886780][T28008] __nla_validate_parse: 8 callbacks suppressed [ 662.886848][T28008] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4653'. [ 663.021436][T28017] set_capacity_and_notify: 2 callbacks suppressed [ 663.021696][T28017] loop0: detected capacity change from 0 to 512 [ 663.196174][T28023] netlink: 104 bytes leftover after parsing attributes in process `syz.9.4654'. [ 663.336365][T28028] loop9: detected capacity change from 0 to 512 [ 663.356811][T28008] loop7: detected capacity change from 0 to 4096 [ 663.503654][T27995] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 663.515276][T27995] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 663.525487][T27995] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.4649: Corrupt directory, running e2fsck is recommended [ 663.542951][T27995] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 663.551317][T27995] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.4649: corrupted in-inode xattr: e_name out of bounds [ 663.565242][T27995] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 663.571225][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 663.586918][ C1] EXT4-fs (loop6): initial error at time 2000000086: ext4_iget_extra_inode:5128: inode 15 [ 663.597008][ C1] EXT4-fs (loop6): last error at time 2000000086: ext4_iget_extra_inode:5128: inode 15 [ 663.611686][T28017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 663.624553][T27995] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.4649: couldn't read orphan inode 15 (err -117) [ 663.630278][T28008] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 663.636507][T27995] loop6: lost filesystem error report for type 5 error -117 [ 663.637846][T27995] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 663.649879][T28017] ext4 filesystem being mounted at /455/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 663.670918][T27995] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 663.690899][T27995] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 663.701076][T27995] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.4649: Corrupt directory, running e2fsck is recommended [ 663.934655][T28028] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 664.146906][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 664.146922][ T28] audit: type=1400 audit(2000000087.065:6217): avc: denied { write } for pid=28005 comm="syz.7.4653" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 664.181133][T27877] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 664.202836][T28028] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 664.238980][T12172] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.297252][T23621] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.357342][T28008] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.370149][T28053] loop8: detected capacity change from 0 to 512 [ 664.418049][T28053] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 664.430735][T28053] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 664.599217][T22672] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.625629][T15754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.635583][T28066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4656'. [ 664.723863][T28085] all: renamed from bridge_slave_1 (while UP) [ 664.784958][T28066] loop0: detected capacity change from 0 to 512 [ 664.825591][T28092] loop7: detected capacity change from 0 to 2048 [ 664.834687][T28066] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 664.847186][T28066] ext4 filesystem being mounted at /456/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 664.847254][T28092] ext4: Unknown parameter 'uid>00000000000000000000' [ 664.903092][T28102] loop8: detected capacity change from 0 to 128 [ 664.952754][T12172] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.008902][T28111] ================================================================== [ 665.017013][T28111] BUG: KCSAN: data-race in fat32_ent_put / fat_mirror_bhs [ 665.024161][T28111] [ 665.026515][T28111] read-write to 0xffff888129571100 of 4 bytes by task 28102 on cpu 0: [ 665.034677][T28111] fat32_ent_put+0x4e/0x90 [ 665.039107][T28111] fat_ent_write+0x6c/0xe0 [ 665.043615][T28111] fat_chain_add+0x172/0x490 [ 665.048223][T28111] fat_get_block+0x475/0x5f0 [ 665.052842][T28111] __block_write_begin_int+0x400/0xf90 [ 665.058336][T28111] cont_write_begin+0x5fe/0x970 [ 665.063231][T28111] fat_write_begin+0x52/0xe0 [ 665.067836][T28111] cont_write_begin+0x1b0/0x970 [ 665.072739][T28111] fat_write_begin+0x52/0xe0 [ 665.077361][T28111] generic_perform_write+0x183/0x490 [ 665.082681][T28111] __generic_file_write_iter+0xec/0x120 [ 665.088238][T28111] generic_file_write_iter+0x8d/0x310 [ 665.093616][T28111] do_iter_readv_writev+0x4fd/0x5a0 [ 665.098884][T28111] vfs_writev+0x2e1/0x900 [ 665.103244][T28111] __se_sys_pwritev2+0xfc/0x1c0 [ 665.108113][T28111] __x64_sys_pwritev2+0x67/0x80 [ 665.112983][T28111] x64_sys_call+0xe07/0x3020 [ 665.117584][T28111] do_syscall_64+0x12c/0x3b0 [ 665.122231][T28111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.128133][T28111] [ 665.130484][T28111] read to 0xffff888129571000 of 512 bytes by task 28111 on cpu 1: [ 665.138294][T28111] fat_mirror_bhs+0x1df/0x330 [ 665.142987][T28111] fat_ent_write+0xd0/0xe0 [ 665.147420][T28111] fat_chain_add+0x172/0x490 [ 665.152042][T28111] fat_add_entries+0xdbb/0x10b0 [ 665.156915][T28111] vfat_add_entry+0x2103/0x2280 [ 665.161783][T28111] vfat_rename2+0x81d/0x13f0 [ 665.166396][T28111] vfs_rename+0x97f/0xad0 [ 665.170726][T28111] filename_renameat2+0x3b6/0x6e0 [ 665.175765][T28111] __se_sys_renameat2+0x4f/0x1c0 [ 665.180715][T28111] __x64_sys_renameat2+0x67/0x80 [ 665.185668][T28111] x64_sys_call+0x2a12/0x3020 [ 665.190358][T28111] do_syscall_64+0x12c/0x3b0 [ 665.195046][T28111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.200952][T28111] [ 665.203302][T28111] Reported by Kernel Concurrency Sanitizer on: [ 665.209455][T28111] CPU: 1 UID: 0 PID: 28111 Comm: syz.8.4663 Tainted: G W syzkaller #0 PREEMPT(full) [ 665.220399][T28111] Tainted: [W]=WARN [ 665.224204][T28111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 665.234271][T28111] ================================================================== [ 665.437734][T28111] bio_check_eod: 1 callbacks suppressed [ 665.437765][T28111] syz.8.4663: attempt to access beyond end of device [ 665.437765][T28111] loop8: rw=2049, sector=129, nr_sectors = 1 limit=128 [ 665.503790][T28102] syz.8.4663: attempt to access beyond end of device [ 665.503790][T28102] loop8: rw=2049, sector=134, nr_sectors = 24 limit=128 [ 665.549929][T28116] syz.8.4663: attempt to access beyond end of device [ 665.549929][T28116] loop8: rw=2049, sector=129, nr_sectors = 1 limit=128 [ 665.622890][T12373] kworker/u8:18: attempt to access beyond end of device [ 665.622890][T12373] loop8: rw=1, sector=128, nr_sectors = 1 limit=128 [ 665.643937][T12373] Buffer I/O error on dev loop8, logical block 128, lost async page write [ 665.652581][T12373] kworker/u8:18: attempt to access beyond end of device [ 665.652581][T12373] loop8: rw=1, sector=130, nr_sectors = 1 limit=128 [ 665.665994][T12373] Buffer I/O error on dev loop8, logical block 130, lost async page write [ 665.674762][T12373] kworker/u8:18: attempt to access beyond end of device [ 665.674762][T12373] loop8: rw=1, sector=131, nr_sectors = 1 limit=128 [ 665.688195][T12373] Buffer I/O error on dev loop8, logical block 131, lost async page write [ 665.706376][T12373] kworker/u8:18: attempt to access beyond end of device [ 665.706376][T12373] loop8: rw=1, sector=132, nr_sectors = 1 limit=128 [ 665.720067][T12373] Buffer I/O error on dev loop8, logical block 132, lost async page write [ 665.730760][T12373] kworker/u8:18: attempt to access beyond end of device [ 665.730760][T12373] loop8: rw=1, sector=133, nr_sectors = 1 limit=128 [ 665.744981][T12373] Buffer I/O error on dev loop8, logical block 133, lost async page write