last executing test programs: 7m47.995984361s ago: executing program 4 (id=28): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) setuid(0xee01) r3 = socket$inet6(0xa, 0x2, 0x0) syz_clone3(0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000080)={@remote, r5}, 0x14) sendmmsg$inet6(r4, &(0x7f0000002300)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}, 0x4}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x4}, 0x0, 0x0, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040)) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380d00001ad9c45e10a02caf99c77a063714fdda344587b40c3012cf9c312228a2ffcc277684553f5eb738f1042d4aa8557bba5f98a1b6889ebfdf353d62905110462d9d148e880bdd7a3825a0e1f5a44196b4ceef0dfb4e915896328e6689c530bd780cb564b1101948b3b6848e63645dfb0b67fff4987cbaac190f8ee725f5f9858ae2a4889b63f510fc438cb160e8a71c4fc6f11cb4f3d4163307f3fdf5901d5177147ef578f680a6c69d872c6db3c707f8b2cf068922a8a56ba7b5517c1e9487bb52b8f19876ac9cac41874cf7bee9fdd045bd4fa73bc7a5f8288f5b626b6e39e6040db69a658dba", @ANYRES16=r8, @ANYBLOB="010000000000fcdbdf2554000000080001007063690011000200303030303a30303a31302e30000000000800030000000000"], 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc7689218236d93b4800760000", @ANYRES16=r8, @ANYBLOB="000825bd7000fcdbdf25130000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b00f6ffffff06001100ff0800000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b000100000006001100070000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b00001000000600110064000000"], 0xbc}, 0x1, 0x0, 0x0, 0x1}, 0x1000) dup(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfd']) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x6, &(0x7f0000000140)={0x7d, {{0x29, 0x0, 0x3000000, @mcast2, 0x7f4}}}, 0x88) io_uring_enter(r0, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r10, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) 7m47.124034818s ago: executing program 4 (id=33): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x0, 0x40000000001f3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$tipc(r1, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r1, &(0x7f0000004400), 0x400000000000203, 0x101d0) flock(0xffffffffffffffff, 0x2) open(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40), 0x4, 0x4eb, &(0x7f0000000a80)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x2c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$cgroup_subtree(r5, &(0x7f0000000440)=ANY=[], 0x32600) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb0024000) setsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000000080)=0x1006, 0x4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x4c, 0x1a, 0x180, 0x73, 0x328, 0x258, 0x258, 0x328, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x23, 0x3, 0x2, 0x3, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x2e, 0x8, 0xfb, 0x87, 0x3, @remote, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xffffff00], [0x8982e4c132e3b466, 0xffffffff, 0xffffff00, 0xff000000], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 0x3420, 0x108}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x458) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req3={0x586, 0xffff, 0x4, 0x1, 0x7, 0x1, 0xed}, 0x1c) socket$netlink(0x10, 0x3, 0x15) socket$inet(0x2, 0x4, 0x41f) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0xc6, 0x0, 0x9, 0x798bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x100000000, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) 7m44.729379218s ago: executing program 4 (id=44): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0xc2) pwrite64(r0, &(0x7f0000000080)="cc", 0x1, 0x200980) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RVERSION(r3, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES32=r2], 0x13) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) syz_emit_ethernet(0x68, &(0x7f0000000080)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x6, 0x5a, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x7f]}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x2, {0x0, 0xfffd}}}}}}}}, 0x0) 7m43.715331838s ago: executing program 4 (id=47): epoll_create(0x7) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0xe1c, 0x3}, 0x102802, 0x3, 0x0, 0x0, 0xfff, 0x8004, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000000600)="$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") getresgid(0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x26, 0x0, @void}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x10, 0x3e8, 0x300, 0x70bd25, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x4000090) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x4014) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@local, @in6=@loopback, 0x4e21, 0x2, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xfffffffffffffe01, 0x0, 0x6, 0x1000000000}, 0x0, 0x1000, 0x0, 0x1}, {{@in=@broadcast, 0x4d5, 0x2b}, 0x0, @in6=@remote, 0x0, 0x3, 0x1}}, 0xe8) syz_io_uring_setup(0x31a4, &(0x7f0000000340)={0x0, 0x3493, 0x8602459a0521c9b1, 0x3, 0x99}, &(0x7f0000000100), &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3d, 0x0, 0x0, 0x1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, [{0x39, 0x3, "669faeb9808aed37d12ec7a4a494b34ab0b263d63aa8"}]}}}}}}, 0x0) 7m43.231308951s ago: executing program 4 (id=49): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 7m43.167627526s ago: executing program 32 (id=49): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6m6.611581492s ago: executing program 2 (id=833): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) gettid() semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0x915b, 0x800}], 0x1, &(0x7f0000000100)={0x77359400}) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) creat(&(0x7f0000000180)='./file0\x00', 0x81) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(0x0, 0x8000, 0x112) eventfd2(0xffffffff, 0x80800) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x1, 0x8008, 0x0, 0x12, 0x19, 0x11, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8, 0x4]}) rename(0x0, &(0x7f0000003440)='./file1\x00') 6m5.628924608s ago: executing program 2 (id=839): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4b8d3ee0878ae95bc7f52363c468b206ff2424852548deb01efd54f1bfe9e349078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c259f035580839067a6827d61dcc3a630edbc9a0307a25720a70e419dc44febf7ddc73fd0300000028667f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a5ee0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b417354335f8cf20d0d96ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/60, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x12662a, 0x10004, 0x20da, 0x5, 0xa, 0x8, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x8, 0x32, 0x43a1bd76, 0x7, 0xd, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@local, @in=@remote, 0x4e22, 0x8, 0x4e23, 0x0, 0xa, 0x80, 0x0, 0x2}, {0x1, 0x3, 0x8, 0x6, 0x2, 0x600d382c, 0x80, 0x4}, {0x17e, 0x9, 0x8, 0xfffffffffffffff8}, 0x100, 0x6e6bbb, 0x0, 0x0, 0x3, 0x2}, {{@in=@rand_addr=0x64010100, 0x4d3, 0x2b}, 0xa, @in6=@mcast1, 0x3503, 0x4, 0x3, 0x7, 0x8, 0x6, 0x400}}, 0xe8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x7, 0x100, 0x9627, 0xfffffffd, 0x8}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={r5, @in6={{0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe00}}, 0x2, 0x1, 0x7, 0xfffffffd, 0xa, 0xb1, 0x5}, &(0x7f0000000140)=0x9c) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa8, 0x2, 0x0, 0x0, 0x0, 0x1, 0x400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x5}, 0x1a2d, 0x0, 0xdce, 0x8, 0x0, 0xffff7fff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000180)=[{0x1, 0xef6, 0x1000}], 0x1) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) 6m5.5013404s ago: executing program 2 (id=843): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8010) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x24040, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5432, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000850) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xff00, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 6m4.568110322s ago: executing program 2 (id=854): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x800000001ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000280)={0x23, 0x3, 0x10, 0x4008, 0x0, 0x3, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f000048a000/0x1000)=nil, 0x1000, 0x2, 0x12, r3, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x44000, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x9, 0x600000000) getsockname$tipc(r3, &(0x7f0000000100), &(0x7f0000000140)=0x10) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x5514, 0x0) 6m4.35998665s ago: executing program 2 (id=858): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) readv(r0, &(0x7f0000000040)=[{&(0x7f00000006c0)=""/237, 0xed}], 0x1) 6m3.919008879s ago: executing program 2 (id=864): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={r0, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x82, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000400), &(0x7f0000000680), 0x8, 0x97, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x7fff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="5c030000000000000077f7260c1e62d4e46016393576dcdb56fd"], 0x1a, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x1, 0x40, 0x8, 0xffffffff, {{0x5, 0x4, 0x1, 0xb, 0x14, 0x68, 0x0, 0x5, 0x4, 0x0, @empty, @empty}}}}) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0xff, 0x9, 0xa, 0x20, 0x5}, 0x20) write(r6, &(0x7f0000004200)='t', 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x4}, 0x9805, 0x9, 0x7fd, 0x6, 0x0, 0x4}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10) r8 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x203bce, 0x10100, 0x3, 0x100}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r9, r10, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r12, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r8, 0x46f3, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0xca746ef055f4f1ba, 0xffffffffffffffff, 0x9edbe000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 6m3.418873453s ago: executing program 33 (id=864): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={r0, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x82, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000400), &(0x7f0000000680), 0x8, 0x97, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x7fff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="5c030000000000000077f7260c1e62d4e46016393576dcdb56fd"], 0x1a, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x1, 0x40, 0x8, 0xffffffff, {{0x5, 0x4, 0x1, 0xb, 0x14, 0x68, 0x0, 0x5, 0x4, 0x0, @empty, @empty}}}}) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0xff, 0x9, 0xa, 0x20, 0x5}, 0x20) write(r6, &(0x7f0000004200)='t', 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x4}, 0x9805, 0x9, 0x7fd, 0x6, 0x0, 0x4}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10) r8 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x203bce, 0x10100, 0x3, 0x100}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r9, r10, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r12, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r8, 0x46f3, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0xca746ef055f4f1ba, 0xffffffffffffffff, 0x9edbe000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m7.11745592s ago: executing program 6 (id=2051): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_bp={0x0}, 0xc224, 0x2, 0xffffffff, 0x0, 0x2, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(0x0) 2m6.865057252s ago: executing program 6 (id=2053): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) (fail_nth: 2) 2m6.495294865s ago: executing program 6 (id=2057): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x24060400) r3 = fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x4c}, 0x1, 0x200000000000000, 0x0, 0x1}, 0x8000002) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="170000000000000004000000ff", @ANYRESDEC=0x0], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000140009052abd", @ANYRES32, @ANYBLOB="0800040064010102080002007f00000108000900"], 0x38}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000039000900f036d67600dfffeb03000000040000000c000180060006"], 0x24}}, 0x8090) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x1d0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xff000000, 0x1ffffff01], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x34}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r10, 0x0, &(0x7f0000001780)=""/4096}, 0x20) r12 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r12, &(0x7f0000000000)="b8", 0x1) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_BASE_RATE64={0x4e, 0x2, 0x1}]}}]}, 0x48}}, 0x0) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r13, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r14, 0x9, 0x6}, 0xc) 2m5.351325295s ago: executing program 6 (id=2061): r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="93d90400", 0x4}, {&(0x7f0000000000)="13475b84", 0x4}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="2c6f624a5f726f6c653d80006173682ca8ea26de004d22080834ec21408c1cbd571f6191519244adb50f367988fb2727cc32238fac4fbdc332b1719e340000000004f23246a8d5ec9c21dd657ad6d91f895438297d5da5a51f2163a3aefc9a13608114683a6be3371b75c707284241970a8159ba2bec7414c90ddbdd8218b3ce593b992196b6a3cd4bc2bb6754b654ba0fa3821193cdf866d2630a60f040d612f358308919f24bccb430ad754832a2402e3b7240e7eec9ad32c333f3dca7ab50db1f0415a70ece849f03e8441be2c1c54491c7428bbfdcea758eb7de27821cbc79a45c11b52ff4b704fefa01987a8fa8be2756414f8d10f022600574c68d130d46301ff52bbd08cf61190205"], 0x25, 0x359, &(0x7f0000000bc0)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) write$P9_RREADLINK(r4, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m2.437700952s ago: executing program 6 (id=2067): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) creat(&(0x7f0000000000)='./file0\x00', 0x40) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_mr_cache\x00') fcntl$setstatus(r1, 0x4, 0x40800) r2 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x0, 0x1}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00ff050000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local}}) io_uring_enter(r9, 0x3532, 0x32c9, 0x45, 0x0, 0x0) 2m2.104053771s ago: executing program 6 (id=2072): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x24060400) r3 = fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x4c}, 0x1, 0x200000000000000, 0x0, 0x1}, 0x8000002) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="170000000000000004000000ff", @ANYRES32=r4], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000140009052abd", @ANYRES32, @ANYBLOB="0800040064010102080002007f00000108000900"], 0x38}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000039000900f036d67600dfffeb03000000040000000c000180060006"], 0x24}}, 0x8090) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x1d0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xff000000, 0x1ffffff01], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x34}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r10, 0x0, &(0x7f0000001780)=""/4096}, 0x20) r12 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r12, &(0x7f0000000000)="b8", 0x1) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_BASE_RATE64={0x4e, 0x2, 0x1}]}}]}, 0x48}}, 0x0) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r13, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r14, 0x9, 0x6}, 0xc) 2m2.018481489s ago: executing program 34 (id=2072): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x24060400) r3 = fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x4c}, 0x1, 0x200000000000000, 0x0, 0x1}, 0x8000002) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="170000000000000004000000ff", @ANYRES32=r4], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000140009052abd", @ANYRES32, @ANYBLOB="0800040064010102080002007f00000108000900"], 0x38}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000039000900f036d67600dfffeb03000000040000000c000180060006"], 0x24}}, 0x8090) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x1d0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xff000000, 0x1ffffff01], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x34}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r10, 0x0, &(0x7f0000001780)=""/4096}, 0x20) r12 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r12, &(0x7f0000000000)="b8", 0x1) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_BASE_RATE64={0x4e, 0x2, 0x1}]}}]}, 0x48}}, 0x0) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r13, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r14, 0x9, 0x6}, 0xc) 1m57.739170956s ago: executing program 3 (id=2097): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x84000004, 0x1, 0x100003, 0x18, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "07a9400978042a8bfe1406584ae7df4af14e1df82d00", [0x79, 0xd]}) 1m55.711772954s ago: executing program 3 (id=2102): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) 1m55.568727057s ago: executing program 3 (id=2105): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000"/47, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005002001000000000000000000000000000000000002320000000a000000fc010000040000000000000000000000000000000400"/180], 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, 0x0, 0x30) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) 1m55.286068192s ago: executing program 3 (id=2109): r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="93d90400", 0x4}, {&(0x7f0000000000)="13475b84", 0x4}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="2c6f624a5f726f6c653d80006173682ca8ea26de004d22080834ec21408c1cbd571f6191519244adb50f367988fb2727cc32238fac4fbdc332b1719e340000000004f23246a8d5ec9c21dd657ad6d91f895438297d5da5a51f2163a3aefc9a13608114683a6be3371b75c707284241970a8159ba2bec7414c90ddbdd8218b3ce593b992196b6a3cd4bc2bb6754b654ba0fa3821193cdf866d2630a60f040d612f358308919f24bccb430ad754832a2402e3b7240e7eec9ad32c333f3dca7ab50db1f0415a70ece849f03e8441be2c1c54491c7428bbfdcea758eb7de27821cbc79a45c11b52ff4b704fefa01987a8fa8be2756414f8d10f022600574c68d130d46301ff52bbd08cf61190205"], 0x25, 0x359, &(0x7f0000000bc0)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) write$P9_RREADLINK(r4, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m52.990829673s ago: executing program 3 (id=2110): r0 = syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) 1m49.700042963s ago: executing program 3 (id=2123): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x9a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x806}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xf, 0x2, 0xf, 0x10000007, 0x739c}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x4800) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="01de0d02c98380c20000aaaa08004500001c00020000fe119078ac1414aae000000100004e2000089078e3c0757c4df3d6cfb01902cc0409384795e73576632d27dbe0bf68b74e8427e90b516d932129a199e2ff5836e644cc276b85d32a67dcf531e6c0389e325955f0e64f0000000000"], 0x0) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x1588, 0x2040) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x70bd28, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0xfe5a, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x4, 0xfffffffe}, 0x2d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7ffd, 0x7, 0x5, 0xa, 0x1, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb4, 0xfffffffd, 0x2, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x404fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0xa0, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x63, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x5, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x8, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x40000, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0xc, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x6, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x209, 0x100, 0x1, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x1000, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xffffff01, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0x0, 0x9, 0x8, 0x1, 0xc2e6, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x0, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0xc, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0xab34, 0x0, 0x21000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x8, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x44291943, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x80000000, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0xfffc, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x20009, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x109, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0x6, 0x2, 0x3f, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x1000009, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x3, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x1ff, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x80000000, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827787, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x14, 0x8, 0x5, 0x80, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x202, 0x51, 0x7, 0xefb, 0xb8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0xfff, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0x1a2, 0x1, 0x3, 0x40, 0x1000, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x3, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x800, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0xffffffff, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x2, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x4, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x6, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0x8, 0x2, 0xfff, 0x5, 0x9]}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8c2b01) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3696, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$char_usb(r3, &(0x7f0000000040)="e2", 0x12d8) 1m49.555429376s ago: executing program 35 (id=2123): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x9a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x806}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xf, 0x2, 0xf, 0x10000007, 0x739c}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x4800) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="01de0d02c98380c20000aaaa08004500001c00020000fe119078ac1414aae000000100004e2000089078e3c0757c4df3d6cfb01902cc0409384795e73576632d27dbe0bf68b74e8427e90b516d932129a199e2ff5836e644cc276b85d32a67dcf531e6c0389e325955f0e64f0000000000"], 0x0) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x1588, 0x2040) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x70bd28, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0xfe5a, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x4, 0xfffffffe}, 0x2d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7ffd, 0x7, 0x5, 0xa, 0x1, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb4, 0xfffffffd, 0x2, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x404fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0xa0, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x63, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x5, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x8, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x40000, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0xc, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x6, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x209, 0x100, 0x1, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x1000, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xffffff01, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0x0, 0x9, 0x8, 0x1, 0xc2e6, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x0, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0xc, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0xab34, 0x0, 0x21000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x8, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x44291943, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x80000000, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0xfffc, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x20009, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x109, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0x6, 0x2, 0x3f, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x1000009, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x3, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x1ff, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x80000000, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827787, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x14, 0x8, 0x5, 0x80, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x202, 0x51, 0x7, 0xefb, 0xb8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0xfff, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0x1a2, 0x1, 0x3, 0x40, 0x1000, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x3, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x800, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0xffffffff, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x2, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x4, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x6, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0x8, 0x2, 0xfff, 0x5, 0x9]}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8c2b01) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3696, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$char_usb(r3, &(0x7f0000000040)="e2", 0x12d8) 7.219737145s ago: executing program 0 (id=2815): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x0, 0x40000000001f3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$tipc(r1, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r1, &(0x7f0000004400), 0x400000000000203, 0x101d0) flock(0xffffffffffffffff, 0x2) open(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40), 0x4, 0x4eb, &(0x7f0000000a80)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x2c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$cgroup_subtree(r5, &(0x7f0000000440)=ANY=[], 0x32600) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb0024000) setsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000000080)=0x1006, 0x4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req3={0x586, 0xffff, 0x4, 0x1, 0x7, 0x1, 0xed}, 0x1c) socket$netlink(0x10, 0x3, 0x15) socket$inet(0x2, 0x4, 0x41f) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0xc6, 0x0, 0x9, 0x798bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x100000000, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) 5.688634559s ago: executing program 7 (id=2834): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f0000000640), 0x1, 0x5c5, &(0x7f0000001a00)="$eJzs3VuIXHcdB/Dfmd1Jc9mai63aGpvVUFso3dlsNiERHyzxUmtSK4oPoRCW7HQ3ZHZnzW6gOxVM8UUURPBFBKFiH6yIBvJSKbV9aPFFQakXKhoDKohQtFIQQZ3yn8t22pw0pXs5JOfzgTP7P/9zZv7/2eE755w5twBKazQ9ZBEjEXEhIrZ3R18/w2j3T2v/+dk0ZNFuf/YfWWe+6f3nZ/uz9p+3LT0MR2yOiF1HsthbvbzdxeXW6alGo36mN15bmluoLS637j41NzVTn6nPHzg0eXji4OShybV7r+O/2HrzX2+//9Ljz/37v9/53cEfpf6O9KYNvo+1Mhqjvf9JNXYO1A9nEfetdWMFGep+1HH7QF02XGCHeMva7V0/TJ/fOyNibyf/22Mouh/ei089+K/t8Zt7i+4jsH7affmTX24Pqg4+AbjWVTrrwFllLCK65UplbKy7Dn9TbK00motLdz3UPDs/3V1X3hHVykOnGvXx3rbCjqhmaXxfp/za+MQbxvdHdNaBvzK0pTM+drLZmN7oLzugYyTi4oUvnNy07Q35/9tQN//A9Svl/9fPP/lMKr8yVHRvgI2U8v+DV+Y+FfIPpSP/UF7yD+Ul/1Be8g/lJf9QXvIP5SX/UF7yD+Ul/1Be/fw/cOxYPHDsWLvVO/99vjlz6vTswuGJ8bG5syfHTjbPLIzNNJsznTN25q7+uo1mc2HfRJx9uLZUX1yqLS63Tsw1z84vneic13+innMpAKAAxy9tvm/nnmdfzCLi3Ie2dIZkU2+6rML1rd3OnNIPJWXTH8rLpdqgvGzjA9lVpm++0oTG2vcF2BiVojsAFOaOW+z/g7Ly+z+Ul9//obze7jp+FnFujbsCFMTv/1A+fv+H8hq5wv2/bhy4d9d4RLwjIn4+VL2hf68v4Jryuk39kYiLF7/3+drKfbgVFBQUVgrFfVEBG+O10BfdE6Ao0/vPz/aHjWrz6ZmNagnI89I93YOAUu5bvaE7ZXhl30B1nY4T2nlbevzJHx+7c3YoDdH7HlqHpoAc5x6NiPfkLf+zzr6BHb35dnVni5si4uaIeFdEvHuVbX/rMxGj8Xx9sE7+YeO81fzfEhFpcX1rRLw3InZHxPtW2favLqT8/3bLYJ38Qzl88bmiewAU5ZNPFt0DoCjHHWMApfX9R4ruAVCUp35cdA+Aonz9haJ7AOX27D0RMZ63/6/S2d/fV+1dF/CG3rUAtkTE1ojY1juH8MbeOYLbB/YZXs2JT0eMxm0/Hayz/w82Tv/4v9Zlx/9VVo7/G4qIPato4+kPj3wtr35qd8r/44/0j/9LQ2q/fywgsL5eejTi1tz8ZyvH/GaRchrx/rfZxuiXLj2RV//C/el1q7+UfyhG+7sRH4z8/PelUm1pbqG2uNy6u3Mf75n6/IFDk4cnDk4emqx1LhFS618oJMfRf758V179HyZS/r99QP6hGGn5v/UK+R9c///AKto48s2vHs+rH/lzyv/uZ948/5W/b8o+1xnv35fg4amlpTP7IjZlRy+vn1hFR+E6189IP0Mp/3fuzd/+39V7Tlr+H4mIj6b1hYj4X0T8PyI+FhEfj4hPRMS9b9LmN+6YuZRX/6cnUv4fO235D8VI+Z++yvI//f3PKtrYHD/7cl79R/ak/I/9/i9HHxxOg/wDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArL3F5dbpqUajfmYdC0W/RwAAAAAAACiLVwMAAP//Oacv4Q==") quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 5.503726116s ago: executing program 5 (id=2835): open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = getpid() syz_pidfd_open(r0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) pipe2$9p(&(0x7f00000001c0), 0x4800) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x10, 0x701, 0x0, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r1}]}, 0x24}}, 0x20008080) 5.472081499s ago: executing program 7 (id=2836): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe000000007110100000000000e5000600000000004704000001ed030407030000060000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 5.435815291s ago: executing program 1 (id=2837): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) creat(&(0x7f0000000000)='./file0\x00', 0x40) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_mr_cache\x00') fcntl$setstatus(r1, 0x4, 0x40800) syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x0, 0x1}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00ff050000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) close(0x3) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local}}) io_uring_enter(r6, 0x3532, 0x32c9, 0x45, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000480)={{0x2f, @multicast2, 0x4e24, 0x4, 'sed\x00', 0x18, 0x8, 0x4d}, {@local, 0x4e21, 0x10000, 0x1, 0x4}}, 0x44) socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x40, &(0x7f0000000140)={[{@uid}, {@nocompress}, {@block={'block', 0x3d, 0x200}}, {@block={'block', 0x3d, 0x200}}, {@nocompress}, {@hide}, {@gid}, {@unhide}, {@utf8}]}, 0x1, 0x56c, &(0x7f0000000580)="$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") 5.347234949s ago: executing program 7 (id=2838): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x792, &(0x7f0000020c00)="$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") lstat(0x0, 0x0) 5.34685947s ago: executing program 5 (id=2839): syz_mount_image$ext4(&(0x7f0000000c00)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x242, 0xaa, 0xfffffffffffffff8, 0xfffffffffffffffd, 0x347e17c4, 0x400002007fff, 0x3210}) 5.206073702s ago: executing program 7 (id=2840): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000080)={0x0, 0x79af, 0x8, 0x8000, 0x400246}, &(0x7f0000000100)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)="8f7dc9", 0x3, 0x101, 0x1}) io_uring_enter(r0, 0x4c72, 0xc67a, 0x8, 0x0, 0x0) syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x4007ca0, 0x4, 0x2, 0x8000007e, 0x0, r0}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000024c0)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x140, 0xb, 0xd0e0011, 0x0, 0xc6, 0x218, 0x1d8, 0x190, 0x218, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1, 0x0, 0x3b}, 0x0, 0x70, 0xd8, 0x2000000}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x101, 0x0, 0xc, 'netbios-ns\x00', 'syz1\x00', {0x27ff}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) r8 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r8, 0x1, 0x22, 0x0, 0x0) sendto(r8, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000014c0), 0x3ffffffffffff42, 0x162, 0x0) r9 = getpid() process_vm_readv(r9, 0x0, 0x0, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000dc0)=""/197, 0xc5}], 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000020000103fffffffffddbdf250200000001fe0008020500000c000c4000000000000005f3"], 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x4040014) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000840)={0x60, 0x0, &(0x7f0000000000/0x4000)=nil, &(0x7f0000a7e000/0x13000)=nil, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2c, 0x2e, 0x3b}) 5.205485942s ago: executing program 0 (id=2841): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) fcntl$notify(r0, 0x402, 0x40000029) readv(r0, 0x0, 0x0) 5.148166807s ago: executing program 5 (id=2842): openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000740)=0x10) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 5.077387713s ago: executing program 1 (id=2843): symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') lstat(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)) 5.050116186s ago: executing program 0 (id=2844): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, 0x0) 5.045997516s ago: executing program 8 (id=2845): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) 4.952253094s ago: executing program 8 (id=2846): mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 4.951880294s ago: executing program 1 (id=2847): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@nobh}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$eJzs3c+LG1UcAPDvZHf7W9tCKSoiCz1Yqc12d/1RwUM9ihYLeq9hM13KJk3ZZEt3Ldge7MWLFEHEgnjXu8fiP+BfUdBCkbLowUtkspNt2k266TZttubzgSnvZSZ5852Z7+ubvFkSwMiazP4pRLwcEd8kEfsjIsnXjUe+cnJtu9V7V+ayJYlm89O/ktZ2Wb39We337c0rL0XEb19FHCtsbLe+vLJQqlTSxbw+1ahenKovrxw/Xy3Np/PphZlm8+TbszPvvfvOwGJ948w/339y68OTXx9Z/e6XOwdvJHEq9uXrOuN4Alc7K5MxmR+TiTj10IbTA2hsO0mGvQNsyVie5xOR9QH7YyzPeuD/78uIaAIjKpH/MKLa44D2vf2A7oOfG3c/WLsB2hj/+Np3I7GrdW+0ZzV54M4ou989MID2szZ+/fPmjWyJwX0PAbCpq9ci4sT4+Mb+L8n7v6070cc2D7eh/4Nn51Y2/nmz2/insD7+iS7jn71dcncrNs//wp0BNNNTNv57v+v4d33S6sBYXnuhNeabSM6dr6RZ3/ZiRByNiZ1Z/VHzOSdXbzd7resc/2VL1n57LJjvx53xnQ++p1xqlJ4k5k53r0W80nX8m6yf/6TL+c+Ox5k+2zic3nyt17rN43+6mj9FvN71/N+f0Uq6zk/Ozubzk1Ot62GqfVVs9Pf1w7/3an/Y8Wfnf8+j4z+QdM7X1h+/jR93/Zv2WvdA/NH/9b8j+axV3pG/drnUaCxOR+xIPt74+sz997br7e2z+I8eeXT/1+363x0Rn/cZ//VDP7/aV/xDOv/lxzr/j1+4/dEXP/Rqv7/+761W6Wj+Sj/9X787+CTHDgAAAAAAALabQkTsi6RQXC8XCsXi2vMdh2JPoVKrN46dqy1dKMe1fWvPPxTaM937O56HmM6fh23XZx6qz0bEwYj4dmx3q16cq1XKww4eAAAAAAAAAAAAAAAAAAAAtom9Pf7+P/PH2LD3Dnjq/OQ3jK5N838Qv/QEbEv+/4fRJf9hdMl/GF3yH0aX/IfRJf9hdMl/GF3yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbqzOnT2dJcvXdlLquXLy0vLdQuHS+n9YVidWmuOFdbvFicr9XmK2lxrlbd7PMqtdrF6ZlYujzVSOuNqfryytlqbelC4+z5amk+PZtOPJOoAAAAAAAAAAAAAAAAAAAA4PlSX15ZKFUq6aKCwpYK49tjNxQGXBh2zwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9/0XAAD//zWdOco=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 4.847322084s ago: executing program 0 (id=2848): openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c757466383d302c696f636861727365743d63703836302c696f636861727365743d6d616363726f617469616e2c756e695f786c6174653d312c747a3d5554432c6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d63703433372c73686f72746e616d653d77696e6e742c726f6469722c73686f72746e616d653d6d697865642c6e6f636173652c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c736d61636b66736465663d757466383d302c64697273796e632c736d61636b66736861743d262c657569643e807d6dc634ae06b292a3825c7626caa45b7a39a81660437a556646a082c54e8cf9c81260f6a760b9f06d5738818ee5a4503b0364b0f4c56abfe2", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) write$P9_RREADLINK(r3, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 4.752374922s ago: executing program 8 (id=2849): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 3.852037301s ago: executing program 8 (id=2850): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x792, &(0x7f0000020c00)="$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") lstat(0x0, 0x0) 3.74765198s ago: executing program 1 (id=2851): r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="93d90400", 0x4}, {&(0x7f0000000000)="13475b84", 0x4}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$eJzs3T1onHUYAPDn+ia5JFiTQSg6nW6ClCbioFNCqVDMoJXDr8XDpn7kzkIOD+KQyy1KcVJcBJ3cOujYWRxE3BxcrSBVcbFbocFX3rv3vnJ3Jhkutvj7DeXh+f+f+z/vB33fhOSf15uxdXk2rty+fSvm5wsxs3Z+Le4UYjlORRIdezHWR3Pj8wDAPe5OmsZfacfhsz9Z7Eae/QBw/2o//9883U8Uj1F87YFptAQATNkRv/5/fmz26tTaAgCmaOT5/9jQ8IFv88/0fiYAALh/vfjKq8+tb0RcKpXmI2ofNsqNcjzTH1+/Em9HNTbjXCzFfkTnRaHztpD9++zFjQvnSpnflqOcVTTKEbVmo9x5U1hP2vXFWImlWM7r0159ktWvtOtLEbHXbK8ftUKjPBuL+fo/L8ZmrMZSPDRSH3Fx48JqKf+Acq1b34xoxXz3ILL+z8ZS/PhGXI1qXI6stt//7kqpdD7dGKpvXC+25wEAAAAAAAAAAAAAAAAAAAAAwDScLfUs9/a/SWvNxgeXDk7ojRfb+/t0hvP9gVqd/YHSYnd3nmvJwf2BhvfnaZRn4tR/euQAAAAAAAAAAAAAAAAAAABw76jvzEWlWt3cru+8vzUYNAcy737/1bcL0R2ayUvfSfpVkSeHPqc7ceCTk+gtkfbK02RoTh4kEd3Je5XrN3odD84p9o5ipDwLiiNDhbynSrV6+tFfPx9X9XcW7LUzSYycluGgkK8/MFR7MEvMR8T+pKrJweohc26maTqpfPezXqbbVj0KETNx7DaOEHx3662Hn6yfeaqd+Sbf9OHxJ5Zeuvnpl39sVarR6rRQrc5t1/fTSVcnvxZZJut1dK1k4P4p5Oe5MOZOGB+0+pnWdn2nkvz058uPfPzDgcnJ+PsnHcy8N3mtrw9m5jpBIWK5exL+rdXZMTf/+OC1u0Nn7LCqhaHMmS/WKjd2f/n9qFd54D8JG3UAAAAAAAAAAAAAAAAAAMCJ6P/S73Gqnn5heh0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMnr//3/gaA1kjlKcLcZo0PFze36xMUXTvRQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4H/snAAD//82Fa84=") syz_open_procfs(0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) write$P9_RREADLINK(r4, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2.875452467s ago: executing program 0 (id=2852): syz_mount_image$ext4(&(0x7f0000000c00)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x242, 0xaa, 0xfffffffffffffff8, 0xfffffffffffffffd, 0x347e17c4, 0x400002007fff, 0x3210}) 2.691086303s ago: executing program 8 (id=2853): r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="93d90400", 0x4}, {&(0x7f0000000000)="13475b84", 0x4}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c757466383d302c696f636861727365743d63703836302c696f636861727365743d6d616363726f617469616e2c756e695f786c6174653d312c747a3d5554432c6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d63703433372c73686f72746e616d653d77696e6e742c726f6469722c73686f72746e616d653d6d697865642c6e6f636173652c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c736d61636b66736465663d757466383d302c64697273796e632c736d61636b66736861743d262c657569643e807d6dc634ae06b292a3825c7626caa45b7a39a81660437a556646a082c54e8cf9c81260f6a760b9f06d5738818ee5a4503b0364b0f4c56abfe2", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) write$P9_RREADLINK(r4, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2.062273399s ago: executing program 1 (id=2854): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) fcntl$notify(r0, 0x402, 0x40000029) readv(r0, 0x0, 0x0) 2.002166143s ago: executing program 5 (id=2855): r0 = fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}, 0x1, 0x200000000000000, 0x0, 0x1}, 0x8000002) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES32, @ANYBLOB="0800040064010102080002007f00000108000900"], 0x38}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x1d0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xff000000, 0x1ffffff01], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x34}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) write(0xffffffffffffffff, &(0x7f0000000000)="b8", 0x1) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x9, 0x6}, 0xc) 300.626274ms ago: executing program 5 (id=2856): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x5, 0x0}, 0x4}], 0xf905db2d12e721d0, 0x10100, 0x0) 119.34802ms ago: executing program 5 (id=2857): socket$key(0xf, 0x3, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000400), 0x80, 0x0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000440)) r2 = getpid() ioctl$RTC_UIE_ON(r1, 0x7003) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, 0x0, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, &(0x7f0000000840), &(0x7f0000000100)}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r9, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000010"], 0xfc}}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000140)=0x7fc, 0x4) 79.938583ms ago: executing program 0 (id=2858): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000440), 0xfa, 0x26c, &(0x7f0000000840)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) 76.900804ms ago: executing program 7 (id=2859): mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 76.601343ms ago: executing program 8 (id=2860): ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f0000000000)={0x0, 0x0, "11da23ef434d7f7d66dc698ef95d1711"}) 294.49µs ago: executing program 1 (id=2861): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1b1, &(0x7f0000000240)="$eJzs3cFqE0EYB/Bv23UbxEPP4mHBi6egPkFUWiguCMoe9KRQvbQi2MvqqW/hG/gqvo7k1FskTmhoWcEetrvJ/n6XfOx/wnwzgcwpk/cPPp8cfzn79PPXj5hMsshnMYuLLPZjJ3YjOY8rstanAMDGuFgs4vci+Y/hz2+hJQCgYzc8/wGALeD8B4Dxcf4DwPi8efvu5bOqOnhdlpOI+XlTN3V6TfnhUXXwuPxrf/2uedPUu5f5k5SXV/M7cXeVP23Ni3j0MOXL7MWrKuV5GtHUe3Hc1vAs62AXAAAAAAAAAAAAAAAAAAAAAADgdk3LS633+0ynxT/yVB0eFatn1+/3yeN+3jJh0ckyAAAAAAAAAAAAAAAAAAAAYKOdfft+8uH09OPX4RbzYbQxtOJe55/g3mqGvle67cVynwfQxrWixy8lAAAAAAAAAAAAAAAAAAAYqfWPfvvuBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6s/7//+6K5Tw7fS8UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBR+xMAAP//+cFD/w==") ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000000)=0x2) 0s ago: executing program 7 (id=2862): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0xc04, &(0x7f0000000580), 0x1, 0x44c, &(0x7f0000000b00)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a6a038, &(0x7f0000002cc0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): 243132f6c0 RCX: 00007f243289cece [ 423.415535][T11755] RDX: 000000000000000f RSI: 00007f243132f0a0 RDI: 0000000000000004 [ 423.415550][T11755] RBP: 00007f243132f090 R08: 0000000000000000 R09: 0000000000000000 [ 423.415563][T11755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.415642][T11755] R13: 00007f2432b56038 R14: 00007f2432b55fa0 R15: 00007fff8bad93a8 [ 423.415666][T11755] [ 423.503572][T11759] netlink: 'syz.0.2224': attribute type 21 has an invalid length. [ 423.645263][T11759] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2224'. [ 423.654871][T11752] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2227'. [ 423.760453][T11773] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2230'. [ 423.832958][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.996335][T11789] netlink: 'syz.7.2235': attribute type 21 has an invalid length. [ 424.014337][T11789] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2235'. [ 424.079463][T11804] netlink: 'syz.7.2238': attribute type 11 has an invalid length. [ 424.094769][T11804] netlink: 140 bytes leftover after parsing attributes in process `syz.7.2238'. [ 424.314406][T11804] isofs_fill_super: root inode is not a directory. Corrupted media? [ 424.377913][T11822] netlink: 'syz.8.2239': attribute type 7 has an invalid length. [ 424.569852][T11826] netlink: 'syz.7.2241': attribute type 11 has an invalid length. [ 424.694176][T11826] isofs_fill_super: root inode is not a directory. Corrupted media? [ 425.111473][T11823] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.175429][T11823] ext4 filesystem being mounted at /427/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.446743][T11847] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.2245: inode has both inline data and extents flags [ 425.483608][T11847] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 425.483786][T11847] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.2245: couldn't read orphan inode 15 (err -117) [ 425.493550][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 425.493575][ C1] EXT4-fs (loop8): initial error at time 2000000001: ext4_orphan_get:1391: inode 15 [ 425.493623][ C1] EXT4-fs (loop8): last error at time 2000000001: ext4_orphan_get:1391: inode 15 [ 425.609368][T11854] netlink: 'syz.7.2248': attribute type 21 has an invalid length. [ 425.617748][T11847] loop8: lost filesystem error report for type 5 error -117 [ 425.638587][T11847] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 425.719209][ T3749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.848008][T11864] set_capacity_and_notify: 6 callbacks suppressed [ 425.848029][T11864] loop7: detected capacity change from 0 to 1024 [ 425.865561][T11865] netlink: 'syz.5.2252': attribute type 11 has an invalid length. [ 425.903045][T11239] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 425.923717][T11864] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.972478][T11869] Unsupported ieee802154 address type: 0 [ 425.973223][T11864] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.015912][T11870] loop5: detected capacity change from 0 to 164 [ 426.081677][T11870] isofs_fill_super: root inode is not a directory. Corrupted media? [ 426.139237][T11864] netlink: 'syz.7.2253': attribute type 21 has an invalid length. [ 426.147382][ T28] kauditd_printk_skb: 281 callbacks suppressed [ 426.147451][ T28] audit: type=1400 audit(2000000000.520:9479): avc: denied { read } for pid=11862 comm="syz.7.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 426.226018][ T28] audit: type=1400 audit(2000000000.570:9480): avc: denied { bind } for pid=11873 comm="syz.8.2256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 426.424114][T11886] FAULT_INJECTION: forcing a failure. [ 426.424114][T11886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.476234][T11886] CPU: 1 UID: 0 PID: 11886 Comm: syz.5.2261 Tainted: G W syzkaller #0 PREEMPT(full) [ 426.476389][T11886] Tainted: [W]=WARN [ 426.476399][T11886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 426.476416][T11886] Call Trace: [ 426.476425][T11886] [ 426.476436][T11886] __dump_stack+0x1d/0x30 [ 426.476496][T11886] dump_stack_lvl+0x95/0xd0 [ 426.476527][T11886] dump_stack+0x15/0x1b [ 426.476556][T11886] should_fail_ex+0x263/0x280 [ 426.476647][T11886] should_fail+0xb/0x20 [ 426.476678][T11886] should_fail_usercopy+0x1a/0x20 [ 426.476703][T11886] _copy_to_user+0x20/0xa0 [ 426.476738][T11886] simple_read_from_buffer+0xb5/0x130 [ 426.476766][T11886] proc_fail_nth_read+0x10e/0x150 [ 426.476883][T11886] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 426.476911][T11886] vfs_read+0x1ab/0x7f0 [ 426.476945][T11886] ? __rcu_read_unlock+0x4e/0x70 [ 426.476965][T11886] ? __fget_files+0x184/0x1c0 [ 426.477048][T11886] ? mutex_lock+0x57/0x90 [ 426.477080][T11886] ksys_read+0xdc/0x1a0 [ 426.477153][T11886] __x64_sys_read+0x40/0x50 [ 426.477185][T11886] x64_sys_call+0x2886/0x3020 [ 426.477213][T11886] do_syscall_64+0x12c/0x370 [ 426.477252][T11886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.477281][T11886] RIP: 0033:0x7f0003e8cece [ 426.477324][T11886] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 426.477348][T11886] RSP: 002b:00007f000291efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 426.477451][T11886] RAX: ffffffffffffffda RBX: 00007f000291f6c0 RCX: 00007f0003e8cece [ 426.477470][T11886] RDX: 000000000000000f RSI: 00007f000291f0a0 RDI: 0000000000000004 [ 426.477538][T11886] RBP: 00007f000291f090 R08: 0000000000000000 R09: 0000000000000000 [ 426.477550][T11886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.477566][T11886] R13: 00007f0004146038 R14: 00007f0004145fa0 R15: 00007ffebb5ab988 [ 426.477588][T11886] [ 426.903525][T11895] loop8: detected capacity change from 0 to 256 [ 427.003423][T11895] FAT-fs (loop8): Directory bread(block 64) failed [ 427.010408][T11895] FAT-fs (loop8): Directory bread(block 65) failed [ 427.017202][T11895] FAT-fs (loop8): Directory bread(block 66) failed [ 427.023983][T11895] FAT-fs (loop8): Directory bread(block 67) failed [ 427.030675][T11895] FAT-fs (loop8): Directory bread(block 68) failed [ 427.037710][T11895] FAT-fs (loop8): Directory bread(block 69) failed [ 427.044575][T11895] FAT-fs (loop8): Directory bread(block 70) failed [ 427.051259][T11895] FAT-fs (loop8): Directory bread(block 71) failed [ 427.057990][T11895] FAT-fs (loop8): Directory bread(block 72) failed [ 427.064691][T11895] FAT-fs (loop8): Directory bread(block 73) failed [ 427.364757][T11897] loop1: detected capacity change from 0 to 2048 [ 427.427587][T11897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.509450][T11897] ext4 filesystem being mounted at /418/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.633744][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.675638][T11911] validate_nla: 2 callbacks suppressed [ 427.675652][T11911] netlink: 'syz.5.2271': attribute type 21 has an invalid length. [ 427.753645][T11911] __nla_validate_parse: 8 callbacks suppressed [ 427.753665][T11911] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2271'. [ 427.899307][T11921] FAULT_INJECTION: forcing a failure. [ 427.899307][T11921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.899415][T11921] CPU: 0 UID: 0 PID: 11921 Comm: syz.5.2275 Tainted: G W syzkaller #0 PREEMPT(full) [ 427.899450][T11921] Tainted: [W]=WARN [ 427.899458][T11921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 427.899478][T11921] Call Trace: [ 427.899527][T11921] [ 427.899534][T11921] __dump_stack+0x1d/0x30 [ 427.899564][T11921] dump_stack_lvl+0x95/0xd0 [ 427.899589][T11921] dump_stack+0x15/0x1b [ 427.899645][T11921] should_fail_ex+0x263/0x280 [ 427.899668][T11921] should_fail+0xb/0x20 [ 427.899689][T11921] should_fail_usercopy+0x1a/0x20 [ 427.899712][T11921] _copy_from_user+0x1c/0xb0 [ 427.899785][T11921] kstrtouint_from_user+0x69/0xf0 [ 427.899817][T11921] proc_fail_nth_write+0x50/0x160 [ 427.899852][T11921] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 427.899961][T11921] vfs_write+0x269/0x9f0 [ 427.900006][T11921] ? __rcu_read_unlock+0x4e/0x70 [ 427.900037][T11921] ? __fget_files+0x184/0x1c0 [ 427.900067][T11921] ? __sys_bind+0x222/0x290 [ 427.900153][T11921] ? mutex_lock+0x57/0x90 [ 427.900181][T11921] ksys_write+0xdc/0x1a0 [ 427.900218][T11921] __x64_sys_write+0x40/0x50 [ 427.900383][T11921] x64_sys_call+0x27e1/0x3020 [ 427.900411][T11921] do_syscall_64+0x12c/0x370 [ 427.900454][T11921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.900482][T11921] RIP: 0033:0x7f0003e8cece [ 427.900577][T11921] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 427.900595][T11921] RSP: 002b:00007f000291efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 427.900614][T11921] RAX: ffffffffffffffda RBX: 00007f000291f6c0 RCX: 00007f0003e8cece [ 427.900628][T11921] RDX: 0000000000000001 RSI: 00007f000291f0a0 RDI: 0000000000000003 [ 427.900640][T11921] RBP: 00007f000291f090 R08: 0000000000000000 R09: 0000000000000000 [ 427.900690][T11921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.900712][T11921] R13: 00007f0004146038 R14: 00007f0004145fa0 R15: 00007ffebb5ab988 [ 427.900738][T11921] [ 427.986900][T11922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2274'. [ 429.611987][T11943] loop8: detected capacity change from 0 to 512 [ 429.754572][T11943] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.754725][T11943] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.127677][T11955] loop7: detected capacity change from 0 to 512 [ 430.308887][T11955] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.364332][T11955] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.400394][T11959] netlink: 'syz.5.2285': attribute type 21 has an invalid length. [ 430.408547][T11959] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2285'. [ 430.467824][T11963] tipc: Enabling of bearer rejected, failed to enable media [ 430.633043][ T28] audit: type=1400 audit(2000000000.190:9481): avc: denied { write } for pid=11966 comm="syz.5.2288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 430.776186][T11969] loop5: detected capacity change from 0 to 512 [ 430.786595][T11969] EXT4-fs: Ignoring removed nobh option [ 430.904716][T11969] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 430.912805][T11969] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a040e018, mo2=0002] [ 430.979299][T11969] System zones: 0-1, 15-15, 18-18, 34-34 [ 430.985892][T11969] EXT4-fs (loop5): orphan cleanup on readonly fs [ 431.015308][T11980] loop0: detected capacity change from 0 to 256 [ 431.050642][T11980] FAT-fs (loop0): Directory bread(block 64) failed [ 431.057344][T11980] FAT-fs (loop0): Directory bread(block 65) failed [ 431.064452][T11980] FAT-fs (loop0): Directory bread(block 66) failed [ 431.071280][T11980] FAT-fs (loop0): Directory bread(block 67) failed [ 431.078592][T11980] FAT-fs (loop0): Directory bread(block 68) failed [ 431.085624][T11980] FAT-fs (loop0): Directory bread(block 69) failed [ 431.093447][T11980] FAT-fs (loop0): Directory bread(block 70) failed [ 431.100272][T11980] FAT-fs (loop0): Directory bread(block 71) failed [ 431.107275][T11980] FAT-fs (loop0): Directory bread(block 72) failed [ 431.114118][T11980] FAT-fs (loop0): Directory bread(block 73) failed [ 431.166971][T11239] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.178367][T11969] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2288: bg 0: block 15: invalid block bitmap [ 431.922904][T11969] loop5: lost filesystem error report for type 5 error -117 [ 431.923064][T11969] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 431.930719][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 431.930738][ C0] EXT4-fs (loop5): initial error at time 2000000001: ext4_validate_block_bitmap:432 [ 431.930769][ C0] EXT4-fs (loop5): last error at time 2000000001: ext4_validate_block_bitmap:432 [ 432.280441][T11969] loop5: lost filesystem error report for type 5 error -117 [ 432.280704][T11969] EXT4-fs (loop5): 1 truncate cleaned up [ 432.924883][T11969] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 433.279068][ T28] audit: type=1400 audit(2000000002.870:9482): avc: denied { read } for pid=11966 comm="syz.5.2288" name="rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 433.322304][ T28] audit: type=1400 audit(2000000002.900:9483): avc: denied { open } for pid=11966 comm="syz.5.2288" path="/dev/rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 433.346894][ T28] audit: type=1400 audit(2000000002.900:9484): avc: denied { ioctl } for pid=11966 comm="syz.5.2288" path="/dev/rtc0" dev="devtmpfs" ino=245 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 433.393190][ T3749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.495044][T11991] netlink: 'syz.8.2296': attribute type 21 has an invalid length. [ 433.503006][ T313] kworker/u8:6: attempt to access beyond end of device [ 433.503006][ T313] loop0: rw=1, sector=1192, nr_sectors = 576 limit=256 [ 433.518342][T11991] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2296'. [ 433.535019][ T313] kworker/u8:6: attempt to access beyond end of device [ 433.535019][ T313] loop0: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 433.551991][ T313] kworker/u8:6: attempt to access beyond end of device [ 433.551991][ T313] loop0: rw=1, sector=1960, nr_sectors = 2048 limit=256 [ 433.569111][ T313] kworker/u8:6: attempt to access beyond end of device [ 433.569111][ T313] loop0: rw=1, sector=4008, nr_sectors = 2048 limit=256 [ 433.589203][ T313] kworker/u8:6: attempt to access beyond end of device [ 433.589203][ T313] loop0: rw=1, sector=6056, nr_sectors = 2048 limit=256 [ 433.640491][T10963] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.651328][ T313] kworker/u8:6: attempt to access beyond end of device [ 433.651328][ T313] loop0: rw=1, sector=8104, nr_sectors = 2048 limit=256 [ 433.690728][ T313] kworker/u8:6: attempt to access beyond end of device [ 433.690728][ T313] loop0: rw=1, sector=10152, nr_sectors = 2048 limit=256 [ 433.745872][ T313] kworker/u8:6: attempt to access beyond end of device [ 433.745872][ T313] loop0: rw=1, sector=12200, nr_sectors = 2048 limit=256 [ 433.768449][ T313] kworker/u8:6: attempt to access beyond end of device [ 433.768449][ T313] loop0: rw=1, sector=14248, nr_sectors = 2048 limit=256 [ 433.788462][ T313] kworker/u8:6: attempt to access beyond end of device [ 433.788462][ T313] loop0: rw=1, sector=16296, nr_sectors = 2048 limit=256 [ 433.848511][T12001] FAULT_INJECTION: forcing a failure. [ 433.848511][T12001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.894372][T12001] CPU: 1 UID: 0 PID: 12001 Comm: syz.8.2300 Tainted: G W syzkaller #0 PREEMPT(full) [ 433.894405][T12001] Tainted: [W]=WARN [ 433.894510][T12001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 433.894524][T12001] Call Trace: [ 433.894531][T12001] [ 433.894541][T12001] __dump_stack+0x1d/0x30 [ 433.894571][T12001] dump_stack_lvl+0x95/0xd0 [ 433.894666][T12001] dump_stack+0x15/0x1b [ 433.894759][T12001] should_fail_ex+0x263/0x280 [ 433.894852][T12001] should_fail+0xb/0x20 [ 433.894872][T12001] should_fail_usercopy+0x1a/0x20 [ 433.894899][T12001] _copy_to_user+0x20/0xa0 [ 433.894959][T12001] simple_read_from_buffer+0xb5/0x130 [ 433.894983][T12001] proc_fail_nth_read+0x10e/0x150 [ 433.895016][T12001] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 433.895046][T12001] vfs_read+0x1ab/0x7f0 [ 433.895158][T12001] ? __rcu_read_unlock+0x4e/0x70 [ 433.895182][T12001] ? __fget_files+0x184/0x1c0 [ 433.895205][T12001] ? mutex_lock+0x57/0x90 [ 433.895263][T12001] ksys_read+0xdc/0x1a0 [ 433.895299][T12001] __x64_sys_read+0x40/0x50 [ 433.895337][T12001] x64_sys_call+0x2886/0x3020 [ 433.895377][T12001] do_syscall_64+0x12c/0x370 [ 433.895488][T12001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.895510][T12001] RIP: 0033:0x7f243289cece [ 433.895526][T12001] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 433.895584][T12001] RSP: 002b:00007f243132efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 433.895617][T12001] RAX: ffffffffffffffda RBX: 00007f243132f6c0 RCX: 00007f243289cece [ 433.895633][T12001] RDX: 000000000000000f RSI: 00007f243132f0a0 RDI: 0000000000000005 [ 433.895647][T12001] RBP: 00007f243132f090 R08: 0000000000000000 R09: 0000000000000000 [ 433.895728][T12001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.895742][T12001] R13: 00007f2432b56038 R14: 00007f2432b55fa0 R15: 00007fff8bad93a8 [ 433.895802][T12001] [ 433.938562][T12012] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2303'. [ 434.326923][T12030] loop1: detected capacity change from 0 to 512 [ 434.526733][T12030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.550261][T12030] ext4 filesystem being mounted at /426/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.726771][T12050] loop8: detected capacity change from 0 to 512 [ 434.805210][T12050] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.844394][T12050] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.876321][T12047] loop5: detected capacity change from 0 to 8192 [ 435.016281][T12047] FAULT_INJECTION: forcing a failure. [ 435.016281][T12047] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 435.067342][T12047] CPU: 1 UID: 0 PID: 12047 Comm: syz.5.2313 Tainted: G W syzkaller #0 PREEMPT(full) [ 435.067450][T12047] Tainted: [W]=WARN [ 435.067461][T12047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 435.067615][T12047] Call Trace: [ 435.067624][T12047] [ 435.067633][T12047] __dump_stack+0x1d/0x30 [ 435.067702][T12047] dump_stack_lvl+0x95/0xd0 [ 435.067793][T12047] dump_stack+0x15/0x1b [ 435.067865][T12047] should_fail_ex+0x263/0x280 [ 435.067896][T12047] should_fail_alloc_page+0xf2/0x100 [ 435.067920][T12047] __alloc_frozen_pages_noprof+0x108/0x360 [ 435.067971][T12047] alloc_pages_mpol+0xb3/0x260 [ 435.068144][T12047] folio_alloc_noprof+0x96/0x150 [ 435.068173][T12047] filemap_alloc_folio_noprof+0x92/0x220 [ 435.068221][T12047] __filemap_get_folio_mpol+0x295/0x680 [ 435.068253][T12047] ? __rcu_read_unlock+0x4e/0x70 [ 435.068277][T12047] cont_write_begin+0x5ca/0x970 [ 435.068306][T12047] ? path_openat+0x1b01/0x2050 [ 435.068438][T12047] fat_write_begin+0x4f/0xe0 [ 435.068505][T12047] ? __pfx_fat_get_block+0x10/0x10 [ 435.068530][T12047] cont_write_begin+0x1b0/0x970 [ 435.068562][T12047] ? kstrtouint+0x76/0xc0 [ 435.068607][T12047] fat_write_begin+0x4f/0xe0 [ 435.068666][T12047] ? __pfx_fat_get_block+0x10/0x10 [ 435.068699][T12047] generic_cont_expand_simple+0xb0/0x150 [ 435.068806][T12047] fat_cont_expand+0x3e/0x170 [ 435.068834][T12047] fat_fallocate+0x177/0x1c0 [ 435.068872][T12047] vfs_fallocate+0x3b6/0x450 [ 435.068901][T12047] __x64_sys_fallocate+0x7a/0xd0 [ 435.068992][T12047] x64_sys_call+0x298e/0x3020 [ 435.069028][T12047] do_syscall_64+0x12c/0x370 [ 435.069074][T12047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.069139][T12047] RIP: 0033:0x7f0003ecc629 [ 435.069160][T12047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.069185][T12047] RSP: 002b:00007f000291f028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 435.069211][T12047] RAX: ffffffffffffffda RBX: 00007f0004145fa0 RCX: 00007f0003ecc629 [ 435.069230][T12047] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 435.069248][T12047] RBP: 00007f000291f090 R08: 0000000000000000 R09: 0000000000000000 [ 435.069264][T12047] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000001 [ 435.069367][T12047] R13: 00007f0004146038 R14: 00007f0004145fa0 R15: 00007ffebb5ab988 [ 435.069441][T12047] [ 435.671938][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.794866][T12076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2320'. [ 435.978564][T11239] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.110839][T12101] loop1: detected capacity change from 0 to 4096 [ 436.160709][T12101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.535368][T12101] netlink: 'syz.1.2331': attribute type 21 has an invalid length. [ 436.589080][T12103] loop8: detected capacity change from 0 to 8192 [ 436.609435][T12101] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2331'. [ 436.773652][ T28] audit: type=1400 audit(2000000003.270:9485): avc: denied { setopt } for pid=12113 comm="syz.0.2333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 436.890087][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.987365][T12124] netlink: 'syz.1.2334': attribute type 21 has an invalid length. [ 437.004387][T12124] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2334'. [ 437.023978][T12124] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 437.073501][ T28] audit: type=1326 audit(2000000000.080:9486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12130 comm="syz.5.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0003ecc629 code=0x7ffc0000 [ 437.113162][T12132] netlink: 'syz.1.2339': attribute type 29 has an invalid length. [ 437.139281][ T28] audit: type=1326 audit(2000000000.110:9487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12130 comm="syz.5.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0003ecc629 code=0x7ffc0000 [ 437.163785][ T28] audit: type=1326 audit(2000000000.110:9488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12130 comm="syz.5.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0003ecc629 code=0x7ffc0000 [ 437.187766][T12132] netlink: 'syz.1.2339': attribute type 29 has an invalid length. [ 437.188953][ T28] audit: type=1326 audit(2000000000.110:9489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12130 comm="syz.5.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f0003ecc629 code=0x7ffc0000 [ 437.220260][ T28] audit: type=1326 audit(2000000000.110:9490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12130 comm="syz.5.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0003ecc629 code=0x7ffc0000 [ 437.235188][T12132] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2339'. [ 437.275612][ T28] audit: type=1326 audit(2000000000.110:9491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12130 comm="syz.5.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0003ecc629 code=0x7ffc0000 [ 437.345675][T12148] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 437.362989][T12148] loop7: detected capacity change from 0 to 16384 [ 437.491043][T12152] loop7: detected capacity change from 16384 to 0 [ 437.497787][ C0] I/O error, dev loop7, sector 5120 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 437.636431][T12161] netlink: 'syz.8.2349': attribute type 21 has an invalid length. [ 437.660282][T12161] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2349'. [ 437.699236][T12169] syzkaller0: entered allmulticast mode [ 438.147710][T12169] syzkaller0: entered promiscuous mode [ 438.261991][T12168] syzkaller0: left promiscuous mode [ 438.268511][T12176] netlink: 766 bytes leftover after parsing attributes in process `syz.1.2355'. [ 438.297868][T12168] syzkaller0: left allmulticast mode [ 438.495630][T12190] FAULT_INJECTION: forcing a failure. [ 438.495630][T12190] name failslab, interval 1, probability 0, space 0, times 0 [ 438.514302][T12190] CPU: 0 UID: 0 PID: 12190 Comm: syz.7.2361 Tainted: G W syzkaller #0 PREEMPT(full) [ 438.514339][T12190] Tainted: [W]=WARN [ 438.514347][T12190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 438.514363][T12190] Call Trace: [ 438.514372][T12190] [ 438.514421][T12190] __dump_stack+0x1d/0x30 [ 438.514480][T12190] dump_stack_lvl+0x95/0xd0 [ 438.514512][T12190] dump_stack+0x15/0x1b [ 438.514591][T12190] should_fail_ex+0x263/0x280 [ 438.514620][T12190] should_failslab+0x8c/0xb0 [ 438.514695][T12190] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 438.514861][T12190] ? __alloc_skb+0x2d6/0x690 [ 438.514915][T12190] __alloc_skb+0x2d6/0x690 [ 438.514947][T12190] tcp_stream_alloc_skb+0x30/0x320 [ 438.515026][T12190] tcp_sendmsg_locked+0xd21/0x2de0 [ 438.515056][T12190] ? terminate_walk+0x1e6/0x210 [ 438.515096][T12190] ? path_openat+0x1ab2/0x2050 [ 438.515184][T12190] ? __rcu_read_unlock+0x4e/0x70 [ 438.515213][T12190] ? avc_has_perm_noaudit+0xab/0x130 [ 438.515262][T12190] ? __pfx_tcp_sendmsg+0x10/0x10 [ 438.515292][T12190] tcp_sendmsg+0x2f/0x50 [ 438.515314][T12190] inet_sendmsg+0x76/0xd0 [ 438.515430][T12190] __sys_sendto+0x3f4/0x4d0 [ 438.515486][T12190] __x64_sys_sendto+0x76/0x90 [ 438.515519][T12190] x64_sys_call+0x2d35/0x3020 [ 438.515556][T12190] do_syscall_64+0x12c/0x370 [ 438.515678][T12190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.515707][T12190] RIP: 0033:0x7f8f3e71c629 [ 438.515728][T12190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.515759][T12190] RSP: 002b:00007f8f3d177028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 438.515785][T12190] RAX: ffffffffffffffda RBX: 00007f8f3e995fa0 RCX: 00007f8f3e71c629 [ 438.515814][T12190] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 438.515832][T12190] RBP: 00007f8f3d177090 R08: 0000000000000000 R09: 0000000000000000 [ 438.515849][T12190] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000001 [ 438.515862][T12190] R13: 00007f8f3e996038 R14: 00007f8f3e995fa0 R15: 00007ffcecd9f7f8 [ 438.515890][T12190] [ 438.783677][T12192] netlink: 'syz.1.2362': attribute type 21 has an invalid length. [ 438.792042][T12192] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2362'. [ 438.803189][T12192] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 438.878388][T12202] netlink: 'syz.1.2367': attribute type 29 has an invalid length. [ 438.887356][T12202] netlink: 'syz.1.2367': attribute type 29 has an invalid length. [ 438.929220][T12202] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2367'. [ 439.006436][T12210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2368'. [ 439.022897][T12213] syzkaller0: entered allmulticast mode [ 439.035318][T12213] syzkaller0: entered promiscuous mode [ 439.090373][T12211] syzkaller0: left promiscuous mode [ 439.097899][T12211] syzkaller0: left allmulticast mode [ 439.106829][T12210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2368'. [ 439.259112][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 439.259147][ T28] audit: type=1400 audit(2000000000.470:9497): avc: denied { ioctl } for pid=12223 comm="syz.8.2375" path="socket:[34307]" dev="sockfs" ino=34307 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 439.321399][T12220] loop0: detected capacity change from 0 to 512 [ 439.357042][T12220] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.384322][T12220] ext4 filesystem being mounted at /479/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.399978][T12228] FAULT_INJECTION: forcing a failure. [ 439.399978][T12228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.414672][T12228] CPU: 1 UID: 0 PID: 12228 Comm: syz.8.2376 Tainted: G W syzkaller #0 PREEMPT(full) [ 439.414711][T12228] Tainted: [W]=WARN [ 439.414721][T12228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 439.414738][T12228] Call Trace: [ 439.414772][T12228] [ 439.414780][T12228] __dump_stack+0x1d/0x30 [ 439.414808][T12228] dump_stack_lvl+0x95/0xd0 [ 439.414864][T12228] dump_stack+0x15/0x1b [ 439.414893][T12228] should_fail_ex+0x263/0x280 [ 439.414923][T12228] should_fail+0xb/0x20 [ 439.414947][T12228] should_fail_usercopy+0x1a/0x20 [ 439.414992][T12228] _copy_to_user+0x20/0xa0 [ 439.415051][T12228] simple_read_from_buffer+0xb5/0x130 [ 439.415089][T12228] proc_fail_nth_read+0x10e/0x150 [ 439.415129][T12228] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 439.415194][T12228] vfs_read+0x1ab/0x7f0 [ 439.415228][T12228] ? mutex_unlock+0x4e/0x90 [ 439.415267][T12228] ? __rcu_read_unlock+0x4e/0x70 [ 439.415302][T12228] ? __fget_files+0x184/0x1c0 [ 439.415372][T12228] ? mutex_lock+0x57/0x90 [ 439.415409][T12228] ksys_read+0xdc/0x1a0 [ 439.415448][T12228] __x64_sys_read+0x40/0x50 [ 439.415490][T12228] x64_sys_call+0x2886/0x3020 [ 439.415584][T12228] do_syscall_64+0x12c/0x370 [ 439.415663][T12228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.415685][T12228] RIP: 0033:0x7f243289cece [ 439.415719][T12228] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 439.415743][T12228] RSP: 002b:00007f243132efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 439.415767][T12228] RAX: ffffffffffffffda RBX: 00007f243132f6c0 RCX: 00007f243289cece [ 439.415782][T12228] RDX: 000000000000000f RSI: 00007f243132f0a0 RDI: 0000000000000005 [ 439.415794][T12228] RBP: 00007f243132f090 R08: 0000000000000000 R09: 0000000000000000 [ 439.415807][T12228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.415888][T12228] R13: 00007f2432b56038 R14: 00007f2432b55fa0 R15: 00007fff8bad93a8 [ 439.415910][T12228] [ 439.472383][T12234] FAULT_INJECTION: forcing a failure. [ 439.472383][T12234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.643111][T12234] CPU: 0 UID: 0 PID: 12234 Comm: syz.1.2374 Tainted: G W syzkaller #0 PREEMPT(full) [ 439.643196][T12234] Tainted: [W]=WARN [ 439.643206][T12234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 439.643228][T12234] Call Trace: [ 439.643238][T12234] [ 439.643250][T12234] __dump_stack+0x1d/0x30 [ 439.643286][T12234] dump_stack_lvl+0x95/0xd0 [ 439.643348][T12234] dump_stack+0x15/0x1b [ 439.643405][T12234] should_fail_ex+0x263/0x280 [ 439.643435][T12234] should_fail+0xb/0x20 [ 439.643458][T12234] should_fail_usercopy+0x1a/0x20 [ 439.643530][T12234] _copy_to_user+0x20/0xa0 [ 439.643567][T12234] sctp_getsockopt_pf_expose+0x2e5/0x340 [ 439.643617][T12234] sctp_getsockopt+0x40a/0xaa0 [ 439.643690][T12234] sock_common_getsockopt+0x60/0x70 [ 439.643787][T12234] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 439.643827][T12234] do_sock_getsockopt+0x1c4/0x210 [ 439.643930][T12234] __x64_sys_getsockopt+0x11d/0x1a0 [ 439.644033][T12234] x64_sys_call+0x2dcf/0x3020 [ 439.644144][T12234] do_syscall_64+0x12c/0x370 [ 439.644195][T12234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.644226][T12234] RIP: 0033:0x7feedc98c629 [ 439.644247][T12234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.644270][T12234] RSP: 002b:00007feedb3e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 439.644295][T12234] RAX: ffffffffffffffda RBX: 00007feedcc05fa0 RCX: 00007feedc98c629 [ 439.644413][T12234] RDX: 0000000000000083 RSI: 0000000000000084 RDI: 0000000000000003 [ 439.644430][T12234] RBP: 00007feedb3e7090 R08: 00002000000004c0 R09: 0000000000000000 [ 439.644448][T12234] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.644565][T12234] R13: 00007feedcc06038 R14: 00007feedcc05fa0 R15: 00007fff93b3ecc8 [ 439.644594][T12234] [ 439.866126][T12236] netlink: 'syz.8.2377': attribute type 21 has an invalid length. [ 439.885667][T12236] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2377'. [ 439.976529][ T28] audit: type=1400 audit(2000000000.100:9498): avc: denied { ioctl } for pid=12244 comm="syz.7.2381" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 440.095532][T12255] FAULT_INJECTION: forcing a failure. [ 440.095532][T12255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.134583][T12255] CPU: 1 UID: 0 PID: 12255 Comm: syz.1.2386 Tainted: G W syzkaller #0 PREEMPT(full) [ 440.134623][T12255] Tainted: [W]=WARN [ 440.134632][T12255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 440.134778][T12255] Call Trace: [ 440.134784][T12255] [ 440.134795][T12255] __dump_stack+0x1d/0x30 [ 440.134826][T12255] dump_stack_lvl+0x95/0xd0 [ 440.134852][T12255] dump_stack+0x15/0x1b [ 440.134872][T12255] should_fail_ex+0x263/0x280 [ 440.134962][T12255] should_fail+0xb/0x20 [ 440.135134][T12255] should_fail_usercopy+0x1a/0x20 [ 440.135158][T12255] _copy_from_iter+0xcf/0xea0 [ 440.135181][T12255] ? __alloc_skb+0x4f6/0x690 [ 440.135201][T12255] ? __alloc_skb+0x200/0x690 [ 440.135263][T12255] netlink_sendmsg+0x4ae/0x6f0 [ 440.135321][T12255] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.135352][T12255] ____sys_sendmsg+0x5af/0x600 [ 440.135385][T12255] ___sys_sendmsg+0x195/0x1e0 [ 440.135424][T12255] __x64_sys_sendmsg+0xd4/0x160 [ 440.135458][T12255] x64_sys_call+0x194c/0x3020 [ 440.135553][T12255] do_syscall_64+0x12c/0x370 [ 440.135586][T12255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.135606][T12255] RIP: 0033:0x7feedc98c629 [ 440.135637][T12255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.135653][T12255] RSP: 002b:00007feedb3e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.135725][T12255] RAX: ffffffffffffffda RBX: 00007feedcc05fa0 RCX: 00007feedc98c629 [ 440.135797][T12255] RDX: 0000000004040814 RSI: 0000200000000240 RDI: 0000000000000004 [ 440.135867][T12255] RBP: 00007feedb3e7090 R08: 0000000000000000 R09: 0000000000000000 [ 440.135888][T12255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.135899][T12255] R13: 00007feedcc06038 R14: 00007feedcc05fa0 R15: 00007fff93b3ecc8 [ 440.135922][T12255] [ 440.367880][T12262] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2390'. [ 440.390512][T12267] netlink: 'syz.8.2391': attribute type 21 has an invalid length. [ 440.404423][T12267] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2391'. [ 440.546019][T12283] FAULT_INJECTION: forcing a failure. [ 440.546019][T12283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.577484][T12281] loop8: detected capacity change from 0 to 1024 [ 440.594290][T12283] CPU: 0 UID: 0 PID: 12283 Comm: syz.1.2397 Tainted: G W syzkaller #0 PREEMPT(full) [ 440.594381][T12283] Tainted: [W]=WARN [ 440.594388][T12283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 440.594403][T12283] Call Trace: [ 440.594412][T12283] [ 440.594423][T12283] __dump_stack+0x1d/0x30 [ 440.594455][T12283] dump_stack_lvl+0x95/0xd0 [ 440.594490][T12283] dump_stack+0x15/0x1b [ 440.594519][T12283] should_fail_ex+0x263/0x280 [ 440.594550][T12283] should_fail+0xb/0x20 [ 440.594594][T12283] should_fail_usercopy+0x1a/0x20 [ 440.594620][T12283] _copy_from_user+0x1c/0xb0 [ 440.594658][T12283] ___sys_sendmsg+0xc1/0x1e0 [ 440.594706][T12283] __x64_sys_sendmsg+0xd4/0x160 [ 440.594799][T12283] x64_sys_call+0x194c/0x3020 [ 440.594840][T12283] do_syscall_64+0x12c/0x370 [ 440.594950][T12283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.594973][T12283] RIP: 0033:0x7feedc98c629 [ 440.594993][T12283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.595017][T12283] RSP: 002b:00007feedb3e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.595043][T12283] RAX: ffffffffffffffda RBX: 00007feedcc05fa0 RCX: 00007feedc98c629 [ 440.595138][T12283] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 440.595151][T12283] RBP: 00007feedb3e7090 R08: 0000000000000000 R09: 0000000000000000 [ 440.595168][T12283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.595187][T12283] R13: 00007feedcc06038 R14: 00007feedcc05fa0 R15: 00007fff93b3ecc8 [ 440.595287][T12283] [ 440.825305][T12281] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.900809][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.971212][T12292] loop0: detected capacity change from 0 to 512 [ 440.980313][T12292] EXT4-fs: Ignoring removed nobh option [ 440.994785][T11239] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.013416][T12292] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 441.042377][T12292] EXT4-fs (loop0): 1 truncate cleaned up [ 441.054658][T12292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.071892][ T28] audit: type=1400 audit(2000000000.670:9499): avc: denied { create } for pid=12297 comm="syz.8.2401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 441.114270][ T28] audit: type=1400 audit(2000000000.690:9500): avc: denied { write } for pid=12297 comm="syz.8.2401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 441.153558][ T28] audit: type=1400 audit(2000000000.750:9501): avc: denied { checkpoint_restore } for pid=12297 comm="syz.8.2401" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 441.221199][T12301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.266111][T12301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.283401][T12306] netlink: 'syz.7.2404': attribute type 21 has an invalid length. [ 441.301672][T12306] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2404'. [ 441.376828][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.427783][T12317] netlink: 'syz.7.2408': attribute type 11 has an invalid length. [ 441.436017][T12317] netlink: 140 bytes leftover after parsing attributes in process `syz.7.2408'. [ 441.587554][T12329] loop7: detected capacity change from 0 to 164 [ 441.606088][T12329] isofs_fill_super: root inode is not a directory. Corrupted media? [ 441.718802][T12337] netlink: 'syz.0.2415': attribute type 21 has an invalid length. [ 441.727099][T12337] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2415'. [ 441.800986][T12343] loop0: detected capacity change from 0 to 512 [ 441.831802][T12343] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 441.879573][T12343] loop0: detected capacity change from 0 to 1764 [ 441.889720][ T28] audit: type=1400 audit(2000000000.160:9502): avc: denied { mount } for pid=12342 comm="syz.0.2417" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 441.933423][ T28] audit: type=1400 audit(2000000000.200:9503): avc: denied { ioctl } for pid=12342 comm="syz.0.2417" path="socket:[34564]" dev="sockfs" ino=34564 ioctlcmd=0x9421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 441.985586][ T28] audit: type=1400 audit(2000000000.260:9504): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 442.033768][T12348] loop7: detected capacity change from 0 to 256 [ 442.213706][T12360] loop0: detected capacity change from 0 to 1024 [ 442.247372][T12360] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.267851][ T28] audit: type=1400 audit(2000000000.540:9505): avc: denied { ioctl } for pid=12359 comm="syz.0.2424" path="/489/file1/file1" dev="loop0" ino=15 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 442.320987][T12365] futex_wake_op: syz.0.2424 tries to shift op by 32; fix this program [ 442.342778][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.381281][T12367] loop0: detected capacity change from 0 to 256 [ 442.421027][T12367] FAULT_INJECTION: forcing a failure. [ 442.421027][T12367] name failslab, interval 1, probability 0, space 0, times 0 [ 442.441541][T12367] CPU: 1 UID: 0 PID: 12367 Comm: syz.0.2426 Tainted: G W syzkaller #0 PREEMPT(full) [ 442.441589][T12367] Tainted: [W]=WARN [ 442.441598][T12367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 442.441613][T12367] Call Trace: [ 442.441620][T12367] [ 442.441629][T12367] __dump_stack+0x1d/0x30 [ 442.441663][T12367] dump_stack_lvl+0x95/0xd0 [ 442.441732][T12367] dump_stack+0x15/0x1b [ 442.441866][T12367] should_fail_ex+0x263/0x280 [ 442.441890][T12367] should_failslab+0x8c/0xb0 [ 442.441989][T12367] kmem_cache_alloc_noprof+0x66/0x400 [ 442.442020][T12367] ? alloc_empty_file+0x76/0x200 [ 442.442049][T12367] alloc_empty_file+0x76/0x200 [ 442.442074][T12367] path_openat+0x65/0x2050 [ 442.442154][T12367] ? _parse_integer_limit+0x170/0x190 [ 442.442202][T12367] ? _parse_integer+0x27/0x40 [ 442.442270][T12367] ? kstrtoull+0x111/0x140 [ 442.442317][T12367] ? kstrtouint+0x76/0xc0 [ 442.442355][T12367] do_file_open+0x16c/0x290 [ 442.442485][T12367] do_sys_openat2+0x94/0x130 [ 442.442522][T12367] __x64_sys_openat+0xf2/0x120 [ 442.442551][T12367] x64_sys_call+0x1e39/0x3020 [ 442.442608][T12367] do_syscall_64+0x12c/0x370 [ 442.442680][T12367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.442702][T12367] RIP: 0033:0x7f46b647c629 [ 442.442720][T12367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.442743][T12367] RSP: 002b:00007f46b4ecf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 442.442786][T12367] RAX: ffffffffffffffda RBX: 00007f46b66f5fa0 RCX: 00007f46b647c629 [ 442.442810][T12367] RDX: 000000000000275a RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 442.442825][T12367] RBP: 00007f46b4ecf090 R08: 0000000000000000 R09: 0000000000000000 [ 442.442842][T12367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.442898][T12367] R13: 00007f46b66f6038 R14: 00007f46b66f5fa0 R15: 00007ffcb945af98 [ 442.442924][T12367] [ 442.691224][T12369] netlink: 'syz.7.2427': attribute type 21 has an invalid length. [ 442.732232][ T28] audit: type=1326 audit(2000000000.030:9506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12374 comm="syz.7.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3e71c629 code=0x7ffc0000 [ 442.985660][T12395] netlink: 'syz.0.2440': attribute type 21 has an invalid length. [ 443.097833][T12404] syzkaller0: entered allmulticast mode [ 443.098218][T12404] syzkaller0: entered promiscuous mode [ 443.108077][T12403] syzkaller0: left promiscuous mode [ 443.109165][T12403] syzkaller0: left allmulticast mode [ 444.146442][T12427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.157863][T12427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.274405][ T28] kauditd_printk_skb: 199 callbacks suppressed [ 444.274463][ T28] audit: type=1326 audit(2000000001.280:9706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12431 comm="syz.0.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b647c629 code=0x7ffc0000 [ 444.339927][ T28] audit: type=1326 audit(2000000001.280:9707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12431 comm="syz.0.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b647c629 code=0x7ffc0000 [ 444.428411][ T28] audit: type=1326 audit(2000000001.280:9708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12431 comm="syz.0.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b647c629 code=0x7ffc0000 [ 444.455788][T12441] loop0: detected capacity change from 0 to 256 [ 444.477640][T12441] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 444.486840][T12443] tipc: Enabling of bearer rejected, failed to enable media [ 444.517605][ T28] audit: type=1326 audit(2000000001.280:9709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12431 comm="syz.0.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b647c629 code=0x7ffc0000 [ 444.556777][T12441] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 444.577938][ T28] audit: type=1326 audit(2000000001.280:9710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12431 comm="syz.0.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f46b647c629 code=0x7ffc0000 [ 444.640679][T12450] __nla_validate_parse: 2 callbacks suppressed [ 444.640698][T12450] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2463'. [ 444.649942][ T28] audit: type=1326 audit(2000000001.280:9711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12431 comm="syz.0.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b647c629 code=0x7ffc0000 [ 444.706663][T12450] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2463'. [ 444.739285][ T28] audit: type=1326 audit(2000000001.280:9712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12431 comm="syz.0.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b647c629 code=0x7ffc0000 [ 444.763948][T12454] loop0: detected capacity change from 0 to 1024 [ 444.771471][T12454] EXT4-fs: inline encryption not supported [ 444.784884][T12458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.813832][T12458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.829395][ T28] audit: type=1326 audit(2000000001.280:9713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12431 comm="syz.0.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b647c629 code=0x7ffc0000 [ 444.915521][ T28] audit: type=1326 audit(2000000001.280:9714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12431 comm="syz.0.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f46b647c629 code=0x7ffc0000 [ 444.939585][ T28] audit: type=1326 audit(2000000001.280:9715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12431 comm="syz.0.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b647c629 code=0x7ffc0000 [ 444.974509][T12454] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.382958][T12454] random: crng reseeded on system resumption [ 445.560496][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.085488][T12491] tipc: Enabling of bearer rejected, failed to enable media [ 446.323980][T12497] tipc: Enabling of bearer rejected, failed to enable media [ 446.680674][T12505] loop1: detected capacity change from 0 to 512 [ 446.720374][T12505] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 446.884273][T12505] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 446.924634][T12505] EXT4-fs (loop1): 1 truncate cleaned up [ 446.931260][T12505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.094063][T12507] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 447.170500][T12507] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=12507 comm=syz.1.2479 [ 447.798725][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.930887][T12517] loop1: detected capacity change from 0 to 2048 [ 448.001665][T12517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.155350][T12526] syzkaller0: entered allmulticast mode [ 448.186321][T12526] syzkaller0: entered promiscuous mode [ 448.245000][T12525] syzkaller0: left promiscuous mode [ 448.254619][T12525] syzkaller0: left allmulticast mode [ 448.410803][T12531] loop7: detected capacity change from 0 to 128 [ 448.432665][T12531] vhci_hcd vhci_hcd.4: default hub control req: 6000 v0010 i0008 l0 [ 448.505993][T12531] loop7: detected capacity change from 0 to 128 [ 448.531896][T12531] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 448.795258][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.350509][T12557] syzkaller0: entered allmulticast mode [ 449.375866][T12557] syzkaller0: entered promiscuous mode [ 449.455882][T12558] loop7: detected capacity change from 0 to 256 [ 449.487089][T12558] FAT-fs (loop7): Directory bread(block 64) failed [ 449.493892][T12558] FAT-fs (loop7): Directory bread(block 65) failed [ 449.500638][T12558] FAT-fs (loop7): Directory bread(block 66) failed [ 449.507349][T12558] FAT-fs (loop7): Directory bread(block 67) failed [ 449.514134][T12558] FAT-fs (loop7): Directory bread(block 68) failed [ 449.520833][T12558] FAT-fs (loop7): Directory bread(block 69) failed [ 449.527895][T12558] FAT-fs (loop7): Directory bread(block 70) failed [ 449.534668][T12558] FAT-fs (loop7): Directory bread(block 71) failed [ 449.541237][T12558] FAT-fs (loop7): Directory bread(block 72) failed [ 449.547861][T12558] FAT-fs (loop7): Directory bread(block 73) failed [ 449.587148][T12554] syzkaller0: left promiscuous mode [ 451.398525][T12554] syzkaller0: left allmulticast mode [ 452.593377][T12555] loop0: detected capacity change from 0 to 512 [ 452.664148][ T4217] bio_check_eod: 189 callbacks suppressed [ 452.664164][ T4217] kworker/u8:18: attempt to access beyond end of device [ 452.664164][ T4217] loop7: rw=1, sector=1192, nr_sectors = 576 limit=256 [ 452.707677][T12566] loop1: detected capacity change from 0 to 2048 [ 452.744780][ T4217] kworker/u8:18: attempt to access beyond end of device [ 452.744780][ T4217] loop7: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 452.771739][T12555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.794488][T12555] ext4 filesystem being mounted at /510/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.813560][T12566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.828309][ T4217] kworker/u8:18: attempt to access beyond end of device [ 452.828309][ T4217] loop7: rw=1, sector=1960, nr_sectors = 8128 limit=256 [ 452.902573][ T4217] kworker/u8:18: attempt to access beyond end of device [ 452.902573][ T4217] loop7: rw=1, sector=10088, nr_sectors = 14144 limit=256 [ 452.924632][T12574] futex_wake_op: syz.0.2492 tries to shift op by 36; fix this program [ 452.969949][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 452.969967][ T28] audit: type=1400 audit(2000000009.980:9776): avc: denied { create } for pid=12547 comm="syz.0.2492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 453.014113][ T4217] kworker/u8:18: attempt to access beyond end of device [ 453.014113][ T4217] loop7: rw=1, sector=24264, nr_sectors = 32 limit=256 [ 453.066469][ T4217] kworker/u8:18: attempt to access beyond end of device [ 453.066469][ T4217] loop7: rw=1, sector=24328, nr_sectors = 32 limit=256 [ 453.092282][ T4217] kworker/u8:18: attempt to access beyond end of device [ 453.092282][ T4217] loop7: rw=1, sector=24392, nr_sectors = 32 limit=256 [ 453.122284][ T4217] kworker/u8:18: attempt to access beyond end of device [ 453.122284][ T4217] loop7: rw=1, sector=24456, nr_sectors = 32 limit=256 [ 453.151552][ T4217] kworker/u8:18: attempt to access beyond end of device [ 453.151552][ T4217] loop7: rw=1, sector=24520, nr_sectors = 32 limit=256 [ 453.254356][ T4217] kworker/u8:18: attempt to access beyond end of device [ 453.254356][ T4217] loop7: rw=1, sector=24584, nr_sectors = 32 limit=256 [ 453.421038][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.538683][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.689980][T12583] loop0: detected capacity change from 0 to 512 [ 453.690427][T12583] EXT4-fs: Ignoring removed oldalloc option [ 453.697414][T12584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2501'. [ 453.770159][T12583] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.2500: Parent and EA inode have the same ino 15 [ 453.770210][T12583] loop0: lost filesystem error report for type 5 error -117 [ 453.774290][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 453.774312][ C1] EXT4-fs (loop0): initial error at time 2000000010: ext4_xattr_inode_iget:437 [ 453.774334][ C1] EXT4-fs (loop0): last error at time 2000000010: ext4_xattr_inode_iget:437 [ 453.798657][T12583] EXT4-fs (loop0): 1 orphan inode deleted [ 453.799057][T12583] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.994431][T12583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.001768][T12592] netlink: 'syz.8.2504': attribute type 21 has an invalid length. [ 454.001872][T12592] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2504'. [ 454.082945][T12596] loop7: detected capacity change from 0 to 256 [ 454.160654][T12579] cgroup: fork rejected by pids controller in /syz0 [ 454.265066][T12596] FAT-fs (loop7): Directory bread(block 64) failed [ 454.265187][T12596] FAT-fs (loop7): Directory bread(block 65) failed [ 454.265352][T12596] FAT-fs (loop7): Directory bread(block 66) failed [ 454.265484][T12596] FAT-fs (loop7): Directory bread(block 67) failed [ 454.265510][T12596] FAT-fs (loop7): Directory bread(block 68) failed [ 454.265547][T12596] FAT-fs (loop7): Directory bread(block 69) failed [ 454.265573][T12596] FAT-fs (loop7): Directory bread(block 70) failed [ 454.265599][T12596] FAT-fs (loop7): Directory bread(block 71) failed [ 454.265650][T12596] FAT-fs (loop7): Directory bread(block 72) failed [ 454.265766][T12596] FAT-fs (loop7): Directory bread(block 73) failed [ 456.376027][T12634] loop0: detected capacity change from 0 to 4096 [ 456.483363][T12634] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.498740][T12634] netlink: 'syz.0.2507': attribute type 21 has an invalid length. [ 456.614305][T12634] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2507'. [ 456.809398][T12643] loop8: detected capacity change from 0 to 2048 [ 456.854903][T12643] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.864912][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.001234][T12651] netlink: 'syz.5.2514': attribute type 21 has an invalid length. [ 457.152505][T12651] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2514'. [ 457.856778][T11239] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.934973][T12673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.016663][T12673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.105817][ T28] audit: type=1400 audit(2000000001.090:9777): avc: denied { associate } for pid=12661 comm="syz.7.2517" name="cpuset.effective_cpus" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 458.232475][ T28] audit: type=1400 audit(2000000001.190:9778): avc: denied { write } for pid=12680 comm="syz.8.2522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 458.412831][T12687] loop5: detected capacity change from 0 to 4096 [ 458.496219][T12687] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.637993][T12687] netlink: 'syz.5.2523': attribute type 21 has an invalid length. [ 458.672485][T12687] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2523'. [ 459.205034][ T3749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.316273][T12704] syzkaller0: entered allmulticast mode [ 459.347224][T12704] syzkaller0: entered promiscuous mode [ 459.355864][T12703] syzkaller0: left promiscuous mode [ 459.361638][T12703] syzkaller0: left allmulticast mode [ 459.771816][T12723] loop5: detected capacity change from 0 to 256 [ 459.847824][T12723] FAT-fs (loop5): Directory bread(block 64) failed [ 459.854495][T12723] FAT-fs (loop5): Directory bread(block 65) failed [ 459.861222][T12723] FAT-fs (loop5): Directory bread(block 66) failed [ 459.868082][T12723] FAT-fs (loop5): Directory bread(block 67) failed [ 459.874689][T12723] FAT-fs (loop5): Directory bread(block 68) failed [ 459.881277][T12723] FAT-fs (loop5): Directory bread(block 69) failed [ 459.888065][T12723] FAT-fs (loop5): Directory bread(block 70) failed [ 459.894827][T12723] FAT-fs (loop5): Directory bread(block 71) failed [ 459.901629][T12723] FAT-fs (loop5): Directory bread(block 72) failed [ 459.908342][T12723] FAT-fs (loop5): Directory bread(block 73) failed [ 462.003694][T12732] loop7: detected capacity change from 0 to 512 [ 462.144888][ T313] bio_check_eod: 453 callbacks suppressed [ 462.144908][ T313] kworker/u8:6: attempt to access beyond end of device [ 462.144908][ T313] loop5: rw=1, sector=1192, nr_sectors = 576 limit=256 [ 462.327073][ T313] kworker/u8:6: attempt to access beyond end of device [ 462.327073][ T313] loop5: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 462.358596][ T313] kworker/u8:6: attempt to access beyond end of device [ 462.358596][ T313] loop5: rw=1, sector=1960, nr_sectors = 3520 limit=256 [ 462.372514][T12732] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.849628][T12746] tipc: Enabling of bearer rejected, failed to enable media [ 462.859128][T12732] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.942006][ T313] kworker/u8:6: attempt to access beyond end of device [ 462.942006][ T313] loop5: rw=1, sector=5480, nr_sectors = 4096 limit=256 [ 462.993284][ T313] kworker/u8:6: attempt to access beyond end of device [ 462.993284][ T313] loop5: rw=1, sector=9576, nr_sectors = 6888 limit=256 [ 463.105970][ T313] kworker/u8:6: attempt to access beyond end of device [ 463.105970][ T313] loop5: rw=1, sector=16464, nr_sectors = 7768 limit=256 [ 463.178519][ T313] kworker/u8:6: attempt to access beyond end of device [ 463.178519][ T313] loop5: rw=1, sector=24264, nr_sectors = 32 limit=256 [ 463.212195][ T313] kworker/u8:6: attempt to access beyond end of device [ 463.212195][ T313] loop5: rw=1, sector=24328, nr_sectors = 32 limit=256 [ 463.244495][ T313] kworker/u8:6: attempt to access beyond end of device [ 463.244495][ T313] loop5: rw=1, sector=24392, nr_sectors = 32 limit=256 [ 463.274385][ T313] kworker/u8:6: attempt to access beyond end of device [ 463.274385][ T313] loop5: rw=1, sector=24456, nr_sectors = 32 limit=256 [ 463.333980][ T3749] INFO: The task syz-executor:3749 has been waiting for writeback completion for more than 1 seconds. [ 463.524465][T12761] loop5: detected capacity change from 0 to 4096 [ 463.562705][T12761] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.589679][T12761] netlink: 'syz.5.2538': attribute type 21 has an invalid length. [ 463.609689][T12761] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2538'. [ 463.644489][T10963] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.720971][ T3749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.754486][T12766] netlink: 'syz.7.2547': attribute type 11 has an invalid length. [ 463.782135][T12766] netlink: 140 bytes leftover after parsing attributes in process `syz.7.2547'. [ 463.932620][T12769] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20004 [ 464.059259][T12769] loop7: detected capacity change from 0 to 164 [ 464.097230][T12775] loop5: detected capacity change from 0 to 256 [ 464.248316][T12769] isofs_fill_super: root inode is not a directory. Corrupted media? [ 464.291173][T12777] loop8: detected capacity change from 0 to 512 [ 464.338093][T12775] FAT-fs (loop5): Directory bread(block 64) failed [ 464.344732][T12775] FAT-fs (loop5): Directory bread(block 65) failed [ 464.351367][T12775] FAT-fs (loop5): Directory bread(block 66) failed [ 464.358145][T12775] FAT-fs (loop5): Directory bread(block 67) failed [ 464.364858][T12775] FAT-fs (loop5): Directory bread(block 68) failed [ 464.371412][T12775] FAT-fs (loop5): Directory bread(block 69) failed [ 464.378157][T12775] FAT-fs (loop5): Directory bread(block 70) failed [ 464.384748][T12775] FAT-fs (loop5): Directory bread(block 71) failed [ 464.391609][T12775] FAT-fs (loop5): Directory bread(block 72) failed [ 464.398365][T12775] FAT-fs (loop5): Directory bread(block 73) failed [ 466.127809][T12777] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.294798][T12777] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.483430][T12790] loop0: detected capacity change from 0 to 512 [ 466.601327][T12790] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.762653][T12790] ext4 filesystem being mounted at /518/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 468.166160][T11239] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.199742][T12815] loop1: detected capacity change from 0 to 4096 [ 468.258851][T12816] loop5: detected capacity change from 0 to 512 [ 468.314977][T12815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.376339][T12816] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.427733][T12815] netlink: 'syz.1.2558': attribute type 21 has an invalid length. [ 468.478797][T12815] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2558'. [ 468.494388][T12816] ext4 filesystem being mounted at /475/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.003284][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.124096][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.244240][ T28] audit: type=1400 audit(2000000012.230:9779): avc: denied { append } for pid=12831 comm="syz.8.2564" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 469.386993][ T28] audit: type=1400 audit(2000000012.270:9780): avc: denied { open } for pid=12831 comm="syz.8.2564" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 469.493098][T12843] loop0: detected capacity change from 0 to 256 [ 469.534972][T12843] FAT-fs (loop0): Directory bread(block 64) failed [ 469.541749][T12843] FAT-fs (loop0): Directory bread(block 65) failed [ 469.548459][T12843] FAT-fs (loop0): Directory bread(block 66) failed [ 469.555273][T12843] FAT-fs (loop0): Directory bread(block 67) failed [ 469.561998][T12843] FAT-fs (loop0): Directory bread(block 68) failed [ 469.568830][T12843] FAT-fs (loop0): Directory bread(block 69) failed [ 469.575547][T12843] FAT-fs (loop0): Directory bread(block 70) failed [ 469.582214][T12843] FAT-fs (loop0): Directory bread(block 71) failed [ 469.588877][T12843] FAT-fs (loop0): Directory bread(block 72) failed [ 469.595469][T12843] FAT-fs (loop0): Directory bread(block 73) failed [ 470.480041][T12848] random: crng reseeded on system resumption [ 471.432247][T12848] Restarting kernel threads ... [ 471.444435][T12848] Done restarting kernel threads. [ 471.775243][ T3694] bio_check_eod: 369 callbacks suppressed [ 471.775263][ T3694] kworker/u8:10: attempt to access beyond end of device [ 471.775263][ T3694] loop0: rw=1, sector=1192, nr_sectors = 576 limit=256 [ 472.279135][ T3694] kworker/u8:10: attempt to access beyond end of device [ 472.279135][ T3694] loop0: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 472.295121][ T3694] kworker/u8:10: attempt to access beyond end of device [ 472.295121][ T3694] loop0: rw=1, sector=1960, nr_sectors = 2048 limit=256 [ 472.322950][T12865] tipc: Enabling of bearer rejected, failed to enable media [ 472.339474][ T3694] kworker/u8:10: attempt to access beyond end of device [ 472.339474][ T3694] loop0: rw=1, sector=4008, nr_sectors = 2048 limit=256 [ 472.370339][T12866] loop7: detected capacity change from 0 to 4096 [ 472.380089][T12866] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.403365][ T3749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.432361][T12866] netlink: 'syz.7.2572': attribute type 21 has an invalid length. [ 472.451241][ T3694] kworker/u8:10: attempt to access beyond end of device [ 472.451241][ T3694] loop0: rw=1, sector=6056, nr_sectors = 2856 limit=256 [ 472.478326][T12866] netlink: 120 bytes leftover after parsing attributes in process `syz.7.2572'. [ 472.506634][ T3694] kworker/u8:10: attempt to access beyond end of device [ 472.506634][ T3694] loop0: rw=1, sector=8912, nr_sectors = 4096 limit=256 [ 472.538654][ T3694] kworker/u8:10: attempt to access beyond end of device [ 472.538654][ T3694] loop0: rw=1, sector=13008, nr_sectors = 4088 limit=256 [ 472.562871][ T3694] kworker/u8:10: attempt to access beyond end of device [ 472.562871][ T3694] loop0: rw=1, sector=17096, nr_sectors = 7136 limit=256 [ 472.581622][ T3694] kworker/u8:10: attempt to access beyond end of device [ 472.581622][ T3694] loop0: rw=1, sector=24264, nr_sectors = 32 limit=256 [ 472.637085][ T3694] kworker/u8:10: attempt to access beyond end of device [ 472.637085][ T3694] loop0: rw=1, sector=24328, nr_sectors = 32 limit=256 [ 472.705957][T10963] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.379796][T12895] syzkaller0: entered allmulticast mode [ 473.387321][T12895] syzkaller0: entered promiscuous mode [ 473.395240][T12894] syzkaller0: left promiscuous mode [ 473.439300][T12896] random: crng reseeded on system resumption [ 473.457217][T12894] syzkaller0: left allmulticast mode [ 473.670784][T12900] loop1: detected capacity change from 0 to 256 [ 473.773756][T12900] FAT-fs (loop1): Directory bread(block 64) failed [ 473.780404][T12900] FAT-fs (loop1): Directory bread(block 65) failed [ 473.787126][T12900] FAT-fs (loop1): Directory bread(block 66) failed [ 473.793735][T12900] FAT-fs (loop1): Directory bread(block 67) failed [ 473.800313][T12900] FAT-fs (loop1): Directory bread(block 68) failed [ 473.806865][T12900] FAT-fs (loop1): Directory bread(block 69) failed [ 473.813409][T12900] FAT-fs (loop1): Directory bread(block 70) failed [ 473.819977][T12900] FAT-fs (loop1): Directory bread(block 71) failed [ 473.826634][T12900] FAT-fs (loop1): Directory bread(block 72) failed [ 473.833197][T12900] FAT-fs (loop1): Directory bread(block 73) failed [ 474.585461][T12908] loop7: detected capacity change from 0 to 2048 [ 474.636101][T12908] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.696873][T12912] netlink: 'syz.8.2586': attribute type 7 has an invalid length. [ 474.855587][T12913] loop5: detected capacity change from 0 to 512 [ 474.945904][T12919] netlink: 'syz.8.2586': attribute type 10 has an invalid length. [ 474.987724][T12919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.019655][T12919] team0: Port device bond0 added [ 475.029295][T12913] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.064299][T12913] ext4 filesystem being mounted at /476/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.373654][T10963] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.761154][T12929] loop7: detected capacity change from 0 to 4096 [ 475.770549][T12931] netlink: 'syz.8.2589': attribute type 11 has an invalid length. [ 475.793322][T12931] netlink: 140 bytes leftover after parsing attributes in process `syz.8.2589'. [ 475.856011][T12929] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.928143][T12929] netlink: 'syz.7.2588': attribute type 21 has an invalid length. [ 475.929724][T12929] netlink: 120 bytes leftover after parsing attributes in process `syz.7.2588'. [ 475.943949][T10963] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.013842][T12936] loop8: detected capacity change from 0 to 164 [ 476.282939][T12943] loop0: detected capacity change from 0 to 512 [ 476.398004][T12936] isofs_fill_super: root inode is not a directory. Corrupted media? [ 476.489516][T12943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.672951][T12943] ext4 filesystem being mounted at /521/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.856071][T12955] syzkaller0: entered allmulticast mode [ 476.869481][T12955] syzkaller0: entered promiscuous mode [ 477.057452][T12958] loop7: detected capacity change from 0 to 256 [ 477.073325][T12958] FAT-fs (loop7): Directory bread(block 64) failed [ 477.080137][T12958] FAT-fs (loop7): Directory bread(block 65) failed [ 477.086742][T12958] FAT-fs (loop7): Directory bread(block 66) failed [ 477.093399][T12958] FAT-fs (loop7): Directory bread(block 67) failed [ 477.100110][T12958] FAT-fs (loop7): Directory bread(block 68) failed [ 477.106677][T12958] FAT-fs (loop7): Directory bread(block 69) failed [ 477.113336][T12958] FAT-fs (loop7): Directory bread(block 70) failed [ 477.119896][T12958] FAT-fs (loop7): Directory bread(block 71) failed [ 477.126499][T12958] FAT-fs (loop7): Directory bread(block 72) failed [ 477.133054][T12958] FAT-fs (loop7): Directory bread(block 73) failed [ 478.105875][T12950] syzkaller0: left promiscuous mode [ 478.197310][ T3749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.213297][T12950] syzkaller0: left allmulticast mode [ 478.237382][T12724] bio_check_eod: 306 callbacks suppressed [ 478.237488][T12724] kworker/u8:0: attempt to access beyond end of device [ 478.237488][T12724] loop7: rw=1, sector=1192, nr_sectors = 576 limit=256 [ 478.381693][T12968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.396326][T12724] kworker/u8:0: attempt to access beyond end of device [ 478.396326][T12724] loop7: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 478.429407][T12968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.467008][T12724] kworker/u8:0: attempt to access beyond end of device [ 478.467008][T12724] loop7: rw=1, sector=1960, nr_sectors = 3408 limit=256 [ 478.495823][T12970] loop5: detected capacity change from 0 to 4096 [ 478.538075][T12724] kworker/u8:0: attempt to access beyond end of device [ 478.538075][T12724] loop7: rw=1, sector=5368, nr_sectors = 4096 limit=256 [ 478.567023][T12970] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.613729][T12724] kworker/u8:0: attempt to access beyond end of device [ 478.613729][T12724] loop7: rw=1, sector=9464, nr_sectors = 8880 limit=256 [ 478.633206][T12970] netlink: 'syz.5.2601': attribute type 21 has an invalid length. [ 478.641149][T12970] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2601'. [ 478.643832][T12724] kworker/u8:0: attempt to access beyond end of device [ 478.643832][T12724] loop7: rw=1, sector=18344, nr_sectors = 5888 limit=256 [ 478.667568][T12724] kworker/u8:0: attempt to access beyond end of device [ 478.667568][T12724] loop7: rw=1, sector=24264, nr_sectors = 32 limit=256 [ 478.681460][T12724] kworker/u8:0: attempt to access beyond end of device [ 478.681460][T12724] loop7: rw=1, sector=24328, nr_sectors = 32 limit=256 [ 478.695399][T12724] kworker/u8:0: attempt to access beyond end of device [ 478.695399][T12724] loop7: rw=1, sector=24392, nr_sectors = 32 limit=256 [ 478.709193][T12724] kworker/u8:0: attempt to access beyond end of device [ 478.709193][T12724] loop7: rw=1, sector=24456, nr_sectors = 32 limit=256 [ 478.728507][ T3749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.768374][T12972] cgroup: fork rejected by pids controller in /syz8 [ 478.840855][T13011] loop7: detected capacity change from 0 to 1024 [ 478.841183][T13011] EXT4-fs: inline encryption not supported [ 478.877024][T13011] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.878627][T13011] random: crng reseeded on system resumption [ 478.898549][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.964574][T10963] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.972825][T13019] netlink: 'syz.8.2605': attribute type 11 has an invalid length. [ 478.981587][T13019] netlink: 140 bytes leftover after parsing attributes in process `syz.8.2605'. [ 479.061271][T13026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32784 sclass=netlink_route_socket pid=13026 comm=syz.5.2608 [ 479.114061][T13024] loop8: detected capacity change from 0 to 164 [ 479.149046][ T28] audit: type=1326 audit(2000000022.140:9781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0003ecc629 code=0x7ffc0000 [ 479.177240][T13026] loop5: detected capacity change from 0 to 512 [ 479.199940][ T28] audit: type=1326 audit(2000000022.140:9782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0003ecc629 code=0x7ffc0000 [ 479.228170][T13026] EXT4-fs: Invalid want_extra_isize 7 [ 479.243493][ T28] audit: type=1326 audit(2000000022.140:9783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0003ecc629 code=0x7ffc0000 [ 479.268204][ T28] audit: type=1326 audit(2000000022.140:9784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0003ecc629 code=0x7ffc0000 [ 479.293031][ T28] audit: type=1326 audit(2000000022.140:9785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0003ecc629 code=0x7ffc0000 [ 479.321478][ T28] audit: type=1326 audit(2000000022.140:9786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0003ecc629 code=0x7ffc0000 [ 479.346037][ T28] audit: type=1326 audit(2000000022.140:9787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0003ecc629 code=0x7ffc0000 [ 479.346630][T13024] isofs_fill_super: root inode is not a directory. Corrupted media? [ 479.388068][ T28] audit: type=1326 audit(2000000022.140:9788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0003ecc629 code=0x7ffc0000 [ 479.412222][ T28] audit: type=1326 audit(2000000022.140:9789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0003ecc629 code=0x7ffc0000 [ 479.436363][ T28] audit: type=1326 audit(2000000022.140:9790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0003ecc629 code=0x7ffc0000 [ 479.472593][T13030] FAT-fs (loop0): Directory bread(block 64) failed [ 479.479280][T13030] FAT-fs (loop0): Directory bread(block 65) failed [ 479.485897][T13030] FAT-fs (loop0): Directory bread(block 66) failed [ 479.492546][T13030] FAT-fs (loop0): Directory bread(block 67) failed [ 479.499150][T13030] FAT-fs (loop0): Directory bread(block 68) failed [ 479.505971][T13030] FAT-fs (loop0): Directory bread(block 69) failed [ 479.512582][T13030] FAT-fs (loop0): Directory bread(block 70) failed [ 479.519340][T13030] FAT-fs (loop0): Directory bread(block 71) failed [ 479.526031][T13030] FAT-fs (loop0): Directory bread(block 72) failed [ 479.532661][T13030] FAT-fs (loop0): Directory bread(block 73) failed [ 479.935495][T13038] syzkaller0: entered allmulticast mode [ 479.948161][T13038] syzkaller0: entered promiscuous mode [ 479.962205][T13036] syzkaller0: left promiscuous mode [ 479.973820][T13036] syzkaller0: left allmulticast mode [ 480.489316][T13043] set_capacity_and_notify: 1 callbacks suppressed [ 480.489337][T13043] loop7: detected capacity change from 0 to 4096 [ 480.509032][T13045] netlink: 'syz.5.2614': attribute type 7 has an invalid length. [ 480.523681][T13043] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.564768][T13043] netlink: 'syz.7.2613': attribute type 21 has an invalid length. [ 480.577778][T13047] netlink: 'syz.5.2614': attribute type 10 has an invalid length. [ 480.599933][T13043] netlink: 120 bytes leftover after parsing attributes in process `syz.7.2613'. [ 480.656065][T13047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.683195][T13047] bond_slave_0: entered promiscuous mode [ 480.688954][T13047] bond_slave_1: entered promiscuous mode [ 480.696125][T10963] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.710059][T13047] team0: Port device bond0 added [ 480.843968][T13065] netlink: 'syz.8.2621': attribute type 11 has an invalid length. [ 480.851973][T13065] netlink: 140 bytes leftover after parsing attributes in process `syz.8.2621'. [ 480.973531][T13070] loop8: detected capacity change from 0 to 164 [ 481.020958][T13070] isofs_fill_super: root inode is not a directory. Corrupted media? [ 481.104609][T13076] loop5: detected capacity change from 0 to 4096 [ 481.128064][T13076] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.163193][T13076] netlink: 'syz.5.2626': attribute type 21 has an invalid length. [ 481.163306][T13076] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2626'. [ 481.215710][ T3749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.412046][T13097] loop7: detected capacity change from 0 to 16384 [ 481.515182][T13098] loop8: detected capacity change from 0 to 512 [ 481.545757][T13098] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.569854][T13098] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 481.738899][T13107] netlink: 'syz.1.2637': attribute type 10 has an invalid length. [ 481.756447][T13107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.773794][T13107] team0: Port device bond0 added [ 481.929419][T13110] netlink: 'syz.7.2638': attribute type 11 has an invalid length. [ 481.937347][T13110] netlink: 140 bytes leftover after parsing attributes in process `syz.7.2638'. [ 482.091724][T13117] loop7: detected capacity change from 0 to 164 [ 482.131152][T13117] isofs_fill_super: root inode is not a directory. Corrupted media? [ 482.139782][T13115] loop1: detected capacity change from 0 to 4096 [ 482.158661][T13125] loop5: detected capacity change from 0 to 1024 [ 482.174744][T13125] EXT4-fs: inline encryption not supported [ 482.194975][T13115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.269888][T13128] netlink: 'syz.0.2646': attribute type 21 has an invalid length. [ 482.300829][T13125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.324836][T13128] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2646'. [ 482.348921][T13131] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2639'. [ 482.354747][T13125] random: crng reseeded on system resumption [ 482.402409][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.418429][ T3749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.436966][T13135] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2648'. [ 482.450067][T11239] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.519132][T13140] bond_slave_0: left promiscuous mode [ 482.532067][T13140] bond_slave_1: left promiscuous mode [ 482.670789][T13159] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2658'. [ 482.738517][T13163] loop7: detected capacity change from 0 to 4096 [ 482.760596][T13163] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.777497][T13166] loop5: detected capacity change from 0 to 2048 [ 482.809634][T13166] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.046972][T10963] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.132066][T13179] syzkaller0: entered allmulticast mode [ 483.138323][T13179] syzkaller0: entered promiscuous mode [ 483.147048][T13178] syzkaller0: left promiscuous mode [ 483.152660][T13178] syzkaller0: left allmulticast mode [ 483.354448][T12974] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 483.526432][T13180] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.570258][T13180] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.705888][T13194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.720546][T13194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.737443][ T3749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.340146][T13202] validate_nla: 6 callbacks suppressed [ 484.340162][T13202] netlink: 'syz.5.2671': attribute type 21 has an invalid length. [ 484.353803][T13202] __nla_validate_parse: 1 callbacks suppressed [ 484.353823][T13202] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2671'. [ 484.625918][T13207] FAT-fs (loop0): Directory bread(block 64) failed [ 484.632500][T13207] FAT-fs (loop0): Directory bread(block 65) failed [ 484.639175][T13207] FAT-fs (loop0): Directory bread(block 66) failed [ 484.645821][T13207] FAT-fs (loop0): Directory bread(block 67) failed [ 484.652381][T13207] FAT-fs (loop0): Directory bread(block 68) failed [ 484.659092][T13207] FAT-fs (loop0): Directory bread(block 69) failed [ 484.665678][T13207] FAT-fs (loop0): Directory bread(block 70) failed [ 484.672233][T13207] FAT-fs (loop0): Directory bread(block 71) failed [ 484.678846][T13207] FAT-fs (loop0): Directory bread(block 72) failed [ 484.685473][T13207] FAT-fs (loop0): Directory bread(block 73) failed [ 484.691774][T13214] syzkaller0: entered allmulticast mode [ 484.698379][T13214] syzkaller0: entered promiscuous mode [ 484.711508][T13213] syzkaller0: left promiscuous mode [ 484.729252][T13213] syzkaller0: left allmulticast mode [ 484.778617][T11239] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.813202][T13220] syzkaller0: entered allmulticast mode [ 484.830540][T13220] syzkaller0: entered promiscuous mode [ 484.853624][T13219] syzkaller0: left promiscuous mode [ 484.865834][T13219] syzkaller0: left allmulticast mode [ 485.195218][T13227] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.233884][T13227] ext4 filesystem being mounted at /498/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 485.288028][ T3685] bio_check_eod: 196 callbacks suppressed [ 485.288047][ T3685] kworker/u8:8: attempt to access beyond end of device [ 485.288047][ T3685] loop0: rw=1, sector=1192, nr_sectors = 576 limit=256 [ 485.319690][ T3685] kworker/u8:8: attempt to access beyond end of device [ 485.319690][ T3685] loop0: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 485.339272][ T3685] kworker/u8:8: attempt to access beyond end of device [ 485.339272][ T3685] loop0: rw=1, sector=1960, nr_sectors = 2248 limit=256 [ 485.357277][ T3685] kworker/u8:8: attempt to access beyond end of device [ 485.357277][ T3685] loop0: rw=1, sector=4208, nr_sectors = 2048 limit=256 [ 485.374675][ T3685] kworker/u8:8: attempt to access beyond end of device [ 485.374675][ T3685] loop0: rw=1, sector=6256, nr_sectors = 2048 limit=256 [ 485.398532][ T3685] kworker/u8:8: attempt to access beyond end of device [ 485.398532][ T3685] loop0: rw=1, sector=8304, nr_sectors = 7536 limit=256 [ 485.418748][ T3685] kworker/u8:8: attempt to access beyond end of device [ 485.418748][ T3685] loop0: rw=1, sector=15840, nr_sectors = 2064 limit=256 [ 485.436653][ T3685] kworker/u8:8: attempt to access beyond end of device [ 485.436653][ T3685] loop0: rw=1, sector=17904, nr_sectors = 2064 limit=256 [ 485.457608][ T3685] kworker/u8:8: attempt to access beyond end of device [ 485.457608][ T3685] loop0: rw=1, sector=19968, nr_sectors = 3128 limit=256 [ 485.483777][ T3685] kworker/u8:8: attempt to access beyond end of device [ 485.483777][ T3685] loop0: rw=1, sector=23096, nr_sectors = 1136 limit=256 [ 485.753754][ T3749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.795692][T13269] set_capacity_and_notify: 3 callbacks suppressed [ 485.795712][T13269] loop5: detected capacity change from 0 to 2048 [ 485.860381][T13269] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 485.995443][T13276] loop0: detected capacity change from 0 to 256 [ 486.012133][T13276] FAT-fs (loop0): Directory bread(block 64) failed [ 486.018787][T13276] FAT-fs (loop0): Directory bread(block 65) failed [ 486.025370][T13276] FAT-fs (loop0): Directory bread(block 66) failed [ 486.031903][T13276] FAT-fs (loop0): Directory bread(block 67) failed [ 486.038489][T13276] FAT-fs (loop0): Directory bread(block 68) failed [ 486.045187][T13276] FAT-fs (loop0): Directory bread(block 69) failed [ 486.051899][T13276] FAT-fs (loop0): Directory bread(block 70) failed [ 486.058767][T13276] FAT-fs (loop0): Directory bread(block 71) failed [ 486.065569][T13276] FAT-fs (loop0): Directory bread(block 72) failed [ 486.072191][T13276] FAT-fs (loop0): Directory bread(block 73) failed [ 486.817843][ T3749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.849995][T13288] syzkaller0: entered allmulticast mode [ 486.880181][T13288] syzkaller0: entered promiscuous mode [ 486.948057][T13291] loop7: detected capacity change from 0 to 512 [ 486.966484][T13290] syzkaller0: entered allmulticast mode [ 486.972814][T13290] syzkaller0: entered promiscuous mode [ 487.016139][T13289] syzkaller0: left promiscuous mode [ 487.024496][T13289] syzkaller0: left allmulticast mode [ 487.031250][T13291] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.068244][T13291] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.122108][T13298] tipc: Enabling of bearer rejected, failed to enable media [ 487.627516][T13316] loop0: detected capacity change from 0 to 2048 [ 487.634162][T13285] syzkaller0: left promiscuous mode [ 487.674789][T13285] syzkaller0: left allmulticast mode [ 487.779803][T13316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.936352][T13307] loop5: detected capacity change from 0 to 512 [ 487.993022][T13307] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.116506][T13307] ext4 filesystem being mounted at /502/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.229858][T10963] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.413833][T13330] netlink: 'syz.7.2701': attribute type 21 has an invalid length. [ 488.555552][T13330] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2701'. [ 488.604591][ T3749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.785695][T13337] syzkaller0: entered allmulticast mode [ 488.791669][T13337] syzkaller0: entered promiscuous mode [ 488.826293][T13336] syzkaller0: left promiscuous mode [ 488.831758][T13336] syzkaller0: left allmulticast mode [ 488.869620][T13338] loop5: detected capacity change from 0 to 256 [ 488.884015][T13338] FAT-fs (loop5): Directory bread(block 64) failed [ 488.890787][T13338] FAT-fs (loop5): Directory bread(block 65) failed [ 488.897485][T13338] FAT-fs (loop5): Directory bread(block 66) failed [ 488.904152][T13338] FAT-fs (loop5): Directory bread(block 67) failed [ 488.910819][T13338] FAT-fs (loop5): Directory bread(block 68) failed [ 488.917407][T13338] FAT-fs (loop5): Directory bread(block 69) failed [ 488.923989][T13338] FAT-fs (loop5): Directory bread(block 70) failed [ 488.930649][T13338] FAT-fs (loop5): Directory bread(block 71) failed [ 488.937250][T13338] FAT-fs (loop5): Directory bread(block 72) failed [ 488.943897][T13338] FAT-fs (loop5): Directory bread(block 73) failed [ 489.027094][T13347] tipc: Enabling of bearer rejected, failed to enable media [ 490.836155][T13189] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 491.017542][ T313] bio_check_eod: 134 callbacks suppressed [ 491.017582][ T313] kworker/u8:6: attempt to access beyond end of device [ 491.017582][ T313] loop5: rw=1, sector=1192, nr_sectors = 576 limit=256 [ 491.038045][ T313] kworker/u8:6: attempt to access beyond end of device [ 491.038045][ T313] loop5: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 491.054510][ T313] kworker/u8:6: attempt to access beyond end of device [ 491.054510][ T313] loop5: rw=1, sector=1960, nr_sectors = 2064 limit=256 [ 491.073234][ T313] kworker/u8:6: attempt to access beyond end of device [ 491.073234][ T313] loop5: rw=1, sector=4024, nr_sectors = 2048 limit=256 [ 491.143556][ T313] kworker/u8:6: attempt to access beyond end of device [ 491.143556][ T313] loop5: rw=1, sector=6072, nr_sectors = 2904 limit=256 [ 491.163478][T13355] syzkaller0: entered allmulticast mode [ 491.165553][ T313] kworker/u8:6: attempt to access beyond end of device [ 491.165553][ T313] loop5: rw=1, sector=8976, nr_sectors = 4096 limit=256 [ 491.191333][ T313] kworker/u8:6: attempt to access beyond end of device [ 491.191333][ T313] loop5: rw=1, sector=13072, nr_sectors = 4144 limit=256 [ 491.215063][ T313] kworker/u8:6: attempt to access beyond end of device [ 491.215063][ T313] loop5: rw=1, sector=17216, nr_sectors = 6864 limit=256 [ 491.232653][ T313] kworker/u8:6: attempt to access beyond end of device [ 491.232653][ T313] loop5: rw=1, sector=24080, nr_sectors = 152 limit=256 [ 491.259281][ T313] kworker/u8:6: attempt to access beyond end of device [ 491.259281][ T313] loop5: rw=1, sector=24264, nr_sectors = 32 limit=256 [ 491.277763][T13355] syzkaller0: entered promiscuous mode [ 491.293473][T13354] syzkaller0: left promiscuous mode [ 491.318269][T13354] syzkaller0: left allmulticast mode [ 491.493683][T13364] loop8: detected capacity change from 0 to 256 [ 492.331696][T13364] FAT-fs (loop8): Directory bread(block 64) failed [ 492.338403][T13364] FAT-fs (loop8): Directory bread(block 65) failed [ 492.345196][T13364] FAT-fs (loop8): Directory bread(block 66) failed [ 492.351772][T13364] FAT-fs (loop8): Directory bread(block 67) failed [ 492.360169][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.371227][T13364] FAT-fs (loop8): Directory bread(block 68) failed [ 492.377819][T13364] FAT-fs (loop8): Directory bread(block 69) failed [ 492.385095][T13364] FAT-fs (loop8): Directory bread(block 70) failed [ 492.391798][T13364] FAT-fs (loop8): Directory bread(block 71) failed [ 492.398557][T13364] FAT-fs (loop8): Directory bread(block 72) failed [ 492.405162][T13364] FAT-fs (loop8): Directory bread(block 73) failed [ 494.538474][T13384] tipc: Enabling of bearer rejected, failed to enable media [ 494.661135][T13388] syzkaller0: entered allmulticast mode [ 494.667283][T13388] syzkaller0: entered promiscuous mode [ 494.675891][T13387] syzkaller0: left promiscuous mode [ 494.820032][T13393] loop0: detected capacity change from 0 to 512 [ 495.075533][T13393] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.105098][T13393] ext4 filesystem being mounted at /547/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 495.304408][T13387] syzkaller0: left allmulticast mode [ 495.372034][T13404] syzkaller0: entered allmulticast mode [ 495.380968][T13404] syzkaller0: entered promiscuous mode [ 495.388198][T13403] syzkaller0: left promiscuous mode [ 495.500888][T13403] syzkaller0: left allmulticast mode [ 495.535986][T13409] loop7: detected capacity change from 0 to 16384 [ 496.085579][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.273918][T13431] syzkaller0: entered allmulticast mode [ 496.301771][T13433] tipc: Enabling of bearer rejected, failed to enable media [ 496.327065][T13431] syzkaller0: entered promiscuous mode [ 496.345616][T13430] syzkaller0: left promiscuous mode [ 496.351386][T13430] syzkaller0: left allmulticast mode [ 496.953472][T13463] qrtr: Invalid version 0 [ 497.698515][T13471] netlink: 'syz.5.2748': attribute type 11 has an invalid length. [ 497.706795][T13468] loop1: detected capacity change from 0 to 256 [ 497.740429][T13471] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2748'. [ 497.807342][T13477] loop8: detected capacity change from 0 to 512 [ 497.845590][T13471] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20004 [ 497.884696][T13471] loop5: detected capacity change from 0 to 164 [ 497.970271][T13468] FAT-fs (loop1): Directory bread(block 64) failed [ 497.970249][T13471] isofs_fill_super: root inode is not a directory. Corrupted media? [ 497.970299][T13468] FAT-fs (loop1): Directory bread(block 65) failed [ 497.991712][T13468] FAT-fs (loop1): Directory bread(block 66) failed [ 497.998298][T13468] FAT-fs (loop1): Directory bread(block 67) failed [ 498.004908][T13468] FAT-fs (loop1): Directory bread(block 68) failed [ 498.011540][T13468] FAT-fs (loop1): Directory bread(block 69) failed [ 498.018182][T13468] FAT-fs (loop1): Directory bread(block 70) failed [ 498.025100][T13468] FAT-fs (loop1): Directory bread(block 71) failed [ 498.031737][T13468] FAT-fs (loop1): Directory bread(block 72) failed [ 498.038477][T13468] FAT-fs (loop1): Directory bread(block 73) failed [ 498.170627][T13477] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.297107][T13477] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.318450][T13489] tipc: Enabling of bearer rejected, failed to enable media [ 498.488186][T12724] bio_check_eod: 354 callbacks suppressed [ 498.488203][T12724] kworker/u8:0: attempt to access beyond end of device [ 498.488203][T12724] loop1: rw=1, sector=1192, nr_sectors = 576 limit=256 [ 498.596323][T12724] kworker/u8:0: attempt to access beyond end of device [ 498.596323][T12724] loop1: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 498.648866][T12724] kworker/u8:0: attempt to access beyond end of device [ 498.648866][T12724] loop1: rw=1, sector=1960, nr_sectors = 16344 limit=256 [ 498.684007][T12724] kworker/u8:0: attempt to access beyond end of device [ 498.684007][T12724] loop1: rw=1, sector=18304, nr_sectors = 5928 limit=256 [ 498.730980][T12724] kworker/u8:0: attempt to access beyond end of device [ 498.730980][T12724] loop1: rw=1, sector=24264, nr_sectors = 32 limit=256 [ 498.754580][T12724] kworker/u8:0: attempt to access beyond end of device [ 498.754580][T12724] loop1: rw=1, sector=24328, nr_sectors = 32 limit=256 [ 498.775473][T12724] kworker/u8:0: attempt to access beyond end of device [ 498.775473][T12724] loop1: rw=1, sector=24392, nr_sectors = 32 limit=256 [ 498.796426][T12724] kworker/u8:0: attempt to access beyond end of device [ 498.796426][T12724] loop1: rw=1, sector=24456, nr_sectors = 32 limit=256 [ 498.816741][T12724] kworker/u8:0: attempt to access beyond end of device [ 498.816741][T12724] loop1: rw=1, sector=24520, nr_sectors = 32 limit=256 [ 498.830747][T12724] kworker/u8:0: attempt to access beyond end of device [ 498.830747][T12724] loop1: rw=1, sector=24584, nr_sectors = 32 limit=256 [ 499.572040][T13521] syzkaller0: entered allmulticast mode [ 499.589136][T13521] syzkaller0: entered promiscuous mode [ 499.605759][T13520] syzkaller0: left promiscuous mode [ 499.611543][T13520] syzkaller0: left allmulticast mode [ 499.661892][T11239] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.878909][T13533] loop0: detected capacity change from 0 to 256 [ 499.926837][T13533] FAT-fs (loop0): Directory bread(block 64) failed [ 499.933438][T13533] FAT-fs (loop0): Directory bread(block 65) failed [ 499.940070][T13533] FAT-fs (loop0): Directory bread(block 66) failed [ 499.946661][T13533] FAT-fs (loop0): Directory bread(block 67) failed [ 499.953215][T13533] FAT-fs (loop0): Directory bread(block 68) failed [ 499.959785][T13533] FAT-fs (loop0): Directory bread(block 69) failed [ 499.966370][T13533] FAT-fs (loop0): Directory bread(block 70) failed [ 499.972935][T13533] FAT-fs (loop0): Directory bread(block 71) failed [ 499.979658][T13533] FAT-fs (loop0): Directory bread(block 72) failed [ 499.986249][T13533] FAT-fs (loop0): Directory bread(block 73) failed [ 500.379312][T13538] loop8: detected capacity change from 0 to 512 [ 500.482492][T13538] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.582895][T13538] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 500.611574][T13543] loop5: detected capacity change from 0 to 512 [ 500.777964][T13543] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.872825][T13543] ext4 filesystem being mounted at /518/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 500.964868][T13551] netlink: 'syz.1.2766': attribute type 11 has an invalid length. [ 500.972778][T13551] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2766'. [ 501.214648][T13556] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20004 [ 501.513667][T13560] loop0: detected capacity change from 0 to 256 [ 501.588809][T13560] FAT-fs (loop0): Directory bread(block 64) failed [ 501.595478][T13560] FAT-fs (loop0): Directory bread(block 65) failed [ 501.602176][T13560] FAT-fs (loop0): Directory bread(block 66) failed [ 501.608854][T13560] FAT-fs (loop0): Directory bread(block 67) failed [ 501.615733][T13560] FAT-fs (loop0): Directory bread(block 68) failed [ 501.622422][T13560] FAT-fs (loop0): Directory bread(block 69) failed [ 501.629322][T13560] FAT-fs (loop0): Directory bread(block 70) failed [ 501.636001][T13560] FAT-fs (loop0): Directory bread(block 71) failed [ 501.642578][T13560] FAT-fs (loop0): Directory bread(block 72) failed [ 501.649175][T13560] FAT-fs (loop0): Directory bread(block 73) failed [ 502.704655][ T3749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.196852][T11239] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.268058][T13566] syzkaller0: entered allmulticast mode [ 503.285398][T13566] syzkaller0: entered promiscuous mode [ 503.304545][T13565] syzkaller0: left promiscuous mode [ 503.395745][T13565] syzkaller0: left allmulticast mode [ 503.470979][T13574] loop8: detected capacity change from 0 to 256 [ 503.492724][ T28] kauditd_printk_skb: 162 callbacks suppressed [ 503.492743][ T28] audit: type=1400 audit(2000000015.070:9953): avc: denied { create } for pid=13573 comm="syz.8.2774" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 503.521085][ T28] audit: type=1400 audit(2000000015.110:9954): avc: denied { read } for pid=13573 comm="syz.8.2774" name="file2" dev="tmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 503.544029][T13576] loop1: detected capacity change from 0 to 512 [ 503.569660][T13576] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 503.585900][T13581] loop0: detected capacity change from 0 to 128 [ 503.613264][ T28] audit: type=1400 audit(2000000015.110:9955): avc: denied { open } for pid=13573 comm="syz.8.2774" path="/139/file2" dev="tmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 503.639353][ T28] audit: type=1400 audit(2000000015.110:9956): avc: denied { ioctl } for pid=13573 comm="syz.8.2774" path="/139/file2" dev="tmpfs" ino=774 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 503.650617][T13581] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 503.664493][ T28] audit: type=1400 audit(2000000015.150:9957): avc: denied { unlink } for pid=11239 comm="syz-executor" name="file2" dev="tmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 503.702988][T13581] ext4 filesystem being mounted at /559/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 503.754890][T13591] loop5: detected capacity change from 0 to 512 [ 503.764219][ T3319] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 503.787059][T13595] loop8: detected capacity change from 0 to 764 [ 503.816094][T13591] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.2779: inode has both inline data and extents flags [ 503.853523][T13591] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 503.853848][T13591] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2779: couldn't read orphan inode 15 (err -117) [ 503.863149][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 503.863173][ C1] EXT4-fs (loop5): initial error at time 2000000015: ext4_orphan_get:1391: inode 15 [ 503.863214][ C1] EXT4-fs (loop5): last error at time 2000000015: ext4_orphan_get:1391: inode 15 [ 503.863237][T13598] loop1: detected capacity change from 0 to 128 [ 503.906788][T13591] loop5: lost filesystem error report for type 5 error -117 [ 503.906956][ T28] audit: type=1400 audit(2000000015.480:9958): avc: denied { mount } for pid=13601 comm="syz.7.2785" name="/" dev="configfs" ino=2099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 503.944759][T13591] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.958218][T13605] loop0: detected capacity change from 0 to 128 [ 503.972364][ T28] audit: type=1400 audit(2000000015.480:9959): avc: denied { search } for pid=13601 comm="syz.7.2785" name="/" dev="configfs" ino=2099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 503.985686][T13598] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 503.995173][ T28] audit: type=1400 audit(2000000015.480:9960): avc: denied { search } for pid=13601 comm="syz.7.2785" name="/" dev="configfs" ino=2099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 504.029675][ T28] audit: type=1400 audit(2000000015.480:9961): avc: denied { read open } for pid=13601 comm="syz.7.2785" path="/" dev="configfs" ino=2099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 504.052381][ T28] audit: type=1400 audit(2000000015.480:9962): avc: denied { search } for pid=13601 comm="syz.7.2785" name="/" dev="configfs" ino=2099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 504.065579][T13591] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 504.096638][T13598] ext4 filesystem being mounted at /519/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 504.131996][T13609] loop8: detected capacity change from 0 to 512 [ 504.139893][T13608] loop7: detected capacity change from 0 to 512 [ 504.146403][T13591] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #2: block 13: comm syz.5.2779: lblock 0 mapped to illegal pblock 13 (length 1) [ 504.166989][T13608] EXT4-fs: Ignoring removed orlov option [ 504.174671][T13591] EXT4-fs warning (device loop5): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz.5.2779: error -117 reading directory block [ 504.186149][T13608] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 504.228486][T13609] EXT4-fs (loop8): 1 truncate cleaned up [ 504.241258][T13608] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102] [ 504.257270][T13613] loop0: detected capacity change from 0 to 256 [ 504.264678][T13609] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.268481][T13608] EXT4-fs (loop7): orphan cleanup on readonly fs [ 504.283040][ T3749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.283766][T13608] EXT4-fs error (device loop7): __ext4_iget:5378: inode #11: block 16777236: comm syz.7.2787: invalid block [ 504.304735][T13608] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 504.314219][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 504.330097][ C0] EXT4-fs (loop7): initial error at time 2000000015: __ext4_iget:5378: inode 11: block 16777236 [ 504.335310][T13608] EXT4-fs (loop7): Remounting filesystem read-only [ 504.340696][ C0] EXT4-fs (loop7): last error at time 2000000015: __ext4_iget:5378: inode 11: block 16777236 [ 504.364100][T13613] FAT-fs (loop0): codepage cp936 not found [ 504.417742][T13608] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 504.438567][T13621] EXT4-fs: inline encryption not supported [ 504.451557][T11239] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.466955][T13608] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.2787: dx entry: limit 0 != root limit 125 [ 504.471866][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 504.493955][T13621] EXT4-fs: Ignoring removed nobh option [ 504.499806][T13621] EXT4-fs: Ignoring removed nobh option [ 504.505761][T13621] EXT4-fs: Ignoring removed bh option [ 504.518295][T13608] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.2787: Corrupt directory, running e2fsck is recommended [ 504.532447][T13624] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.2787: dx entry: limit 0 != root limit 125 [ 504.562672][T13624] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.2787: Corrupt directory, running e2fsck is recommended [ 504.579312][T13623] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 504.602591][T13621] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.619152][T13623] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 504.628653][T13621] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.2791: Allocating blocks 385-513 which overlap fs metadata [ 504.644076][T13629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.656800][T13629] ext4 filesystem being mounted at /520/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 504.667330][T13623] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 504.687348][T13623] System zones: 0-1, 15-15, 18-18, 34-34 [ 504.693281][T13623] EXT4-fs (loop0): orphan cleanup on readonly fs [ 504.700030][T13623] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 504.715169][T13623] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 504.719013][T10963] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 504.732148][T13623] EXT4-fs (loop0): 1 truncate cleaned up [ 504.738529][T13623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 504.748968][T13635] EXT4-fs (loop5): pa ffff88810865d1c0: logic 16, phys. 129, len 24 [ 504.762876][T13635] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 8 [ 504.802642][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.814808][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.869141][ T3749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.899937][T13642] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.900066][T13642] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 504.950947][T13642] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 504.967401][T13648] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.021497][T13648] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 505.044025][T13658] Symlink component flag not implemented [ 505.058659][T10963] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.077192][T13658] Symlink component flag not implemented [ 505.083401][T13658] Symlink component flag not implemented (128) [ 505.089971][T13658] Symlink component flag not implemented (122) [ 505.124874][T11239] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.152156][T13660] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 505.170774][T13662] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.376221][T13682] syzkaller0: entered allmulticast mode [ 505.376438][T13682] syzkaller0: entered promiscuous mode [ 505.377826][T13681] syzkaller0: left promiscuous mode [ 505.383982][T13681] syzkaller0: left allmulticast mode [ 505.466582][T13686] EXT4-fs: Ignoring removed orlov option [ 506.343185][T13713] EXT4-fs: Ignoring removed oldalloc option [ 506.374841][ T3749] EXT4-fs unmount: 4 callbacks suppressed [ 506.374861][ T3749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.411065][T13713] EXT4-fs (loop7): 1 truncate cleaned up [ 506.430583][T13713] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.506231][T13715] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.532130][T13715] ext4 filesystem being mounted at /569/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.569987][T13717] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.624480][T13725] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 506.654463][T13717] ext4 filesystem being mounted at /530/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 506.721472][T13725] ext4 filesystem being mounted at /523/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 506.790141][ T3749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.801574][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 506.930792][T13736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.947671][T13736] ext4 filesystem being mounted at /524/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.969037][T13742] EXT4-fs: inline encryption not supported [ 506.980864][T13742] EXT4-fs: Ignoring removed nobh option [ 506.987208][T13742] EXT4-fs: Ignoring removed nobh option [ 506.993016][T13742] EXT4-fs: Ignoring removed bh option [ 506.995995][T10963] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.013281][T13736] EXT4-fs: Ignoring sb option on remount [ 507.028138][T13736] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 507.055163][T13742] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.074667][T13736] EXT4-fs: Cannot change journaled quota options when quota turned on [ 507.091620][T13742] EXT4-fs error (device loop5): mb_free_blocks:2047: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 507.106899][T13736] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #2: block 18: comm syz.1.2831: lblock 23 mapped to illegal pblock 18 (length 1) [ 507.128918][T13736] EXT4-fs (loop1): Remounting filesystem read-only [ 507.138176][T13746] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.172407][ T3749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.202934][T10963] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.239005][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.295150][T13755] netlink: 'syz.1.2837': attribute type 11 has an invalid length. [ 507.307010][T13755] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2837'. [ 507.394543][T13758] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.411516][T13759] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.443861][T13759] ext4 filesystem being mounted at /535/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 507.443885][T13764] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20004 [ 507.469195][T10963] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.479901][ T3749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.504163][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.517831][T13764] isofs_fill_super: root inode is not a directory. Corrupted media? [ 507.749255][T13767] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.794540][T13783] EXT4-fs: inline encryption not supported [ 507.807169][T13783] EXT4-fs: Ignoring removed nobh option [ 507.812959][T13783] EXT4-fs: Ignoring removed nobh option [ 507.818949][T13783] EXT4-fs: Ignoring removed bh option [ 507.915887][T13767] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.2842: corrupted inode contents [ 507.935837][T13767] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #15: comm syz.5.2842: mark_inode_dirty error [ 507.940990][T13783] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.949030][T13767] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.2842: corrupted inode contents [ 507.995506][T13767] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.2842: mark_inode_dirty error [ 508.055893][T13794] FAT-fs (loop0): Directory bread(block 64) failed [ 508.062641][T13794] FAT-fs (loop0): Directory bread(block 65) failed [ 508.069389][T13794] FAT-fs (loop0): Directory bread(block 66) failed [ 508.076201][T13794] FAT-fs (loop0): Directory bread(block 67) failed [ 508.082869][T13794] FAT-fs (loop0): Directory bread(block 68) failed [ 508.090127][T13794] FAT-fs (loop0): Directory bread(block 69) failed [ 508.096788][T13794] FAT-fs (loop0): Directory bread(block 70) failed [ 508.103584][T13794] FAT-fs (loop0): Directory bread(block 71) failed [ 508.110591][T13794] FAT-fs (loop0): Directory bread(block 72) failed [ 508.117293][T13794] FAT-fs (loop0): Directory bread(block 73) failed [ 508.763715][T13767] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.2842: corrupted inode contents [ 508.788854][T13783] EXT4-fs error (device loop1): mb_free_blocks:2047: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 508.828656][T13767] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.2842: mark_inode_dirty error [ 508.884987][T13799] set_capacity_and_notify: 27 callbacks suppressed [ 508.885009][T13799] loop8: detected capacity change from 0 to 2048 [ 508.900329][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.909456][T13767] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.2842: corrupted inode contents [ 509.797897][T13767] EXT4-fs error (device loop5): ext4_truncate:4587: inode #15: comm syz.5.2842: mark_inode_dirty error [ 509.810024][T13799] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.828654][T13804] loop1: detected capacity change from 0 to 256 [ 509.859931][ T4217] bio_check_eod: 144 callbacks suppressed [ 509.859950][ T4217] kworker/u8:18: attempt to access beyond end of device [ 509.859950][ T4217] loop0: rw=1, sector=1192, nr_sectors = 576 limit=256 [ 509.885501][T13767] EXT4-fs error (device loop5) in ext4_setattr:5983: Corrupt filesystem [ 509.935755][T11239] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.945725][T13804] FAT-fs (loop1): Directory bread(block 64) failed [ 509.952515][T13804] FAT-fs (loop1): Directory bread(block 65) failed [ 509.959243][T13804] FAT-fs (loop1): Directory bread(block 66) failed [ 509.965854][T13804] FAT-fs (loop1): Directory bread(block 67) failed [ 509.972500][T13804] FAT-fs (loop1): Directory bread(block 68) failed [ 509.979315][T13804] FAT-fs (loop1): Directory bread(block 69) failed [ 509.985979][T13804] FAT-fs (loop1): Directory bread(block 70) failed [ 509.992523][T13804] FAT-fs (loop1): Directory bread(block 71) failed [ 509.999327][T13804] FAT-fs (loop1): Directory bread(block 72) failed [ 510.005922][T13804] FAT-fs (loop1): Directory bread(block 73) failed [ 510.017821][T13788] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.2842: corrupted inode contents [ 510.238368][ T4217] kworker/u8:18: attempt to access beyond end of device [ 510.238368][ T4217] loop0: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 510.614464][ T4217] kworker/u8:18: attempt to access beyond end of device [ 510.614464][ T4217] loop0: rw=1, sector=1960, nr_sectors = 2056 limit=256 [ 510.615680][ T313] kworker/u8:6: attempt to access beyond end of device [ 510.615680][ T313] loop1: rw=1, sector=1192, nr_sectors = 576 limit=256 [ 510.639544][ T4217] kworker/u8:18: attempt to access beyond end of device [ 510.639544][ T4217] loop0: rw=1, sector=4016, nr_sectors = 3688 limit=256 [ 510.673730][ T4217] kworker/u8:18: attempt to access beyond end of device [ 510.673730][ T4217] loop0: rw=1, sector=7704, nr_sectors = 12048 limit=256 [ 510.678368][ T3749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.701197][ T4217] kworker/u8:18: attempt to access beyond end of device [ 510.701197][ T4217] loop0: rw=1, sector=19752, nr_sectors = 2048 limit=256 [ 510.719200][ T4217] kworker/u8:18: attempt to access beyond end of device [ 510.719200][ T4217] loop0: rw=1, sector=21800, nr_sectors = 2048 limit=256 [ 510.735409][ T4217] kworker/u8:18: attempt to access beyond end of device [ 510.735409][ T4217] loop0: rw=1, sector=23848, nr_sectors = 384 limit=256 [ 510.758121][ T4217] kworker/u8:18: attempt to access beyond end of device [ 510.758121][ T4217] loop0: rw=1, sector=24264, nr_sectors = 32 limit=256 [ 510.888138][ T3319] INFO: The task syz-executor:3319 has been waiting for writeback completion for more than 1 seconds. [ 510.947758][T13812] loop8: detected capacity change from 0 to 256 [ 511.009578][T13812] FAT-fs (loop8): Directory bread(block 64) failed [ 511.016441][T13812] FAT-fs (loop8): Directory bread(block 65) failed [ 511.023028][T13812] FAT-fs (loop8): Directory bread(block 66) failed [ 511.029591][T13812] FAT-fs (loop8): Directory bread(block 67) failed [ 511.036448][T13812] FAT-fs (loop8): Directory bread(block 68) failed [ 511.043073][T13812] FAT-fs (loop8): Directory bread(block 69) failed [ 511.049830][T13812] FAT-fs (loop8): Directory bread(block 70) failed [ 511.056395][T13812] FAT-fs (loop8): Directory bread(block 71) failed [ 511.062995][T13812] FAT-fs (loop8): Directory bread(block 72) failed [ 511.069786][T13812] FAT-fs (loop8): Directory bread(block 73) failed [ 511.873809][T13817] loop0: detected capacity change from 0 to 512 [ 511.890959][ T3314] INFO: The task syz-executor:3314 has been waiting for writeback completion for more than 1 seconds. [ 511.890987][ T3314] INFO: The task syz-executor:3314 has been waiting for writeback completion for more than 1 seconds. [ 512.361247][ T3314] INFO: The task syz-executor:3314 has been waiting for writeback completion for more than 1 seconds. [ 512.413347][T13817] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.484146][T13817] ext4 filesystem being mounted at /573/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 512.646391][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.666988][T13831] loop1: detected capacity change from 0 to 256 [ 512.676781][ T3319] ================================================================== [ 512.685129][ T3319] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 512.692895][ T3319] [ 512.695279][ T3319] read-write to 0xffff888237c26668 of 1 bytes by task 3305 on cpu 0: [ 512.703833][ T3319] folio_add_lru+0xa4/0x1e0 [ 512.708386][ T3319] folio_add_lru_vma+0x49/0x70 [ 512.713201][ T3319] handle_mm_fault+0x2c3f/0x3020 [ 512.718197][ T3319] do_user_addr_fault+0x3fd/0x1050 [ 512.723542][ T3319] exc_page_fault+0x62/0xa0 [ 512.728105][ T3319] asm_exc_page_fault+0x26/0x30 [ 512.733007][ T3319] rep_movs_alternative+0x4a/0x90 [ 512.738090][ T3319] _copy_to_iter+0x141/0xea0 [ 512.739562][T13833] loop7: detected capacity change from 0 to 512 [ 512.742802][ T3319] copy_page_to_iter+0x18f/0x2d0 [ 512.754287][ T3319] filemap_read+0x407/0xa10 [ 512.758840][ T3319] blkdev_read_iter+0x22d/0x2e0 [ 512.763859][ T3319] vfs_read+0x6c0/0x7f0 [ 512.768074][ T3319] ksys_read+0xdc/0x1a0 [ 512.772369][ T3319] __x64_sys_read+0x40/0x50 [ 512.776934][ T3319] x64_sys_call+0x2886/0x3020 [ 512.778927][T13833] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 512.781656][ T3319] do_syscall_64+0x12c/0x370 [ 512.796271][ T3319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.802309][ T3319] [ 512.804676][ T3319] read to 0xffff888237c26668 of 1 bytes by task 3319 on cpu 1: [ 512.812650][ T3319] __lru_add_drain_all+0x17e/0x450 [ 512.817824][ T3319] lru_add_drain_all+0x10/0x20 [ 512.822899][ T3319] invalidate_bdev+0x47/0x70 [ 512.827755][ T3319] ext4_put_super+0x624/0x7d0 [ 512.832571][ T3319] generic_shutdown_super+0xee/0x220 [ 512.837925][ T3319] kill_block_super+0x2a/0x70 [ 512.842762][ T3319] ext4_kill_sb+0x42/0x80 [ 512.847353][ T3319] deactivate_locked_super+0x75/0x1c0 [ 512.852811][ T3319] deactivate_super+0x97/0xa0 [ 512.857607][ T3319] cleanup_mnt+0x2bb/0x330 [ 512.862168][ T3319] __cleanup_mnt+0x19/0x20 [ 512.866641][ T3319] task_work_run+0x130/0x1a0 [ 512.871323][ T3319] exit_to_user_mode_loop+0x1f4/0x6f0 [ 512.876739][ T3319] do_syscall_64+0x249/0x370 [ 512.881472][ T3319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.887520][ T3319] [ 512.889875][ T3319] value changed: 0x03 -> 0x04 [ 512.894765][ T3319] [ 512.897149][ T3319] Reported by Kernel Concurrency Sanitizer on: [ 512.903332][ T3319] CPU: 1 UID: 0 PID: 3319 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 512.914645][ T3319] Tainted: [W]=WARN [ 512.918483][ T3319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 512.928744][ T3319] ================================================================== [ 512.947828][T13833] EXT4-fs (loop7): 1 truncate cleaned up [ 512.954062][T13833] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.980285][T13833] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 512.990508][T13833] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 513.023414][T13837] loop0: detected capacity change from 0 to 128 [ 513.033326][T10963] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.054579][T13837] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 513.124842][T13837] ext4 filesystem being mounted at /574/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 513.165367][T13837] EXT4-fs error (device loop0): ext4_check_dx_root:2201: inode #2: comm syz.0.2858: Corrupt dir, invalid name for '.', running e2fsck is recommended [ 513.191970][ T3319] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.