last executing test programs: 8m30.182948324s ago: executing program 1 (id=896): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000003c0), 0x400000000000041, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) io_setup(0x3ff, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[0x0]) 8m29.843599469s ago: executing program 4 (id=906): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000680)={0x1d, r0}, 0x18) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f00000006c0)=0x1, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000700)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000740)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000007c0)={&(0x7f0000000800), 0x18, &(0x7f0000000840)={&(0x7f0000000880)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x40000}, 0x4406f) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r2, {0x6, 0xc}, {0x5, 0x10}, {0x6, 0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 8m29.655329018s ago: executing program 0 (id=913): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x1}, @IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 8m29.618802152s ago: executing program 0 (id=914): r0 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x181}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) close_range(r0, r0, 0x0) 8m28.723839523s ago: executing program 3 (id=915): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000ac0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x10}, {}, {0x9, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x3ff, 0x5, 0x6, 0x3, 0x6, 0xfffffffe, 0x4, 0x5, 0x80000001, 0x5, 0x7, 0x8, 0x4, 0x6, 0x300, 0x6, 0x2, 0x3, 0x1ff, 0x3, 0x5, 0x3a7, 0x6, 0x6, 0xeea, 0x4, 0x4, 0x9, 0x9, 0x7, 0x0, 0x3fca, 0x62e6, 0x3, 0x4, 0x8, 0x2e2, 0x400, 0x6, 0x3, 0x9, 0xffffffff, 0x7f, 0xd, 0x1, 0x4, 0x7f, 0x9, 0x0, 0x0, 0x5a4, 0x2101, 0x3, 0x3, 0xeb, 0x2, 0x8, 0x7, 0xffff8000, 0x0, 0x5, 0x8, 0x8, 0xb2, 0xca0e, 0x5, 0x200, 0x9, 0x1, 0x6, 0xffffffff, 0x3, 0x80, 0x6, 0x1b0, 0x2, 0x6, 0xd, 0xfffffffc, 0x3ad, 0x47d1, 0x4, 0x1, 0xf, 0x189, 0x9, 0x3, 0x3, 0x5, 0x4, 0x0, 0x2, 0x5, 0x2, 0x1, 0x6b3, 0x1000003, 0x4, 0x8, 0xffff8001, 0x3, 0x81, 0x7, 0xcb0a, 0xe50, 0x6, 0x8000, 0x5, 0x9, 0x8c73, 0x1, 0x81, 0x800, 0xffffffff, 0x10000, 0x8, 0x7fffffff, 0x3, 0x80, 0x6, 0xffffffa5, 0x1, 0x4f23dcfd, 0x0, 0xfd, 0x65, 0x9, 0x1ff, 0x101, 0x6, 0x0, 0xb, 0x80, 0x3, 0x7f, 0x9, 0xfffffff8, 0x1ff, 0x8000, 0xa, 0x8, 0x2, 0x1, 0x5, 0x3, 0x0, 0x1, 0x4, 0x200000, 0x10000000, 0xffffffff, 0x3, 0x2, 0x2bf4, 0x1d50, 0x9, 0x400, 0x4, 0x1, 0x7, 0x1000, 0x5af7, 0x6, 0x40, 0x5, 0x44, 0x15dbc6d1, 0xfd, 0x7fffffff, 0x0, 0x2, 0x6, 0x2, 0x10000, 0x0, 0x6, 0x1000, 0xe314, 0x5, 0x9, 0xffffff45, 0x2, 0x3f, 0xffffffff, 0x5, 0x7, 0x4, 0xd7, 0xe, 0x6, 0x9, 0x0, 0x7, 0x8, 0x9, 0x53e90d17, 0x2, 0x80, 0x8d5, 0x7, 0xf5, 0x8000, 0xbb6, 0x0, 0x10001, 0xd7, 0x4, 0x0, 0x7, 0x0, 0x0, 0x60, 0x0, 0x0, 0x4, 0x3, 0x8, 0xf9a0, 0x0, 0xd48, 0xf24, 0x1, 0x1, 0x6, 0x8, 0x0, 0x7, 0x22e, 0x6f4, 0x5, 0xfffffff9, 0x9, 0x3ff, 0xd91, 0x5, 0x1, 0x40, 0x9, 0xcd, 0xfffffffa, 0x2, 0x6, 0x6, 0x10, 0x2, 0x4, 0xffffff00, 0x3c101c35, 0x1, 0x100, 0x9, 0x0, 0x6, 0x2, 0x3]}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x1, 0x3, 0x7, 0x7, 0x5, 0x3, 0x4, 0x4, 0x34739c43, 0xf7b, 0x2, 0x3d, 0x6, 0x3, 0x5, 0x5, 0x2, 0x30f6, 0x0, 0xe4, 0x9, 0xfffffff9, 0x9, 0x4, 0xe, 0x0, 0x6, 0xd, 0x2, 0x8, 0x5, 0x8, 0x3, 0x3, 0x5, 0x1, 0x9, 0x6, 0xc, 0x9, 0x8, 0x9, 0x6, 0xc7, 0x9, 0x7, 0xbf, 0x1e, 0x5, 0xb, 0x5, 0x2b18, 0x8, 0x4, 0x4, 0x2, 0x8, 0x9, 0x6, 0x56a0, 0x172d, 0x5, 0x40, 0x2, 0xc, 0x5, 0x7, 0x914d, 0x1ff, 0x8275, 0x7, 0x9, 0x2, 0x7fffffff, 0x3, 0x2, 0x469, 0x1, 0x7, 0xff, 0x7ff, 0x200, 0xcf1, 0x4, 0x8, 0x81, 0x9, 0x800, 0x7, 0x6, 0xffc, 0x0, 0x2, 0x1, 0x5, 0x6, 0x2, 0x9, 0x911, 0x0, 0x1, 0xc, 0x73, 0x1, 0x9, 0x8, 0x6, 0x3, 0xd, 0xffffffff, 0x3, 0x8, 0xfff, 0x1, 0x0, 0x0, 0x6, 0x100, 0x1, 0x9, 0x9, 0x4, 0xfffffffa, 0x0, 0x0, 0xca, 0x8, 0xf, 0xa0000000, 0x3, 0x1000, 0x2, 0xf, 0x8000, 0x8, 0x6b14a661, 0x10, 0x4, 0x1, 0x6, 0x3, 0x7, 0xfa48, 0x5, 0xfffffff9, 0x2, 0x0, 0x98d, 0x5, 0xc, 0x2, 0xa01b, 0xffff, 0x1000, 0x4, 0x7, 0x1000, 0x6, 0x1, 0x6, 0xfffffff9, 0x50, 0x1, 0x3ff, 0x3, 0x80, 0x9, 0x200, 0x80000000, 0x6, 0x0, 0x5, 0xfff, 0x40000000, 0x80000000, 0x40, 0xf, 0xffffffff, 0x3ff, 0x8, 0x0, 0x4d1b043e, 0xf51, 0x1, 0x8, 0x3, 0x6, 0x6, 0x7, 0x8, 0xbb71, 0x9, 0x100, 0x9, 0x7, 0x1800, 0x9, 0x8000, 0x0, 0x1, 0x5, 0xf601, 0xa2, 0x2, 0x4, 0x1000, 0x2, 0xb, 0x8, 0x0, 0x3c6, 0x3, 0x3, 0x6, 0xffffffd0, 0x62cd, 0x4a52, 0x580f, 0x4, 0x0, 0xc8, 0x3, 0xfffffffa, 0x1, 0x9, 0x302, 0x9de, 0xfff, 0x1, 0x4, 0xfffffffd, 0x200, 0x60, 0x9, 0xd, 0x5, 0x3, 0x1, 0x6, 0x2000, 0x0, 0x3, 0x7, 0x0, 0x104, 0x6, 0x8, 0x6480b82a, 0x0, 0x8, 0x3, 0xfffffff6, 0xacd, 0x4, 0x9]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 8m28.092103648s ago: executing program 4 (id=916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 8m27.475342831s ago: executing program 0 (id=918): open(&(0x7f0000000000)='./bus\x00', 0x4427e, 0x9a) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x42000) write(r0, &(0x7f0000000340), 0x11000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8m27.058543754s ago: executing program 1 (id=919): perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x9, 0x0, 0x8, 0xa16ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0xa4a0, 0xa2, 0xffffffff, 0x7, 0x7f, 0x9b9b, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = io_uring_setup(0x5206, &(0x7f0000000440)={0x0, 0xdd92, 0x1, 0x2, 0x26c}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], &(0x7f0000000080)=[0x3fffffffffff], 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x0, 0x1}, 0x20) 8m25.665300586s ago: executing program 3 (id=920): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6, 0x5}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xd, 0x7, 0x1, 0x4, 0x100, 0xffc, 0xb709, 0x58f}}]}}]}, 0x44}}, 0x24040084) 8m25.066325907s ago: executing program 4 (id=922): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x800, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0x8, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_clone(0x7f223100, 0x0, 0xfffffe0b, 0x0, 0x0, 0x0) 8m24.654121669s ago: executing program 1 (id=923): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)='1', 0x1}, {&(0x7f0000000200)='b', 0x1}], 0x2) 8m23.929677804s ago: executing program 0 (id=924): accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x20000000) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000500)={0x200000000000001}, 0x8) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000c00)="f66e4fb6d76c", 0x6}], 0x1}}], 0x1, 0x400c405) exit(0x0) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)="cd", 0x1}], 0x1}}], 0x1, 0x40) 8m23.236751835s ago: executing program 3 (id=925): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r0, &(0x7f0000000200)=""/209, 0xd1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 8m22.688877591s ago: executing program 1 (id=926): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000980)=ANY=[@ANYBLOB="05000000484f"]) 8m22.295726681s ago: executing program 4 (id=927): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002340)=@newlink={0x60, 0x10, 0x401, 0x400005, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5a4}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP_WIFI={0x5, 0xc, 0x1}, @IFLA_BRPORT_PROXYARP={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4040) 8m20.867359537s ago: executing program 0 (id=928): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1df) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) pwritev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="dc151299b9c214", 0x7}, {0x0}], 0x2, 0xf897, 0x987) 8m20.331117072s ago: executing program 1 (id=930): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) 8m19.928505103s ago: executing program 3 (id=931): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x40ce, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r0, &(0x7f0000000300)='27', 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0xf6bc93a, 0x2, 0x3, 0x1, 0x1, [0x3, 0x1000, 0xbe3e, 0x2]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000540000005400000002000000000000000100000d"], &(0x7f00000003c0)=""/15, 0x6e, 0xf, 0x1}, 0x28) 8m17.90722365s ago: executing program 4 (id=932): r0 = socket(0x1, 0x5, 0x0) close(r0) pipe2$9p(&(0x7f00000001c0), 0x80800) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x80000000}) 8m17.171773395s ago: executing program 0 (id=933): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x2002401c}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000200)=0xc) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r3}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="0105300007002800060000006000000000308440fe800000000000000000300000000001fe800000000000000000000000000002"], 0x64) 8m16.093760925s ago: executing program 3 (id=935): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 8m13.79943493s ago: executing program 4 (id=936): socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000040)='ext3\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48ee4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'lo\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040884}, 0x8000) 8m13.367356484s ago: executing program 2 (id=937): perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0xa16ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x5, 0xe}, 0x2090, 0xa4, 0xffffffff, 0x7, 0x7f, 0x9b9b, 0x26, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x4e25, @empty}, {0x0, @multicast}, 0xe, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 'lo\x00'}) r1 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60122d9203803afffe8000000000000000000000000000bbff02000000000000000000000000000186009078010000000000000007000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302009f0000000500000000260004002218fe906d26efe39393fe08f7"], 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x84, 0x6, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto(r2, 0x0, 0xeffd, 0x0, 0x0, 0x0) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000000)={0x1}) io_setup(0x2278, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x3, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001640)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x7fff, 0xffffffffffffffff, &(0x7f00000000c0)="e2718f8e80", 0x5, 0x29}]) perf_event_open(0x0, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) pread64(r3, &(0x7f0000000000)=""/4, 0x4, 0x4) 8m12.874985705s ago: executing program 3 (id=938): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x98, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7}, [@CTA_EXPECT_NAT={0x80, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}]}, @CTA_EXPECT_NAT={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 8m8.860483445s ago: executing program 1 (id=939): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) pwrite64(0xffffffffffffffff, &(0x7f00000008c0)='/', 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 8m8.32535401s ago: executing program 2 (id=940): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000640), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) 8m4.746208296s ago: executing program 2 (id=941): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000b80)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x3, &(0x7f0000000c80)=@framed, &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r1, 0x0, 0x10c6, 0x0, &(0x7f0000000d80)="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", &(0x7f0000001e80), 0x3, 0x0, 0x33, 0x1b9, &(0x7f0000001ec0)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000001f00)="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", 0x2, 0x0, 0x7ffc}, 0x50) syz_emit_ethernet(0x5a, &(0x7f0000002100)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}, @mptcp=@syn={0x1e, 0xc, 0x6, 0x1, 0x4, 0x2, 0xa}]}}}}}}}}, 0x0) 8m1.254352643s ago: executing program 32 (id=933): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x2002401c}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000200)=0xc) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r3}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="0105300007002800060000006000000000308440fe800000000000000000300000000001fe800000000000000000000000000002"], 0x64) 8m1.001442889s ago: executing program 2 (id=943): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 7m59.060809298s ago: executing program 2 (id=944): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 7m58.079101828s ago: executing program 33 (id=936): socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000040)='ext3\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48ee4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'lo\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040884}, 0x8000) 7m57.196933878s ago: executing program 34 (id=938): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x98, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7}, [@CTA_EXPECT_NAT={0x80, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}]}, @CTA_EXPECT_NAT={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 7m56.68840876s ago: executing program 2 (id=947): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 7m53.16771324s ago: executing program 35 (id=939): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) pwrite64(0xffffffffffffffff, &(0x7f00000008c0)='/', 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 7m40.295644277s ago: executing program 36 (id=947): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 5.370548849s ago: executing program 6 (id=3116): socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x14, 0x0, 0x6, 0x0, 0x0, 0x3, 0x201}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}]}, 0x1, 0x490, &(0x7f0000000f00)="$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") sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, 0x0, 0x44000) r0 = socket$inet(0x2, 0x1, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x120, 0xb, 0xd0e0011, 0x0, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@multicast2, @broadcast, 0x9c, 0x0, 'nr0\x00', 'batadv0\x00', {0xff}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x2000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000002940), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$key(0xf, 0x3, 0x2) r4 = memfd_create(&(0x7f0000000540)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x8010002}) sendmsg$key(r3, &(0x7f0000000480)={0x4000000, 0x0, 0x0}, 0x0) io_submit(0x0, 0x0, &(0x7f0000000200)) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x1b8, 0x12, 0x600, 0x1b8, 0x202, 0x3b8, 0x2e8, 0x2e8, 0x3b8, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd8, 0x200, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0xc9, 0x11, 0x3}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, 0x0, 0x0) listen(r5, 0x40000) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r2, @ANYRES8=0x0, @ANYRES16=r3, @ANYRES16=r1, @ANYRES16=0x0, @ANYRESDEC=r2, @ANYRES32], 0x178}, 0x1, 0x0, 0x0, 0x448c1}, 0x8) 4.58173644s ago: executing program 9 (id=3119): r0 = socket$inet_smc(0x2b, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000000800000002000000ffff000005", @ANYRES16, @ANYRESHEX=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="2000000000000000b7080000000000007b8af8ff00000000bfa2000000e700000000000000ffffffb703000008000000b70400"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2000000, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3dd3565d, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000400)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f00000004c0)) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a01fc74f64900000000000500000a0900010073797a30000000000900020073797a300000000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001800000000114000000110001"], 0x104}}, 0x0) sendto$inet(r3, &(0x7f0000000500)="f149300d5f039fdeffbccae168b3965548db07b5ce548f159fd7fae294ebe253795fd0afe6b814f43f03f5afd0f7d651054a65cc4a7328ae56ee23758ce00bb14e25ab52efc66cd70e4e00190600000000000000fb964e22e3989c0c0f47fa834d227bf0e2fd5a0c19057f81005e08cc7c027544a0a55c0e64f99f8aa14863cab861264c5db0bc57781a1c63ff6cf876f0643a8bceb1c484a2afed6a6f754377b523b0008fe36144aebe90e021779c0e4350fb5fd5a4291bb9d8d05a57dd7e5bf88f4cf3cb9aede83a5fb5278162883af0", 0xfffffe96, 0x81, 0x0, 0x0) shutdown(r3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000600)={0x0, 0x0}) r6 = shmget$private(0x0, 0x800000, 0x200, &(0x7f0000800000/0x800000)=nil) r7 = shmat(r6, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmdt(r7) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000680)={0x0, 0x5}, 0x8) recvfrom$inet(r3, &(0x7f00000006c0)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="180000006a005f2526bd7000ffdbdf270206000000000000"], 0x18}}, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000940)=ANY=[@ANYBLOB="480000007d010000004100080005674847580100000007000000000000000000080001000000f9190000f5c400000000000009002c5b2f272e21407b3a0300265d28010000010027"], 0x48) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1010, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9, 0x8}, 0x10000, 0xe7e, 0x2, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x40000000, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 4.424943936s ago: executing program 8 (id=3121): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9d4, 0x7fffffff}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0xd557, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x2) setns(0xc9, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040073018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x20048801) fcntl$setpipe(r0, 0x407, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xfe88, &(0x7f00000000c0)=""/181}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x9006}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x28, 0xa9, 0x5, 0xfffff034}, {0x6, 0xfa, 0x2, 0x9}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000380)={@random, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0x28, 0x66, 0x0, 0x3, 0x1, 0x0, @multicast2, @rand_addr=0x64010101}, @timestamp_reply={0xe, 0x0, 0x0, 0x7, 0x5, 0xe, 0x2, 0x7f}}}}}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/mtrr\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='base=0x100000 size=0x100000 type=write-combining\n', 0x31) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/fib_multipath_hash_fields\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='2', 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x294}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) socket(0x2, 0x6, 0x0) socket(0x80000000000000a, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8, 0x200000, 0x300, 0xfc, 0x73a4, 0x3}, 0xfffffe1a) 4.148582325s ago: executing program 8 (id=3123): r0 = socket$inet_smc(0x2b, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000000800000002000000ffff000005", @ANYRES16, @ANYRESHEX=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000000, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3dd3565d, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f00000004c0)) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a01fc74f64900000000000500000a0900010073797a30000000000900020073797a300000000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001800000000114000000110001"], 0x104}}, 0x0) sendto$inet(r2, &(0x7f0000000500)="f149300d5f039fdeffbccae168b3965548db07b5ce548f159fd7fae294ebe253795fd0afe6b814f43f03f5afd0f7d651054a65cc4a7328ae56ee23758ce00bb14e25ab52efc66cd70e4e00190600000000000000fb964e22e3989c0c0f47fa834d227bf0e2fd5a0c19057f81005e08cc7c027544a0a55c0e64f99f8aa14863cab861264c5db0bc57781a1c63ff6cf876f0643a8bceb1c484a2afed6a6f754377b523b0008fe36144aebe90e021779c0e4350fb5fd5a4291bb9d8d05a57dd7e5bf88f4cf3cb9aede83a5fb5278162883af0", 0xfffffe96, 0x81, 0x0, 0x0) shutdown(r2, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000600)={0x0, 0x0}) r5 = shmget$private(0x0, 0x800000, 0x200, &(0x7f0000800000/0x800000)=nil) r6 = shmat(r5, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmdt(r6) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000680)={0x0, 0x5}, 0x8) recvfrom$inet(r2, &(0x7f00000006c0)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="180000006a005f2526bd7000ffdbdf270206000000000000"], 0x18}}, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000940)=ANY=[@ANYBLOB="480000007d010000004100080005674847580100000007000000000000000000080001000000f9190000f5c400000000000009002c5b2f272e21407b3a0300265d28010000010027"], 0x48) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1010, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9, 0x8}, 0x10000, 0xe7e, 0x2, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x40000000, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 4.023508567s ago: executing program 6 (id=3125): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20080, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x18}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x802, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x8) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, &(0x7f0000000100)={0x23, 0x1, 0x8}, 0x10) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000240)=0x1, 0x4) ioctl(r3, 0x89ed, &(0x7f0000000280)='\x00\x00') read(r3, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) r6 = socket$inet(0x2, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000440)={'syzkaller0\x00', 0x1}) syz_genetlink_get_family_id$tipc(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000d00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000}, 0x88) sendmsg$nl_route_sched(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=@newtfilter={0x38, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xf}, {0x0, 0xffff}, {0x300, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x2}}, @filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x38}}, 0x0) write$tun(r1, 0x0, 0x34) r7 = gettid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) migrate_pages(r7, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./bus\x00', 0x1000000, &(0x7f0000000180)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f00000004c0), 0x208e24b) 3.650625106s ago: executing program 9 (id=3127): socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x14, 0x0, 0x6, 0x0, 0x0, 0x3, 0x201}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}]}, 0x1, 0x490, &(0x7f0000000f00)="$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") sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, 0x0, 0x44000) r0 = socket$inet(0x2, 0x1, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000002940), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$key(0xf, 0x3, 0x2) r4 = memfd_create(&(0x7f0000000540)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x8010002}) sendmsg$key(r3, &(0x7f0000000480)={0x4000000, 0x0, 0x0}, 0x0) io_submit(0x0, 0x0, &(0x7f0000000200)) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x1b8, 0x12, 0x600, 0x1b8, 0x202, 0x3b8, 0x2e8, 0x2e8, 0x3b8, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd8, 0x200, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0xc9, 0x11, 0x3}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, 0x0, 0x0) listen(r5, 0x40000) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r2, @ANYRES8=0x0, @ANYRES16=r3, @ANYRES16=r1, @ANYRES16=0x0, @ANYRESDEC=r2, @ANYRES32], 0x178}, 0x1, 0x0, 0x0, 0x448c1}, 0x8) 3.343794347s ago: executing program 8 (id=3128): socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}]}, 0x1, 0x490, &(0x7f0000000f00)="$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") sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, 0x0, 0x44000) r0 = socket$inet(0x2, 0x1, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x120, 0xb, 0xd0e0011, 0x0, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@multicast2, @broadcast, 0x9c, 0x0, 'nr0\x00', 'batadv0\x00', {0xff}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x2000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000002940), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$key(0xf, 0x3, 0x2) r4 = memfd_create(&(0x7f0000000540)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x8010002}) sendmsg$key(r3, &(0x7f0000000480)={0x4000000, 0x0, 0x0}, 0x0) io_submit(0x0, 0x0, &(0x7f0000000200)) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x1b8, 0x12, 0x600, 0x1b8, 0x202, 0x3b8, 0x2e8, 0x2e8, 0x3b8, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd8, 0x200, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0xc9, 0x11, 0x3}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, 0x0, 0x0) listen(r5, 0x40000) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r2, @ANYRES8=0x0, @ANYRES16=r3, @ANYRES16=r1, @ANYRES16=0x0, @ANYRESDEC=r2, @ANYRES32], 0x178}, 0x1, 0x0, 0x0, 0x448c1}, 0x8) 3.31282769s ago: executing program 5 (id=3130): r0 = socket$inet_smc(0x2b, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000000800000002000000ffff000005", @ANYRES16, @ANYRESHEX=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="2000000000000000b7080000000000007b8af8ff00000000bfa2000000e700000000000000ffffffb703000008000000b70400000100"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2000000, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3dd3565d, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000400)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f00000004c0)) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a01fc74f64900000000000500000a0900010073797a30000000000900020073797a300000000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001800000000114000000110001"], 0x104}}, 0x0) sendto$inet(r3, &(0x7f0000000500)="f149300d5f039fdeffbccae168b3965548db07b5ce548f159fd7fae294ebe253795fd0afe6b814f43f03f5afd0f7d651054a65cc4a7328ae56ee23758ce00bb14e25ab52efc66cd70e4e00190600000000000000fb964e22e3989c0c0f47fa834d227bf0e2fd5a0c19057f81005e08cc7c027544a0a55c0e64f99f8aa14863cab861264c5db0bc57781a1c63ff6cf876f0643a8bceb1c484a2afed6a6f754377b523b0008fe36144aebe90e021779c0e4350fb5fd5a4291bb9d8d05a57dd7e5bf88f4cf3cb9aede83a5fb5278162883af0", 0xfffffe96, 0x81, 0x0, 0x0) shutdown(r3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000600)={0x0, 0x0}) r6 = shmget$private(0x0, 0x800000, 0x200, &(0x7f0000800000/0x800000)=nil) r7 = shmat(r6, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmdt(r7) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000680)={0x0, 0x5}, 0x8) recvfrom$inet(r3, &(0x7f00000006c0)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="180000006a005f2526bd7000ffdbdf270206000000000000"], 0x18}}, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000940)=ANY=[@ANYBLOB="480000007d010000004100080005674847580100000007000000000000000000080001000000f9190000f5c400000000000009002c5b2f272e21407b3a0300265d28010000010027"], 0x48) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1010, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9, 0x8}, 0x10000, 0xe7e, 0x2, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x40000000, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.957986207s ago: executing program 6 (id=3131): r0 = socket$inet_smc(0x2b, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000000800000002000000ffff000005", @ANYRES16, @ANYRESHEX=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYBLOB="2000000000000000b7080000000000007b8af8ff00000000bfa2000000e700000000000000ffffffb703000008000000b70400000100"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000000, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3dd3565d, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f00000004c0)) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a01fc74f64900000000000500000a0900010073797a30000000000900020073797a300000000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001800000000114000000110001"], 0x104}}, 0x0) sendto$inet(r2, &(0x7f0000000500)="f149300d5f039fdeffbccae168b3965548db07b5ce548f159fd7fae294ebe253795fd0afe6b814f43f03f5afd0f7d651054a65cc4a7328ae56ee23758ce00bb14e25ab52efc66cd70e4e00190600000000000000fb964e22e3989c0c0f47fa834d227bf0e2fd5a0c19057f81005e08cc7c027544a0a55c0e64f99f8aa14863cab861264c5db0bc57781a1c63ff6cf876f0643a8bceb1c484a2afed6a6f754377b523b0008fe36144aebe90e021779c0e4350fb5fd5a4291bb9d8d05a57dd7e5bf88f4cf3cb9aede83a5fb5278162883af0", 0xfffffe96, 0x81, 0x0, 0x0) shutdown(r2, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000600)={0x0, 0x0}) r5 = shmget$private(0x0, 0x800000, 0x200, &(0x7f0000800000/0x800000)=nil) r6 = shmat(r5, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmdt(r6) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000680)={0x0, 0x5}, 0x8) recvfrom$inet(r2, &(0x7f00000006c0)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="180000006a005f2526bd7000ffdbdf270206000000000000"], 0x18}}, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000940)=ANY=[@ANYBLOB="480000007d010000004100080005674847580100000007000000000000000000080001000000f9190000f5c400000000000009002c5b2f272e21407b3a0300265d28010000010027"], 0x48) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1010, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9, 0x8}, 0x10000, 0xe7e, 0x2, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x40000000, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.888396734s ago: executing program 7 (id=3132): socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x80) openat$md_node(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x2, @perf_config_ext={0x4, 0x8}, 0x11c0e8, 0x1, 0x0, 0x9, 0x8, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_clone(0x100000, &(0x7f0000000640)="30cae1b1a496656dfdcd526b0dfa9b5b289ec6178b1bbe3cc0462d3bc0a9ca13c73ad0f50196e6919017ba6f34db0411d5ede83959fd4c54038d4f7ede0105ae67859fc1b854f4968f845ed9d1dd053f9f2d28d08368e0b918e68919113310ab9d4386b58796255c4d783a23f7977688acd33d7f696a4009e59a4cfc63ed42d4ec5c9d61cc921dfc495dd440b9511591f15da29bde594c", 0x97, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)="8fe3fbd5c9a12d261e41b3074cb6c001ecf8081b1de1fefac37894defa5a4566fa4c10918ab3a750ce224e225f2858f5f8efad9070c10f78") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000a80)={'pimreg1\x00'}) get_robust_list(r0, &(0x7f0000000980)=&(0x7f0000000940)={&(0x7f0000000840)={&(0x7f0000000800)={&(0x7f00000007c0)}}, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={&(0x7f0000000880)}}}, &(0x7f00000009c0)=0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r2, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x0, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f00000004c0)={{r4}, 0x5, 0x81, 0x4}) 2.759094107s ago: executing program 7 (id=3133): socket$inet_smc(0x2b, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="2000000000000000b7080000000000007b8af8ff00000000bfa2000000e700000000000000ff"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3dd3565d, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e21, @local}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a01fc74f64900000000000500000a0900010073797a30000000000900020073797a300000000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001800000000114000000110001"], 0x104}}, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000940)=ANY=[@ANYBLOB="480000007d010000004100080005674847580100000007000000000000000000080001000000f9190000f5c400000000000009002c5b2f272e21407b3a0300265d28010000010027"], 0x48) 2.73225229s ago: executing program 9 (id=3134): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x14, 0x0, 0x6, 0x0, 0x0, 0x3, 0x201}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}]}, 0x1, 0x490, &(0x7f0000000f00)="$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") sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, 0x0, 0x44000) r0 = socket$inet(0x2, 0x1, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x120, 0xb, 0xd0e0011, 0x0, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@multicast2, @broadcast, 0x9c, 0x0, 'nr0\x00', 'batadv0\x00', {0xff}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x2000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000002940), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$key(0xf, 0x3, 0x2) r4 = memfd_create(&(0x7f0000000540)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x8010002}) sendmsg$key(r3, &(0x7f0000000480)={0x4000000, 0x0, 0x0}, 0x0) io_submit(0x0, 0x0, &(0x7f0000000200)) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x1b8, 0x12, 0x600, 0x1b8, 0x202, 0x3b8, 0x2e8, 0x2e8, 0x3b8, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd8, 0x200, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0xc9, 0x11, 0x3}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, 0x0, 0x0) listen(r5, 0x40000) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r2, @ANYRES8=0x0, @ANYRES16=r3, @ANYRES16=r1, @ANYRES16=0x0, @ANYRESDEC=r2, @ANYRES32], 0x178}, 0x1, 0x0, 0x0, 0x448c1}, 0x8) 2.694573524s ago: executing program 8 (id=3135): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x14, 0x0, 0x6, 0x0, 0x0, 0x3, 0x201}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}]}, 0x1, 0x490, &(0x7f0000000f00)="$eJzs3UFrXNUeAPD/nSR9aZu+pO+9RV/BWmwlLdqZpLFtcFEriK4Kat3HmExCyCQTMpO2CUVS/ACCiAquXLkR/ACC9COIUNC9iCiirS5cqCMzudPWOJMETHNx5veD03vOPTPzP6eTOXPPPZe5AXSt4xFxKSJ6IuJ0RAym+3NpivWNVH/c3Ts3puopiVrtyg9JJOm+5msl6fZg+rT+iHj5hYjXkr/GrayuzU+WSsXltFyoLiwVKqtrZ+YWJmeLs8XFsbHR8+MXxs+Nj+xaXy8+9807b374/MVPn7z21cR3p16vN2sgrXuwH7tpo+t9jf+Lpt6IWH4YwTLQk/anL+uGAACwI/Vj/P9ExGON4//B6GkczQEAAACdpPbMQPyaRNQAAACAjpVrXAOb5PLptQADkcvl8xvX8P4vDuRK5Ur1iZnyyuL0xrWyQ9GXm5krFUfSa4WHoi+pl0cb+fvls5vKYxFxOCLeHtzfKOenyqXprE9+AAAAQJc4uGn+//PgxvwfAAAA6DBDWTcAAAAAeOjM/wEAAKDzmf8DAABAR3vx8uV6qjXvfz19dXVlvnz1zHSxMp9fWJnKT5WXl/Kz5fJs4zf7FrZ7vVK5vPRULK5cL1SLlWqhsro2sVBeWaxONO7rPVF0n2gAAADYe4cfvfVlEhHrT+9vpLp9aZ25OnS2XNYNADLTk3UDgMz0Zt0AIDPm+ECyTX1/u4rPdr8tAADAwzH8f+v/0K2s/0P3sv4P3cv6P3Qvc3zA+j8AAHS+gUZKcvl0LXAgcrl8PuJQ47YAfcnMXKk4EhH/jogvBvv+VS+PZt1oAAAAAAAAAAAAAAAAAAAAAAAAAPiHqdWSqAEAAAAdLSL3bZLe/2t48OTA5vMD+5JfBhvbiLj2/pV3r09Wq8uj9f0/3ttffS/dfzaLMxgAAADAZs15enMeDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC76e6dG1PNtJdxv382IoZaxe+N/sa2P/oi4sBPSfQ+8LwkInp2If76zYg40ip+Um9WDKWt2Bw/FxH7M45/cBfiQze7VR9/LrX6/OXieGPb+vPXm6a/q/34l7s3/vW0Gf8O7TDG0dsfF9rGvxlxtLf1+NOMn7SJf2KH8V99ZW2tXV3tg4jhlt8/yZ9iFaoLS4XK6tqZuYXJ2eJscXFsbPT8+IXxc+MjhZm5UjH9t2WMtx755Pet+n+gTfyhbfp/cof9/+329Tv/3SL+qROt3/8jW8Sv/008nn4P1OuHm/n1jfyDjn30+bGt+j/dpv/bvf+ndtj/0y+98fUOHwoA7IHK6tr8ZKlUXJaRkZG5l8l6ZAIAAHbb/YP+rFsCAAAAAAAAAAAAAAAAAAAA3Wsvfk4s6z4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzEHwEAAP//0wfUAw==") sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, 0x0, 0x44000) r0 = socket$inet(0x2, 0x1, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x120, 0xb, 0xd0e0011, 0x0, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@multicast2, @broadcast, 0x9c, 0x0, 'nr0\x00', 'batadv0\x00', {0xff}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x2000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000002940), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$key(0xf, 0x3, 0x2) r4 = memfd_create(&(0x7f0000000540)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x8010002}) sendmsg$key(r3, &(0x7f0000000480)={0x4000000, 0x0, 0x0}, 0x0) io_submit(0x0, 0x0, &(0x7f0000000200)) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x1b8, 0x12, 0x600, 0x1b8, 0x202, 0x3b8, 0x2e8, 0x2e8, 0x3b8, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd8, 0x200, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0xc9, 0x11, 0x3}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, 0x0, 0x0) listen(r5, 0x40000) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r2, @ANYRES8=0x0, @ANYRES16=r3, @ANYRES16=r1, @ANYRES16=0x0, @ANYRESDEC=r2, @ANYRES32], 0x178}, 0x1, 0x0, 0x0, 0x448c1}, 0x8) 2.687817864s ago: executing program 7 (id=3136): r0 = socket$rds(0x15, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x80, 0x3, 0x81, 0x4, 0x0, 0x8, 0x441, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x2, @perf_bp={&(0x7f0000000080), 0x5}, 0x2, 0x2, 0x5, 0x5, 0x604, 0x0, 0x100, 0x0, 0x5, 0x0, 0x1}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x6}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, r1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x4a, 0x0, &(0x7f0000000180)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) syz_mount_image$ext4(&(0x7f0000000640)='ext2\x00', &(0x7f0000000680)='./file0\x00', 0x2800000, &(0x7f0000000780)={[], [{@dont_appraise}, {@hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@obj_user={'obj_user', 0x3d, 'ex\x90\xe9\xdf\x8db<\xc7\xa7\xf5\x014\x00'}}, {@uid_gt}, {@uid_eq}, {@subj_role={'subj_role', 0x3d, '-{/,\xd7-]'}}]}, 0x1, 0xbe9, &(0x7f0000000840)="$eJzs3M9rXFsdAPDvvZn8atNOKiLWTSMiLYjTtJJii2ArFTcuBN0KDemkhEx/kERq0oAT/QdEXQtuBLUoXdh1Nwpu3WjdWt7iQXkvr3kPHo/35nHnRzJNZpo0meSm6ecDJ/ece+7c8/32zsw9p8xMAG+tsexPGnE6Im4kEcXm/jQiBuq1oYhq47i11eWpj1aXp5Ko1X78XhJJRLxYXZ5qnStpbo83G0MR8e/vJfGFX20dd35xaXayUinPNdvnF27fOz+/uPTNmduTt8q3yncuXPr2xMWJS+OXJ3qW68f/v/r4w6/+4J3qJ3/+9OEHv/1jEldjpNnXnkcz6z0bi7H1f5N2hYiY7MH5D4O+Zj7teSaFrccNtjfSAwgMAICO0rY53JeiGH2xMXkrxj/+k2twAAAAQE/U+iJqAAAAwBGXWP8DAADAEdf6HMCL1eWpVsn3EwkH6/m1iBht5L/WLI2eQlTr26Hoj4hjL5Jo/1pr0njYno1FxLP/Xf5bVqLD95D3W3UlIr7c6fon9fxHm9+E3px/GhHjPRh/bFP7Tcr/ag/Gzzt/AN5OT641bmRb73/p+vwnOtz/Ch3uXbuR9/2vNf9b2zL/28i/r8v870c7HOPBn35/v1tflv93Hn//r62SjZ9t95TUa3i+EvGVQqf8k/X8ky7539h8slqt9osOYxQ/u1/uNn7e+df+EHE2Ouffkrz694nOT89UyuONvx3HWPnXxF+6jZ93/tn1P9bMfzh2fP2Hsn33XjpT9x/1+en164+6dPVvn3/67kDyk3ptoLnn55MLC3MXIgaSH27df/HV+baOaZ0jy//c1179+u/0/M/eE6rN50aW+Upzm7V/uWnM7z588Pdu8bTWf3le/5tdnv/bvf5/vcMxvv7P35zr1te+/s1KNv6zpLEWBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICWNCJGIklLEZHU62laKkUcj4gvxrG0cnd+4RvTd39252bWFzEa/en0TKU8HhHFRjvJ2hfq9Y32xU3tb0XEqYj4XXG43i5N3a3czDt5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1h2PiJFI0lJEpBGxVkzTUinvqAAAAICeG807AAAAAGDf7Xr97z8OAAAA4I1hGQ8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA+O3XmydMkIqpXhuslM9Ds6881MmC/pXkHAOSmL+8AgNwU8g4AyM1rrvFNF+AISrbpH+raM9jzWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4vM6efvI0iYjqleF6yQw0+/o7PuLMAUYH7Kc07wCA3PQ1Nic6dhYONhbgYO36Jd75HQN4g3Re4wNvk2Sb/qGNY6ov9wzuW0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD4j9ZKkpYhI6/U0LZUiTkTEaPQn0zOV8nhEnIyI/xb7B7P2YN5BAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0HPzi0uzk5VKeW43lWRvD1c5KpWThyOMfam8HxE9PWGh6wmTQ5JyvZL3OxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYX1yanaxUynPzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1+cWl2slIpz+2g8uh1Dm6r5J0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD5+TwAAP//L50MFA==") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001440)={0xffffffffffffffff, 0x2000002, 0x0, 0x4b, 0x0, 0x0, 0x80000000, 0x0, 0xff41, 0x0, 0x0, 0x0, 0x5}, 0x50) ptrace$getregset(0x4205, r4, 0x202, &(0x7f00000014c0)={&(0x7f0000001500)=""/120, 0xffffffffffffff28}) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x14, 0x3a, 0x229, 0x0, 0xfffffffd, {0xa}}, 0x14}, 0x1, 0x6000000}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000240)={0x0, 0x970, 0x1f480, 0x2, 0x325}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='md', 0x2) r6 = socket$unix(0x1, 0x5, 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001600)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x4000) connect$unix(r6, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008002f728b"], 0x28}, 0x1, 0x0, 0x0, 0x4048000}, 0x816) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000740)={{0x0, 0x7f}, 0x2c}, 0x10) 2.375672626s ago: executing program 5 (id=3137): r0 = socket$inet_smc(0x2b, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000000800000002000000ffff000005", @ANYRES16, @ANYRESHEX=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="2000000000000000b7080000000000007b8af8ff00000000bfa2000000e700000000000000ffffffb703000008000000b704000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2000000, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3dd3565d, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000400)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f00000004c0)) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a01fc74f64900000000000500000a0900010073797a30000000000900020073797a300000000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001800000000114000000110001"], 0x104}}, 0x0) sendto$inet(r3, &(0x7f0000000500)="f149300d5f039fdeffbccae168b3965548db07b5ce548f159fd7fae294ebe253795fd0afe6b814f43f03f5afd0f7d651054a65cc4a7328ae56ee23758ce00bb14e25ab52efc66cd70e4e00190600000000000000fb964e22e3989c0c0f47fa834d227bf0e2fd5a0c19057f81005e08cc7c027544a0a55c0e64f99f8aa14863cab861264c5db0bc57781a1c63ff6cf876f0643a8bceb1c484a2afed6a6f754377b523b0008fe36144aebe90e021779c0e4350fb5fd5a4291bb9d8d05a57dd7e5bf88f4cf3cb9aede83a5fb5278162883af0", 0xfffffe96, 0x81, 0x0, 0x0) shutdown(r3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000600)={0x0, 0x0}) r6 = shmget$private(0x0, 0x800000, 0x200, &(0x7f0000800000/0x800000)=nil) r7 = shmat(r6, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmdt(r7) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000680)={0x0, 0x5}, 0x8) recvfrom$inet(r3, &(0x7f00000006c0)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="180000006a005f2526bd7000ffdbdf270206000000000000"], 0x18}}, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000940)=ANY=[@ANYBLOB="480000007d010000004100080005674847580100000007000000000000000000080001000000f9190000f5c400000000000009002c5b2f272e21407b3a0300265d28010000010027"], 0x48) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1010, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9, 0x8}, 0x10000, 0xe7e, 0x2, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x40000000, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.982033727s ago: executing program 6 (id=3138): r0 = socket$inet_smc(0x2b, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000000800000002000000ffff000005", @ANYRES16, @ANYRESHEX=r0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000000, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3dd3565d, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f00000004c0)) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a01fc74f64900000000000500000a0900010073797a30000000000900020073797a300000000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001800000000114000000110001"], 0x104}}, 0x0) sendto$inet(r2, &(0x7f0000000500)="f149300d5f039fdeffbccae168b3965548db07b5ce548f159fd7fae294ebe253795fd0afe6b814f43f03f5afd0f7d651054a65cc4a7328ae56ee23758ce00bb14e25ab52efc66cd70e4e00190600000000000000fb964e22e3989c0c0f47fa834d227bf0e2fd5a0c19057f81005e08cc7c027544a0a55c0e64f99f8aa14863cab861264c5db0bc57781a1c63ff6cf876f0643a8bceb1c484a2afed6a6f754377b523b0008fe36144aebe90e021779c0e4350fb5fd5a4291bb9d8d05a57dd7e5bf88f4cf3cb9aede83a5fb5278162883af0", 0xfffffe96, 0x81, 0x0, 0x0) shutdown(r2, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000600)={0x0, 0x0}) r5 = shmget$private(0x0, 0x800000, 0x200, &(0x7f0000800000/0x800000)=nil) r6 = shmat(r5, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmdt(r6) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000680)={0x0, 0x5}, 0x8) recvfrom$inet(r2, &(0x7f00000006c0)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="180000006a005f2526bd7000ffdbdf270206000000000000"], 0x18}}, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000940)=ANY=[@ANYBLOB="480000007d010000004100080005674847580100000007000000000000000000080001000000f9190000f5c400000000000009002c5b2f272e21407b3a0300265d28010000010027"], 0x48) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1010, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9, 0x8}, 0x10000, 0xe7e, 0x2, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x40000000, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.875514958s ago: executing program 5 (id=3139): r0 = socket$rds(0x15, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x80, 0x3, 0x81, 0x4, 0x0, 0x8, 0x441, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x2, @perf_bp={&(0x7f0000000080), 0x5}, 0x2, 0x2, 0x5, 0x5, 0x604, 0x0, 0x100, 0x0, 0x5, 0x0, 0x1}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x6}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, r1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x4a, 0x0, &(0x7f0000000180)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) syz_mount_image$ext4(&(0x7f0000000640)='ext2\x00', &(0x7f0000000680)='./file0\x00', 0x2800000, &(0x7f0000000780)={[], [{@dont_appraise}, {@hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@obj_user={'obj_user', 0x3d, 'ex\x90\xe9\xdf\x8db<\xc7\xa7\xf5\x014\x00'}}, {@uid_gt}, {@uid_eq}, {@subj_role={'subj_role', 0x3d, '-{/,\xd7-]'}}]}, 0x1, 0xbe9, &(0x7f0000000840)="$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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001440)={0xffffffffffffffff, 0x2000002, 0x0, 0x4b, 0x0, 0x0, 0x80000000, 0x0, 0xff41, 0x0, 0x0, 0x0, 0x5}, 0x50) ptrace$getregset(0x4205, r4, 0x202, &(0x7f00000014c0)={&(0x7f0000001500)=""/120, 0xffffffffffffff28}) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x14, 0x3a, 0x229, 0x0, 0xfffffffd, {0xa}}, 0x14}, 0x1, 0x6000000}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000240)={0x0, 0x970, 0x1f480, 0x2, 0x325}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='md', 0x2) r6 = socket$unix(0x1, 0x5, 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001600)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x4000) connect$unix(r6, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008002f728b"], 0x28}, 0x1, 0x0, 0x0, 0x4048000}, 0x816) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000740)={{0x0, 0x7f}, 0x2c}, 0x10) 1.728263793s ago: executing program 7 (id=3140): socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x14, 0x0, 0x6, 0x0, 0x0, 0x3, 0x201}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}]}, 0x1, 0x490, &(0x7f0000000f00)="$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") sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, 0x0, 0x44000) r0 = socket$inet(0x2, 0x1, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000002940), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$key(0xf, 0x3, 0x2) r4 = memfd_create(&(0x7f0000000540)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x8010002}) sendmsg$key(r3, &(0x7f0000000480)={0x4000000, 0x0, 0x0}, 0x0) io_submit(0x0, 0x0, &(0x7f0000000200)) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x1b8, 0x12, 0x600, 0x1b8, 0x202, 0x3b8, 0x2e8, 0x2e8, 0x3b8, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd8, 0x200, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0xc9, 0x11, 0x3}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, 0x0, 0x0) listen(r5, 0x40000) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r2, @ANYRES8=0x0, @ANYRES16=r3, @ANYRES16=r1, @ANYRES16=0x0, @ANYRESDEC=r2, @ANYRES32], 0x178}, 0x1, 0x0, 0x0, 0x448c1}, 0x8) 1.713853564s ago: executing program 9 (id=3141): r0 = socket$inet_smc(0x2b, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000000800000002000000ffff000005", @ANYRES16, @ANYRESHEX=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000003000000000000000040", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2000000, 0x9c, 0x0, &(0x7f0000000b80)="4cbc8d017fe55ce4a939f557e2508dd6978494bf1ef18a9c9e77c309b146fbb42fff81fc8806c771071bfe52d03d4597bcac045a485147bbfaab76a4be0c0e4334e916c9e438e1baa37857e762888466f8310272276707fe6f63a72db9a0821666ecd8efe28f8038cc0bd9d5ba4af27deccf26bc6a99728d7fd3224ff3025d137fe7d329e5e37d91d99c8c03e4214d52975304c414a1fe0686237a8a", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3dd3565d, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f00000004c0)) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000840)=ANY=[@ANYBLOB], 0x104}}, 0x0) sendto$inet(r2, &(0x7f0000000500)="f149300d5f039fdeffbccae168b3965548db07b5ce548f159fd7fae294ebe253795fd0afe6b814f43f03f5afd0f7d651054a65cc4a7328ae56ee23758ce00bb14e25ab52efc66cd70e4e00190600000000000000fb964e22e3989c0c0f47fa834d227bf0e2fd5a0c19057f81005e08cc7c027544a0a55c0e64f99f8aa14863cab861264c5db0bc57781a1c63ff6cf876f0643a8bceb1c484a2afed6a6f754377b523b0008fe36144aebe90e021779c0e4350fb5fd5a4291bb9d8d05a57dd7e5bf88f4cf3cb9aede83a5fb5278162883af0", 0xfffffe96, 0x81, 0x0, 0x0) shutdown(r2, 0x1) shmget$private(0x0, 0x800000, 0x200, &(0x7f0000800000/0x800000)=nil) recvfrom$inet(r2, &(0x7f00000006c0)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="180000006a005f2526bd7000ffdbdf270206"], 0x18}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r5, 0xd, 0x1, 0x5, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0]}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x2004c891}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r7, &(0x7f0000000b00)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000940)=ANY=[@ANYBLOB="480000007d010000004100080005674847580100000007000000000000000000080001000000f9190000f5c400000000000009002c5b2f272e21407b3a0300265d28010000010027"], 0x48) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1010, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9, 0x8}, 0x10000, 0xe7e, 0x2, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x40000000, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.623376244s ago: executing program 8 (id=3142): r0 = socket$inet_smc(0x2b, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000000800000002000000ffff000005", @ANYRES16, @ANYRESHEX=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000003000000000000000040", @ANYRES32=r1, @ANYBLOB="2000000000000000b7080000000000007b8af8ff00000000bfa2000000e700000000000000ffffffb703000008000000b704000001000000850000000300000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2000000, 0x9c, 0x0, &(0x7f0000000b80)="4cbc8d017fe55ce4a939f557e2508dd6978494bf1ef18a9c9e77c309b146fbb42fff81fc8806c771071bfe52d03d4597bcac045a485147bbfaab76a4be0c0e4334e916c9e438e1baa37857e762888466f8310272276707fe6f63a72db9a0821666ecd8efe28f8038cc0bd9d5ba4af27deccf26bc6a99728d7fd3224ff3025d137fe7d329e5e37d91d99c8c03e4214d52975304c414a1fe0686237a8a", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3dd3565d, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f00000004c0)) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000840)=ANY=[@ANYBLOB], 0x104}}, 0x0) sendto$inet(r2, &(0x7f0000000500)="f149300d5f039fdeffbccae168b3965548db07b5ce548f159fd7fae294ebe253795fd0afe6b814f43f03f5afd0f7d651054a65cc4a7328ae56ee23758ce00bb14e25ab52efc66cd70e4e00190600000000000000fb964e22e3989c0c0f47fa834d227bf0e2fd5a0c19057f81005e08cc7c027544a0a55c0e64f99f8aa14863cab861264c5db0bc57781a1c63ff6cf876f0643a8bceb1c484a2afed6a6f754377b523b0008fe36144aebe90e021779c0e4350fb5fd5a4291bb9d8d05a57dd7e5bf88f4cf3cb9aede83a5fb5278162883af0", 0xfffffe96, 0x81, 0x0, 0x0) shutdown(r2, 0x1) shmget$private(0x0, 0x800000, 0x200, &(0x7f0000800000/0x800000)=nil) recvfrom$inet(r2, &(0x7f00000006c0)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="180000006a005f2526bd7000ffdbdf270206"], 0x18}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r5, 0xd, 0x1, 0x5, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0]}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x2004c891}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r7, &(0x7f0000000b00)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000940)=ANY=[@ANYBLOB="480000007d010000004100080005674847580100000007000000000000000000080001000000f9190000f5c400000000000009002c5b2f272e21407b3a0300265d28010000010027"], 0x48) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1010, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9, 0x8}, 0x10000, 0xe7e, 0x2, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x40000000, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.412965775s ago: executing program 5 (id=3143): r0 = socket$inet_smc(0x2b, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000000800000002000000ffff000005", @ANYRES16, @ANYRESHEX=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYBLOB="2000000000000000b7080000000000007b8af8ff00000000bfa2000000e700000000000000ffffffb703000008000000b70400000100"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2000000, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3dd3565d, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000400)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f00000004c0)) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a01fc74f64900000000000500000a0900010073797a30000000000900020073797a300000000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001800000000114000000110001"], 0x104}}, 0x0) sendto$inet(r3, &(0x7f0000000500)="f149300d5f039fdeffbccae168b3965548db07b5ce548f159fd7fae294ebe253795fd0afe6b814f43f03f5afd0f7d651054a65cc4a7328ae56ee23758ce00bb14e25ab52efc66cd70e4e00190600000000000000fb964e22e3989c0c0f47fa834d227bf0e2fd5a0c19057f81005e08cc7c027544a0a55c0e64f99f8aa14863cab861264c5db0bc57781a1c63ff6cf876f0643a8bceb1c484a2afed6a6f754377b523b0008fe36144aebe90e021779c0e4350fb5fd5a4291bb9d8d05a57dd7e5bf88f4cf3cb9aede83a5fb5278162883af0", 0xfffffe96, 0x81, 0x0, 0x0) shutdown(r3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000600)={0x0, 0x0}) r6 = shmget$private(0x0, 0x800000, 0x200, &(0x7f0000800000/0x800000)=nil) r7 = shmat(r6, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmdt(r7) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000680)={0x0, 0x5}, 0x8) recvfrom$inet(r3, &(0x7f00000006c0)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="180000006a005f2526bd7000ffdbdf270206000000000000"], 0x18}}, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000940)=ANY=[@ANYBLOB="480000007d010000004100080005674847580100000007000000000000000000080001000000f9190000f5c400000000000009002c5b2f272e21407b3a0300265d28010000010027"], 0x48) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1010, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9, 0x8}, 0x10000, 0xe7e, 0x2, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x40000000, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.016259916s ago: executing program 6 (id=3144): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20080, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x18}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x802, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x8) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, &(0x7f0000000100)={0x23, 0x1, 0x8}, 0x10) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000240)=0x1, 0x4) ioctl(r3, 0x89ed, &(0x7f0000000280)='\x00\x00\x00') read(r3, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) r6 = socket$inet(0x2, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000d00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000}, 0x88) sendmsg$nl_route_sched(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=@newtfilter={0x38, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xf}, {0x0, 0xffff}, {0x300, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x2}}, @filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x38}}, 0x0) write$tun(r1, 0x0, 0x34) r7 = gettid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) migrate_pages(r7, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./bus\x00', 0x1000000, &(0x7f0000000180)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f00000004c0), 0x208e24b) 871.610081ms ago: executing program 9 (id=3145): r0 = socket$rds(0x15, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x80, 0x3, 0x81, 0x4, 0x0, 0x8, 0x441, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x2, @perf_bp={&(0x7f0000000080), 0x5}, 0x2, 0x2, 0x5, 0x5, 0x604, 0x0, 0x100, 0x0, 0x5, 0x0, 0x1}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x6}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, r1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x4a, 0x0, &(0x7f0000000180)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) syz_mount_image$ext4(&(0x7f0000000640)='ext2\x00', &(0x7f0000000680)='./file0\x00', 0x2800000, &(0x7f0000000780)={[], [{@dont_appraise}, {@hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@obj_user={'obj_user', 0x3d, 'ex\x90\xe9\xdf\x8db<\xc7\xa7\xf5\x014\x00'}}, {@uid_gt}, {@uid_eq}, {@subj_role={'subj_role', 0x3d, '-{/,\xd7-]'}}]}, 0x1, 0xbe9, &(0x7f0000000840)="$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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001440)={0xffffffffffffffff, 0x2000002, 0x0, 0x4b, 0x0, 0x0, 0x80000000, 0x0, 0xff41, 0x0, 0x0, 0x0, 0x5}, 0x50) ptrace$getregset(0x4205, r4, 0x202, &(0x7f00000014c0)={&(0x7f0000001500)=""/120, 0xffffffffffffff28}) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x14, 0x3a, 0x229, 0x0, 0xfffffffd, {0xa}}, 0x14}, 0x1, 0x6000000}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000240)={0x0, 0x970, 0x1f480, 0x2, 0x325}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='md', 0x2) r6 = socket$unix(0x1, 0x5, 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001600)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x4000) connect$unix(r6, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008002f728b"], 0x28}, 0x1, 0x0, 0x0, 0x4048000}, 0x816) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000740)={{0x0, 0x7f}, 0x2c}, 0x10) 828.784735ms ago: executing program 8 (id=3146): r0 = socket$rds(0x15, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x80, 0x3, 0x81, 0x4, 0x0, 0x8, 0x441, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x2, @perf_bp={&(0x7f0000000080), 0x5}, 0x2, 0x2, 0x5, 0x5, 0x604, 0x0, 0x100, 0x0, 0x5, 0x0, 0x1}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x6}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x4a, 0x0, &(0x7f0000000180)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) syz_mount_image$ext4(&(0x7f0000000640)='ext2\x00', &(0x7f0000000680)='./file0\x00', 0x2800000, &(0x7f0000000780)={[], [{@dont_appraise}, {@hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@obj_user={'obj_user', 0x3d, 'ex\x90\xe9\xdf\x8db<\xc7\xa7\xf5\x014\x00'}}, {@uid_gt}, {@uid_eq}, {@subj_role={'subj_role', 0x3d, '-{/,\xd7-]'}}]}, 0x1, 0xbe9, &(0x7f0000000840)="$eJzs3M9rXFsdAPDvvZn8atNOKiLWTSMiLYjTtJJii2ArFTcuBN0KDemkhEx/kERq0oAT/QdEXQtuBLUoXdh1Nwpu3WjdWt7iQXkvr3kPHo/35nHnRzJNZpo0meSm6ecDJ/ece+7c8/32zsw9p8xMAG+tsexPGnE6Im4kEcXm/jQiBuq1oYhq47i11eWpj1aXp5Ko1X78XhJJRLxYXZ5qnStpbo83G0MR8e/vJfGFX20dd35xaXayUinPNdvnF27fOz+/uPTNmduTt8q3yncuXPr2xMWJS+OXJ3qW68f/v/r4w6/+4J3qJ3/+9OEHv/1jEldjpNnXnkcz6z0bi7H1f5N2hYiY7MH5D4O+Zj7teSaFrccNtjfSAwgMAICO0rY53JeiGH2xMXkrxj/+k2twAAAAQE/U+iJqAAAAwBGXWP8DAADAEdf6HMCL1eWpVsn3EwkH6/m1iBht5L/WLI2eQlTr26Hoj4hjL5Jo/1pr0njYno1FxLP/Xf5bVqLD95D3W3UlIr7c6fon9fxHm9+E3px/GhHjPRh/bFP7Tcr/ag/Gzzt/AN5OT641bmRb73/p+vwnOtz/Ch3uXbuR9/2vNf9b2zL/28i/r8v870c7HOPBn35/v1tflv93Hn//r62SjZ9t95TUa3i+EvGVQqf8k/X8ky7539h8slqt9osOYxQ/u1/uNn7e+df+EHE2Ouffkrz694nOT89UyuONvx3HWPnXxF+6jZ93/tn1P9bMfzh2fP2Hsn33XjpT9x/1+en164+6dPVvn3/67kDyk3ptoLnn55MLC3MXIgaSH27df/HV+baOaZ0jy//c1179+u/0/M/eE6rN50aW+Upzm7V/uWnM7z588Pdu8bTWf3le/5tdnv/bvf5/vcMxvv7P35zr1te+/s1KNv6zpLEWBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICWNCJGIklLEZHU62laKkUcj4gvxrG0cnd+4RvTd39252bWFzEa/en0TKU8HhHFRjvJ2hfq9Y32xU3tb0XEqYj4XXG43i5N3a3czDt5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1h2PiJFI0lJEpBGxVkzTUinvqAAAAICeG807AAAAAGDf7Xr97z8OAAAA4I1hGQ8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA+O3XmydMkIqpXhuslM9Ds6881MmC/pXkHAOSmL+8AgNwU8g4AyM1rrvFNF+AISrbpH+raM9jzWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4vM6efvI0iYjqleF6yQw0+/o7PuLMAUYH7Kc07wCA3PQ1Nic6dhYONhbgYO36Jd75HQN4g3Re4wNvk2Sb/qGNY6ov9wzuW0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD4j9ZKkpYhI6/U0LZUiTkTEaPQn0zOV8nhEnIyI/xb7B7P2YN5BAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0HPzi0uzk5VKeW43lWRvD1c5KpWThyOMfam8HxE9PWGh6wmTQ5JyvZL3OxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYX1yanaxUynPzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1+cWl2slIpz+2g8uh1Dm6r5J0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD5+TwAAP//L50MFA==") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001440)={0xffffffffffffffff, 0x2000002, 0x0, 0x4b, 0x0, 0x0, 0x80000000, 0x0, 0xff41, 0x0, 0x0, 0x0, 0x5}, 0x50) ptrace$getregset(0x4205, r4, 0x202, &(0x7f00000014c0)={&(0x7f0000001500)=""/120, 0xffffffffffffff28}) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x14, 0x3a, 0x229, 0x0, 0xfffffffd, {0xa}}, 0x14}, 0x1, 0x6000000}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000240)={0x0, 0x970, 0x1f480, 0x2, 0x325}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='md', 0x2) r6 = socket$unix(0x1, 0x5, 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001600)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x4000) connect$unix(r6, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008002f728b"], 0x28}, 0x1, 0x0, 0x0, 0x4048000}, 0x816) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000740)={{0x0, 0x7f}, 0x2c}, 0x10) 710.282387ms ago: executing program 7 (id=3147): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x1b83}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r1) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x3000010, &(0x7f0000000280)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000002c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x2000c010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r3, 0x0, 0xe, 0x0, &(0x7f0000000cc0)="00000000000000002c9ba0709f72", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000840)='./file1\x00', 0x42, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x0, 0x0, &(0x7f0000000940)='GPL\x00', 0xe}, 0x94) request_key(&(0x7f0000000980)='user\x00', &(0x7f00000009c0)={'syz', 0x1}, &(0x7f0000000a00)='R\x10rust\xe3c*sgrVex;De', 0x0) mlockall(0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x4040) syz_open_procfs(0x0, &(0x7f0000000a40)='net/ip_tables_matches\x00') socket$netlink(0x10, 0x3, 0x8000000004) write(0xffffffffffffffff, &(0x7f0000000d40)='8', 0x1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) 685.59518ms ago: executing program 9 (id=3148): r0 = socket$inet_smc(0x2b, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000000800000002000000ffff000005", @ANYRES16, @ANYRESHEX=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000003000000000000000040", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2000000, 0x9c, 0x0, &(0x7f0000000b80)="4cbc8d017fe55ce4a939f557e2508dd6978494bf1ef18a9c9e77c309b146fbb42fff81fc8806c771071bfe52d03d4597bcac045a485147bbfaab76a4be0c0e4334e916c9e438e1baa37857e762888466f8310272276707fe6f63a72db9a0821666ecd8efe28f8038cc0bd9d5ba4af27deccf26bc6a99728d7fd3224ff3025d137fe7d329e5e37d91d99c8c03e4214d52975304c414a1fe0686237a8a", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3dd3565d, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f00000004c0)) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000840)=ANY=[@ANYBLOB], 0x104}}, 0x0) sendto$inet(r2, &(0x7f0000000500)="f149300d5f039fdeffbccae168b3965548db07b5ce548f159fd7fae294ebe253795fd0afe6b814f43f03f5afd0f7d651054a65cc4a7328ae56ee23758ce00bb14e25ab52efc66cd70e4e00190600000000000000fb964e22e3989c0c0f47fa834d227bf0e2fd5a0c19057f81005e08cc7c027544a0a55c0e64f99f8aa14863cab861264c5db0bc57781a1c63ff6cf876f0643a8bceb1c484a2afed6a6f754377b523b0008fe36144aebe90e021779c0e4350fb5fd5a4291bb9d8d05a57dd7e5bf88f4cf3cb9aede83a5fb5278162883af0", 0xfffffe96, 0x81, 0x0, 0x0) shutdown(r2, 0x1) shmget$private(0x0, 0x800000, 0x200, &(0x7f0000800000/0x800000)=nil) recvfrom$inet(r2, &(0x7f00000006c0)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="180000006a005f2526bd7000ffdbdf270206"], 0x18}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r5, 0xd, 0x1, 0x5, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0]}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x2004c891}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r7, &(0x7f0000000b00)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000940)=ANY=[@ANYBLOB="480000007d010000004100080005674847580100000007000000000000000000080001000000f9190000f5c400000000000009002c5b2f272e21407b3a0300265d28010000010027"], 0x48) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1010, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9, 0x8}, 0x10000, 0xe7e, 0x2, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x40000000, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 371.685262ms ago: executing program 5 (id=3149): socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x80) openat$md_node(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x2, @perf_config_ext={0x4, 0x8}, 0x11c0e8, 0x1, 0x0, 0x9, 0x8, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_clone(0x100000, &(0x7f0000000640)="30cae1b1a496656dfdcd526b0dfa9b5b289ec6178b1bbe3cc0462d3bc0a9ca13c73ad0f50196e6919017ba6f34db0411d5ede83959fd4c54038d4f7ede0105ae67859fc1b854f4968f845ed9d1dd053f9f2d28d08368e0b918e68919113310ab9d4386b58796255c4d783a23f7977688acd33d7f696a4009e59a4cfc63ed42d4ec5c9d61cc921dfc495dd440b9511591f15da29bde594c", 0x97, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)="8fe3fbd5c9a12d261e41b3074cb6c001ecf8081b1de1fefac37894defa5a4566fa4c10918ab3a750ce224e225f2858f5f8efad9070c10f78") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000a80)={'pimreg1\x00'}) get_robust_list(r0, &(0x7f0000000980)=&(0x7f0000000940)={&(0x7f0000000840)={&(0x7f0000000800)={&(0x7f00000007c0)}}, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={&(0x7f0000000880)}}}, &(0x7f00000009c0)=0x18) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x3, 0x5, 0x8, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000005c0)={0x1, &(0x7f0000000600)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) flistxattr(r3, 0x0, 0xffffffffffffffb1) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r2, 0x1, 0x3}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000004c0)={{r4}, 0x5, 0x81, 0x4}) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)) lseek(r4, 0x4f, 0x1) 194.20055ms ago: executing program 5 (id=3150): socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x14, 0x0, 0x6, 0x0, 0x0, 0x3, 0x201}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}]}, 0x1, 0x490, &(0x7f0000000f00)="$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") sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, 0x0, 0x44000) r0 = socket$inet(0x2, 0x1, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x120, 0xb, 0xd0e0011, 0x0, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@multicast2, @broadcast, 0x9c, 0x0, 'nr0\x00', 'batadv0\x00', {0xff}, {}, 0x1}, 0x0, 0x98, 0xe0, 0x2000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000002940), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$key(0xf, 0x3, 0x2) r4 = memfd_create(&(0x7f0000000540)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x8010002}) sendmsg$key(r3, &(0x7f0000000480)={0x4000000, 0x0, 0x0}, 0x0) io_submit(0x0, 0x0, &(0x7f0000000200)) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x1b8, 0x12, 0x600, 0x1b8, 0x202, 0x3b8, 0x2e8, 0x2e8, 0x3b8, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd8, 0x200, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0xc9, 0x11, 0x3}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, 0x0, 0x0) listen(r5, 0x40000) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r2, @ANYRES8=0x0, @ANYRES16=r3, @ANYRES16=r1, @ANYRES16=0x0, @ANYRESDEC=r2, @ANYRES32], 0x178}, 0x1, 0x0, 0x0, 0x448c1}, 0x8) 118.037118ms ago: executing program 7 (id=3151): r0 = socket$inet_smc(0x2b, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000000800000002000000ffff000005", @ANYRES16, @ANYRESHEX=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="2000000000000000b7080000000000007b8af8ff00000000bfa2000000e700000000000000ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2000000, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3dd3565d, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000400)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f00000004c0)) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a01fc74f64900000000000500000a0900010073797a30000000000900020073797a300000000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001800000000114000000110001"], 0x104}}, 0x0) sendto$inet(r3, &(0x7f0000000500)="f149300d5f039fdeffbccae168b3965548db07b5ce548f159fd7fae294ebe253795fd0afe6b814f43f03f5afd0f7d651054a65cc4a7328ae56ee23758ce00bb14e25ab52efc66cd70e4e00190600000000000000fb964e22e3989c0c0f47fa834d227bf0e2fd5a0c19057f81005e08cc7c027544a0a55c0e64f99f8aa14863cab861264c5db0bc57781a1c63ff6cf876f0643a8bceb1c484a2afed6a6f754377b523b0008fe36144aebe90e021779c0e4350fb5fd5a4291bb9d8d05a57dd7e5bf88f4cf3cb9aede83a5fb5278162883af0", 0xfffffe96, 0x81, 0x0, 0x0) shutdown(r3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000600)={0x0, 0x0}) r6 = shmget$private(0x0, 0x800000, 0x200, &(0x7f0000800000/0x800000)=nil) r7 = shmat(r6, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmdt(r7) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000680)={0x0, 0x5}, 0x8) recvfrom$inet(r3, &(0x7f00000006c0)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="180000006a005f2526bd7000ffdbdf270206000000000000"], 0x18}}, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000940)=ANY=[@ANYBLOB="480000007d010000004100080005674847580100000007000000000000000000080001000000f9190000f5c400000000000009002c5b2f272e21407b3a0300265d28010000010027"], 0x48) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1010, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9, 0x8}, 0x10000, 0xe7e, 0x2, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x40000000, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 0s ago: executing program 6 (id=3152): socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)="8a", 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e21, 0x8075, @dev={0xfe, 0x80, '\x00', 0x6}, 0x2}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000ac0)='^', 0x1}], 0x1}}], 0x2, 0x40000c0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x3, 0xc, 0x8, 0x11, 0x52, 0x1, 0x40, 0xa6, 0x58, 0x4, 0x6, 0xff, 0x0, 0x3}, 0xe) socket$inet6_mptcp(0xa, 0x1, 0x106) setns(0xc9, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x2, 0xe}, 0x10c0e8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000080008001e000000", 0x24) socket$inet6(0xa, 0x800000000000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xed0e, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0xfffffffe, 0x9, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r1, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000000)="46a1a0995a02", 0x0, 0x0, 0x14, 0x2, 0x0}) kernel console output (not intermixed with test programs): write } for pid=13063 comm="syz.6.2651" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 524.526052][ T5922] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.714968][ T5914] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.113389][ T5903] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.728433][T13137] loop8: detected capacity change from 0 to 512 [ 525.750674][T13137] EXT4-fs: Ignoring removed nobh option [ 525.766468][T13137] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 525.785872][T13137] EXT4-fs error (device loop8): ext4_do_update_inode:5801: inode #3: comm syz.8.2669: corrupted inode contents [ 525.785906][T13137] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 525.786033][T13137] EXT4-fs (loop8): Remounting filesystem read-only [ 525.786390][T13137] Quota error (device loop8): write_blk: dquota write failed [ 525.786750][T13137] EXT4-fs (loop8): 1 truncate cleaned up [ 525.787116][T13137] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.787205][T13137] ext4 filesystem being mounted at /339/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.287224][ T5914] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.619640][T13165] loop8: detected capacity change from 0 to 512 [ 526.623429][T13165] EXT4-fs: Ignoring removed nobh option [ 526.637755][T13165] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 526.679544][T13165] EXT4-fs error (device loop8): ext4_do_update_inode:5801: inode #3: comm syz.8.2676: corrupted inode contents [ 526.679575][T13165] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 526.679709][T13165] EXT4-fs (loop8): Remounting filesystem read-only [ 526.680351][T13165] EXT4-fs (loop8): 1 truncate cleaned up [ 526.681025][T13165] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.681228][T13165] ext4 filesystem being mounted at /341/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.476322][T13170] loop7: detected capacity change from 0 to 512 [ 527.621157][T13170] EXT4-fs: Ignoring removed nobh option [ 527.645221][T13170] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 527.667728][ T5914] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.680555][T13173] loop5: detected capacity change from 0 to 512 [ 527.720953][T13170] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #3: comm syz.7.2677: corrupted inode contents [ 527.721039][T13170] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 527.724682][T13170] EXT4-fs (loop7): Remounting filesystem read-only [ 527.738699][T13170] EXT4-fs (loop7): 1 truncate cleaned up [ 527.780927][T13170] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.785391][T13170] ext4 filesystem being mounted at /352/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.862549][T13192] loop9: detected capacity change from 0 to 128 [ 527.882010][T13192] bio_check_eod: 44 callbacks suppressed [ 527.882025][T13192] syz.9.2681: attempt to access beyond end of device [ 527.882025][T13192] loop9: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 527.882306][T13192] syz.9.2681: attempt to access beyond end of device [ 527.882306][T13192] loop9: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 527.882355][T13192] buffer_io_error: 26 callbacks suppressed [ 527.882470][T13192] Buffer I/O error on dev loop9, logical block 79, lost async page write [ 527.882538][T13192] syz.9.2681: attempt to access beyond end of device [ 527.882538][T13192] loop9: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 527.882652][T13192] Buffer I/O error on dev loop9, logical block 80, lost async page write [ 527.882927][T13192] syz.9.2681: attempt to access beyond end of device [ 527.882927][T13192] loop9: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 527.885610][T13192] syz.9.2681: attempt to access beyond end of device [ 527.885610][T13192] loop9: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 527.885643][T13192] Buffer I/O error on dev loop9, logical block 83, lost async page write [ 527.885659][T13192] syz.9.2681: attempt to access beyond end of device [ 527.885659][T13192] loop9: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 527.885813][T13192] Buffer I/O error on dev loop9, logical block 84, lost async page write [ 527.887749][T13192] syz.9.2681: attempt to access beyond end of device [ 527.887749][T13192] loop9: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 527.888379][T13192] syz.9.2681: attempt to access beyond end of device [ 527.888379][T13192] loop9: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 527.888519][T13192] Buffer I/O error on dev loop9, logical block 95, lost async page write [ 527.888566][T13192] syz.9.2681: attempt to access beyond end of device [ 527.888566][T13192] loop9: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 527.888630][T13192] Buffer I/O error on dev loop9, logical block 96, lost async page write [ 527.904839][T13192] syz.9.2681: attempt to access beyond end of device [ 527.904839][T13192] loop9: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 527.905570][T13192] Buffer I/O error on dev loop9, logical block 99, lost async page write [ 527.905634][T13192] Buffer I/O error on dev loop9, logical block 100, lost async page write [ 527.910641][T13192] Buffer I/O error on dev loop9, logical block 111, lost async page write [ 527.910709][T13192] Buffer I/O error on dev loop9, logical block 112, lost async page write [ 528.025538][T13187] loop8: detected capacity change from 0 to 512 [ 528.048715][T13187] EXT4-fs: Ignoring removed nobh option [ 528.065153][T13187] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 528.138224][T13187] EXT4-fs error (device loop8): ext4_do_update_inode:5801: inode #3: comm syz.8.2682: corrupted inode contents [ 528.153590][T13187] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 528.157255][T13187] EXT4-fs (loop8): Remounting filesystem read-only [ 528.158813][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 528.158832][ C0] EXT4-fs (loop8): initial error at time 1792840217: ext4_do_update_inode:5801: inode 3 [ 528.158863][ C0] EXT4-fs (loop8): last error at time 1792840217: ext4_do_update_inode:5801: inode 3 [ 528.318997][T13187] EXT4-fs (loop8): 1 truncate cleaned up [ 528.365211][T13187] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.375339][T13187] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 528.474927][ T5906] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.546884][T13207] loop6: detected capacity change from 0 to 512 [ 528.547221][T13207] EXT4-fs: Ignoring removed nobh option [ 528.559160][T13207] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 528.577812][T13207] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #3: comm syz.6.2686: corrupted inode contents [ 528.577845][T13207] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 528.578064][T13207] EXT4-fs (loop6): Remounting filesystem read-only [ 528.578346][T13207] __quota_error: 10 callbacks suppressed [ 528.578436][T13207] Quota error (device loop6): write_blk: dquota write failed [ 528.578463][T13207] Quota error (device loop6): qtree_write_dquot: Error -30 occurred while creating quota [ 528.578925][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 528.578946][ C1] EXT4-fs (loop6): initial error at time 1792840217: ext4_do_update_inode:5801: inode 3 [ 528.579002][ C1] EXT4-fs (loop6): last error at time 1792840217: ext4_do_update_inode:5801: inode 3 [ 528.579087][T13207] EXT4-fs (loop6): 1 truncate cleaned up [ 528.579606][T13207] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.579756][T13207] ext4 filesystem being mounted at /354/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 528.686087][ T29] audit: type=1400 audit(1792840217.868:780): avc: denied { write } for pid=13205 comm="syz.6.2686" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 528.686122][ T29] audit: type=1400 audit(1792840217.858:779): avc: denied { write } for pid=13185 comm="syz.8.2682" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 528.892044][T13217] loop9: detected capacity change from 0 to 512 [ 528.892653][T13217] EXT4-fs: Ignoring removed nobh option [ 528.895876][T13217] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 528.913045][T13217] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #3: comm syz.9.2689: corrupted inode contents [ 528.913118][T13217] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 528.915161][T13217] EXT4-fs (loop9): Remounting filesystem read-only [ 528.917688][T13217] Quota error (device loop9): write_blk: dquota write failed [ 528.917773][T13217] Quota error (device loop9): qtree_write_dquot: Error -30 occurred while creating quota [ 528.920840][T13217] EXT4-fs (loop9): 1 truncate cleaned up [ 528.930178][T13217] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.930459][T13217] ext4 filesystem being mounted at /331/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 529.002472][ T29] audit: type=1400 audit(1792840218.178:781): avc: denied { write } for pid=13214 comm="syz.9.2689" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 529.052063][T13223] loop7: detected capacity change from 0 to 128 [ 529.621053][ T5914] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.990977][ T5922] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.145375][T13236] loop8: detected capacity change from 0 to 512 [ 530.391933][ T5903] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.580436][T13242] loop5: detected capacity change from 0 to 512 [ 530.831051][T13248] loop8: detected capacity change from 0 to 512 [ 531.065396][T13259] loop9: detected capacity change from 0 to 512 [ 531.065834][T13259] EXT4-fs: Ignoring removed nobh option [ 531.096701][T13259] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 531.107593][T13259] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #3: comm syz.9.2699: corrupted inode contents [ 531.107673][T13259] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 531.108860][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 531.108916][ C0] EXT4-fs (loop9): initial error at time 1792840220: ext4_do_update_inode:5801: inode 3 [ 531.109003][ C0] EXT4-fs (loop9): last error at time 1792840220: ext4_do_update_inode:5801: inode 3 [ 531.110080][T13248] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.110269][T13248] ext4 filesystem being mounted at /345/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.111304][T13259] EXT4-fs (loop9): Remounting filesystem read-only [ 531.112077][T13259] Quota error (device loop9): write_blk: dquota write failed [ 531.112156][T13259] Quota error (device loop9): qtree_write_dquot: Error -30 occurred while creating quota [ 531.112683][T13259] EXT4-fs (loop9): 1 truncate cleaned up [ 531.113708][T13259] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.119292][T13259] ext4 filesystem being mounted at /333/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.203929][T13251] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.204287][T13251] ext4 filesystem being mounted at /356/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.276804][T13248] xt_CT: No such helper "syz1" [ 531.290039][T13251] xt_CT: No such helper "syz1" [ 531.355375][ T29] audit: type=1400 audit(1792840220.538:782): avc: denied { write } for pid=13253 comm="syz.9.2699" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 531.363450][ T5914] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.622282][ T5922] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.660771][ T5906] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.940656][T13280] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.941526][T13280] ext4 filesystem being mounted at /334/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.039995][T13295] EXT4-fs: Ignoring removed nobh option [ 532.058567][T13295] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 532.086238][T13295] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #3: comm syz.6.2706: corrupted inode contents [ 532.086272][T13295] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 532.088455][T13295] EXT4-fs (loop6): Remounting filesystem read-only [ 532.088858][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 532.088899][ C0] EXT4-fs (loop6): initial error at time 1792840221: ext4_do_update_inode:5801: inode 3 [ 532.090200][ C0] EXT4-fs (loop6): last error at time 1792840221: ext4_do_update_inode:5801: inode 3 [ 532.098128][T13295] EXT4-fs (loop6): 1 truncate cleaned up [ 532.103265][T13295] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.103493][T13295] ext4 filesystem being mounted at /357/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.215659][T13280] xt_CT: No such helper "syz1" [ 532.244890][T13288] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.245137][T13288] ext4 filesystem being mounted at /347/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.397588][T13294] ext4 filesystem being mounted at /363/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.427459][T13288] xt_CT: No such helper "syz1" [ 532.539610][T13305] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 532.550477][T13294] xt_CT: No such helper "syz1" [ 532.643469][T13311] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 532.799224][T13307] set_capacity_and_notify: 7 callbacks suppressed [ 532.799298][T13307] loop9: detected capacity change from 0 to 512 [ 533.009890][T13322] loop8: detected capacity change from 0 to 512 [ 533.016003][T13322] EXT4-fs: Ignoring removed nobh option [ 533.030253][T13322] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 533.044153][T13322] EXT4-fs error (device loop8): ext4_do_update_inode:5801: inode #3: comm syz.8.2710: corrupted inode contents [ 533.044233][T13322] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 533.044660][T13322] EXT4-fs (loop8): Remounting filesystem read-only [ 533.045811][T13322] EXT4-fs (loop8): 1 truncate cleaned up [ 533.046799][T13322] ext4 filesystem being mounted at /348/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 533.058060][T13307] ext4 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 533.207216][T13307] xt_CT: No such helper "syz1" [ 533.332825][T13327] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 533.350820][T13319] Process accounting paused [ 533.628014][T13333] loop7: detected capacity change from 0 to 512 [ 533.752754][T13337] loop9: detected capacity change from 0 to 512 [ 534.008072][T13333] ext4 filesystem being mounted at /359/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.026005][T13330] loop5: detected capacity change from 0 to 512 [ 534.074906][T13333] xt_CT: No such helper "syz1" [ 534.131485][T13337] ext4 filesystem being mounted at /336/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.184791][T13337] xt_CT: No such helper "syz1" [ 534.220171][T13350] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 534.325517][T13330] ext4 filesystem being mounted at /365/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.383929][T13330] xt_CT: No such helper "syz1" [ 534.440320][T13359] loop9: detected capacity change from 0 to 512 [ 534.475340][T13333] Process accounting paused [ 534.614213][T13369] loop8: detected capacity change from 0 to 512 [ 534.614570][T13369] EXT4-fs: Ignoring removed nobh option [ 534.651218][T13369] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 534.686644][T13369] EXT4-fs error (device loop8): ext4_do_update_inode:5801: inode #3: comm syz.8.2721: corrupted inode contents [ 534.686704][T13369] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 534.686872][T13369] EXT4-fs (loop8): Remounting filesystem read-only [ 534.687212][T13369] __quota_error: 6 callbacks suppressed [ 534.687283][T13369] Quota error (device loop8): write_blk: dquota write failed [ 534.687305][T13369] Quota error (device loop8): qtree_write_dquot: Error -30 occurred while creating quota [ 534.687565][T13369] EXT4-fs (loop8): 1 truncate cleaned up [ 534.687998][T13369] ext4 filesystem being mounted at /352/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.704691][T13359] ext4 filesystem being mounted at /337/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.707514][T13366] loop7: detected capacity change from 0 to 512 [ 534.800195][T13366] ext4 filesystem being mounted at /360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.819090][T13359] xt_CT: No such helper "syz1" [ 534.878373][ T29] audit: type=1400 audit(1792840224.058:785): avc: denied { write } for pid=13363 comm="syz.8.2721" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 535.004920][T13382] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 535.044888][T13377] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 535.076505][T13373] loop5: detected capacity change from 0 to 512 [ 535.192948][T13383] loop6: detected capacity change from 0 to 128 [ 535.209388][T13383] bio_check_eod: 92 callbacks suppressed [ 535.209405][T13383] syz.6.2724: attempt to access beyond end of device [ 535.209405][T13383] loop6: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 535.209826][T13383] syz.6.2724: attempt to access beyond end of device [ 535.209826][T13383] loop6: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 535.209874][T13383] buffer_io_error: 58 callbacks suppressed [ 535.209888][T13383] Buffer I/O error on dev loop6, logical block 79, lost async page write [ 535.209927][T13383] syz.6.2724: attempt to access beyond end of device [ 535.209927][T13383] loop6: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 535.209958][T13383] Buffer I/O error on dev loop6, logical block 80, lost async page write [ 535.210091][T13383] syz.6.2724: attempt to access beyond end of device [ 535.210091][T13383] loop6: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 535.249238][T13373] ext4 filesystem being mounted at /366/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.305191][T13383] syz.6.2724: attempt to access beyond end of device [ 535.305191][T13383] loop6: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 535.305218][T13383] Buffer I/O error on dev loop6, logical block 83, lost async page write [ 535.305235][T13383] syz.6.2724: attempt to access beyond end of device [ 535.305235][T13383] loop6: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 535.305292][T13383] Buffer I/O error on dev loop6, logical block 84, lost async page write [ 535.306102][T13383] syz.6.2724: attempt to access beyond end of device [ 535.306102][T13383] loop6: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 535.306524][T13383] syz.6.2724: attempt to access beyond end of device [ 535.306524][T13383] loop6: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 535.306557][T13383] Buffer I/O error on dev loop6, logical block 95, lost async page write [ 535.306657][T13383] syz.6.2724: attempt to access beyond end of device [ 535.306657][T13383] loop6: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 535.306686][T13383] Buffer I/O error on dev loop6, logical block 96, lost async page write [ 535.306844][T13383] syz.6.2724: attempt to access beyond end of device [ 535.306844][T13383] loop6: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 535.307213][T13383] Buffer I/O error on dev loop6, logical block 99, lost async page write [ 535.307239][T13383] Buffer I/O error on dev loop6, logical block 100, lost async page write [ 535.307916][T13383] Buffer I/O error on dev loop6, logical block 111, lost async page write [ 535.307942][T13383] Buffer I/O error on dev loop6, logical block 112, lost async page write [ 535.470149][T13398] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 535.684292][T13407] EXT4-fs: Ignoring removed nobh option [ 535.696086][T13407] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 535.736145][T13407] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #3: comm syz.9.2728: corrupted inode contents [ 535.736183][T13407] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 535.736406][T13407] EXT4-fs (loop9): Remounting filesystem read-only [ 535.736725][T13407] Quota error (device loop9): write_blk: dquota write failed [ 535.736760][T13407] Quota error (device loop9): qtree_write_dquot: Error -30 occurred while creating quota [ 535.737094][T13407] EXT4-fs (loop9): 1 truncate cleaned up [ 535.737518][T13407] ext4 filesystem being mounted at /339/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.981082][ T29] audit: type=1400 audit(1792840225.158:786): avc: denied { write } for pid=13403 comm="syz.9.2728" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 535.996541][T13406] ext4 filesystem being mounted at /361/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.001443][T13402] ext4 filesystem being mounted at /362/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.496114][T13422] ext4 filesystem being mounted at /353/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.588269][T13426] EXT4-fs: Ignoring removed nobh option [ 536.614323][T13426] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 536.638230][T13422] xt_ct_set_helper: 4 callbacks suppressed [ 536.638346][T13422] xt_CT: No such helper "syz1" [ 536.692740][T13426] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #3: comm syz.7.2732: corrupted inode contents [ 536.692940][T13426] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 536.694935][T13426] EXT4-fs (loop7): Remounting filesystem read-only [ 536.698814][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 536.698925][ C0] EXT4-fs (loop7): initial error at time 1792840225: ext4_do_update_inode:5801: inode 3 [ 536.699398][ C0] EXT4-fs (loop7): last error at time 1792840225: ext4_do_update_inode:5801: inode 3 [ 536.780996][T13426] Quota error (device loop7): write_blk: dquota write failed [ 536.781548][T13426] Quota error (device loop7): qtree_write_dquot: Error -30 occurred while creating quota [ 536.794207][T13426] EXT4-fs (loop7): 1 truncate cleaned up [ 536.813979][T13426] ext4 filesystem being mounted at /363/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.956226][T13433] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 537.005130][ T29] audit: type=1400 audit(1792840226.188:787): avc: denied { write } for pid=13425 comm="syz.7.2732" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 537.234768][T13440] ext4 filesystem being mounted at /340/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 537.246428][T13438] ext4 filesystem being mounted at /368/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 537.291600][T13438] xt_CT: No such helper "syz1" [ 537.576182][T13440] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 537.635465][ T5922] EXT4-fs unmount: 35 callbacks suppressed [ 537.635487][ T5922] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.877636][T13456] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.879607][T13456] ext4 filesystem being mounted at /369/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 537.899427][T13466] set_capacity_and_notify: 10 callbacks suppressed [ 537.899452][T13466] loop6: detected capacity change from 0 to 512 [ 537.945028][T13464] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.945768][T13464] ext4 filesystem being mounted at /356/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 537.969375][T13466] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.969817][T13466] ext4 filesystem being mounted at /366/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 537.997664][T13469] loop9: detected capacity change from 0 to 512 [ 537.999591][ T5906] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.041052][T13456] xt_CT: No such helper "syz1" [ 538.065453][T13466] xt_CT: No such helper "syz1" [ 538.147652][T13481] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 538.148601][T13482] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 538.221238][T13464] xt_CT: No such helper "syz1" [ 538.290850][T13485] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 538.337899][T13480] loop7: detected capacity change from 0 to 512 [ 538.342512][T13469] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.342972][T13469] ext4 filesystem being mounted at /341/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.357262][ T5895] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.449571][ T5922] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.499385][ T5903] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.569479][ T5914] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.574868][T13480] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.576449][T13480] ext4 filesystem being mounted at /364/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.626603][T13480] xt_CT: No such helper "syz1" [ 538.743309][T13501] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 538.770384][T13497] loop6: detected capacity change from 0 to 512 [ 538.977850][ T5906] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.992634][T13497] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.992733][T13497] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.014198][T13504] loop5: detected capacity change from 0 to 512 [ 539.070349][T13497] xt_CT: No such helper "syz1" [ 539.187905][T13518] loop7: detected capacity change from 0 to 512 [ 539.193661][T13518] EXT4-fs: Ignoring removed nobh option [ 539.206390][T13518] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 539.207172][T13517] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 539.214999][T13504] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.215544][T13504] ext4 filesystem being mounted at /372/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.239852][T13518] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #3: comm syz.7.2752: corrupted inode contents [ 539.240005][T13518] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 539.243162][T13518] EXT4-fs (loop7): Remounting filesystem read-only [ 539.247304][T13518] Quota error (device loop7): write_blk: dquota write failed [ 539.248975][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 539.249021][ C0] EXT4-fs (loop7): initial error at time 1792840228: ext4_do_update_inode:5801: inode 3 [ 539.249096][ C0] EXT4-fs (loop7): last error at time 1792840228: ext4_do_update_inode:5801: inode 3 [ 539.251568][T13518] EXT4-fs (loop7): 1 truncate cleaned up [ 539.252473][T13518] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.252677][T13518] ext4 filesystem being mounted at /365/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.364384][T13504] xt_CT: No such helper "syz1" [ 539.449593][ T5903] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.505959][T13523] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 539.646316][ T5895] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.792507][T13527] loop6: detected capacity change from 0 to 512 [ 539.866408][ T5906] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.883052][T13529] loop9: detected capacity change from 0 to 512 [ 540.045758][T13534] loop8: detected capacity change from 0 to 512 [ 540.051463][T13527] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 540.051945][T13527] ext4 filesystem being mounted at /368/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 540.089538][T13536] loop5: detected capacity change from 0 to 512 [ 540.096604][T13527] xt_CT: No such helper "syz1" [ 540.103454][T13529] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 540.106273][T13529] ext4 filesystem being mounted at /344/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 540.221517][T13544] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 540.232000][T13536] EXT4-fs: Ignoring removed nobh option [ 540.235233][T13534] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 540.239679][T13534] ext4 filesystem being mounted at /359/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 540.242489][T13536] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 540.282899][T13536] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #3: comm syz.5.2757: corrupted inode contents [ 540.283180][T13536] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 540.289202][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 540.289282][ C0] EXT4-fs (loop5): initial error at time 1792840229: ext4_do_update_inode:5801: inode 3 [ 540.289392][ C0] EXT4-fs (loop5): last error at time 1792840229: ext4_do_update_inode:5801: inode 3 [ 540.293643][T13536] EXT4-fs (loop5): Remounting filesystem read-only [ 540.295157][T13536] __quota_error: 2 callbacks suppressed [ 540.295197][T13536] Quota error (device loop5): write_blk: dquota write failed [ 540.295270][T13536] Quota error (device loop5): qtree_write_dquot: Error -30 occurred while creating quota [ 540.296784][T13536] EXT4-fs (loop5): 1 truncate cleaned up [ 540.303612][T13536] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 540.304135][T13536] ext4 filesystem being mounted at /373/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 540.336979][T13556] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 540.384161][T13534] xt_CT: No such helper "syz1" [ 540.389088][ T29] audit: type=1400 audit(1792840229.568:789): avc: denied { write } for pid=13535 comm="syz.5.2757" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 540.493000][ T5903] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.506044][ T29] audit: type=1400 audit(1792840229.688:790): avc: denied { execute } for pid=13559 comm="syz.7.2761" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=48243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 540.555208][T13558] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 540.686372][ T5922] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.808052][ T5914] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.048121][T13563] ext2: Unknown parameter 'dont_appraise' [ 541.177154][T13573] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.193100][T13573] ext4 filesystem being mounted at /370/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.487551][T13567] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.491570][T13567] ext4 filesystem being mounted at /345/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.574310][T13570] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.576927][T13570] ext4 filesystem being mounted at /360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.578208][T13577] EXT4-fs: Ignoring removed nobh option [ 541.633758][T13577] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 541.668794][ T5895] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.672999][T13570] xt_ct_set_helper: 3 callbacks suppressed [ 541.673042][T13570] xt_CT: No such helper "syz1" [ 541.686486][T13577] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #3: comm syz.7.2766: corrupted inode contents [ 541.686567][T13577] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 541.688794][T13577] EXT4-fs (loop7): Remounting filesystem read-only [ 541.693721][T13577] Quota error (device loop7): write_blk: dquota write failed [ 541.693937][T13577] Quota error (device loop7): qtree_write_dquot: Error -30 occurred while creating quota [ 541.697648][T13577] EXT4-fs (loop7): 1 truncate cleaned up [ 541.711531][T13577] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.714298][T13577] ext4 filesystem being mounted at /369/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.822226][ T5903] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.880082][ T5922] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.898406][ T29] audit: type=1400 audit(1792840231.078:791): avc: denied { write } for pid=13576 comm="syz.7.2766" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 542.044666][ T5914] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.418039][T13596] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.459299][T13596] ext4 filesystem being mounted at /371/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.587560][T13598] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.620049][T13598] ext4 filesystem being mounted at /346/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.703075][ T5906] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.865918][T13598] xt_CT: No such helper "syz1" [ 542.931208][T13598] secmark_tg_check: 3 callbacks suppressed [ 542.931553][T13598] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 542.945176][T13596] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 543.135458][T13602] bio_check_eod: 48 callbacks suppressed [ 543.135488][T13602] syz.8.2770: attempt to access beyond end of device [ 543.135488][T13602] loop8: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 543.163715][T13602] syz.8.2770: attempt to access beyond end of device [ 543.163715][T13602] loop8: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 543.163745][T13602] buffer_io_error: 28 callbacks suppressed [ 543.163755][T13602] Buffer I/O error on dev loop8, logical block 79, lost async page write [ 543.163795][T13602] syz.8.2770: attempt to access beyond end of device [ 543.163795][T13602] loop8: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 543.163817][T13602] Buffer I/O error on dev loop8, logical block 80, lost async page write [ 543.167109][T13602] syz.8.2770: attempt to access beyond end of device [ 543.167109][T13602] loop8: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 543.244502][T13602] syz.8.2770: attempt to access beyond end of device [ 543.244502][T13602] loop8: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 543.244669][T13602] Buffer I/O error on dev loop8, logical block 83, lost async page write [ 543.244775][T13602] syz.8.2770: attempt to access beyond end of device [ 543.244775][T13602] loop8: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 543.244932][T13602] Buffer I/O error on dev loop8, logical block 84, lost async page write [ 543.295620][T13602] syz.8.2770: attempt to access beyond end of device [ 543.295620][T13602] loop8: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 543.323706][T13602] syz.8.2770: attempt to access beyond end of device [ 543.323706][T13602] loop8: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 543.323985][T13602] Buffer I/O error on dev loop8, logical block 95, lost async page write [ 543.324231][T13602] syz.8.2770: attempt to access beyond end of device [ 543.324231][T13602] loop8: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 543.324611][T13602] Buffer I/O error on dev loop8, logical block 96, lost async page write [ 543.400379][T13602] syz.8.2770: attempt to access beyond end of device [ 543.400379][T13602] loop8: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 543.427548][T13602] Buffer I/O error on dev loop8, logical block 99, lost async page write [ 543.427789][T13602] Buffer I/O error on dev loop8, logical block 100, lost async page write [ 543.457468][ T5903] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.469379][ T5922] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.626137][T13602] Process accounting paused [ 543.964295][T13626] set_capacity_and_notify: 8 callbacks suppressed [ 543.967529][T13626] loop6: detected capacity change from 0 to 512 [ 543.980208][T13635] loop8: detected capacity change from 0 to 512 [ 544.022722][T13626] EXT4-fs: Ignoring removed nobh option [ 544.054995][T13626] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 544.065316][T13639] loop7: detected capacity change from 0 to 512 [ 544.181583][T13633] loop5: detected capacity change from 0 to 512 [ 544.214147][T13626] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #3: comm syz.6.2774: corrupted inode contents [ 544.215257][T13626] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 544.219525][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 544.220090][ C0] EXT4-fs (loop6): initial error at time 1792840233: ext4_do_update_inode:5801: inode 3 [ 544.220184][ C0] EXT4-fs (loop6): last error at time 1792840233: ext4_do_update_inode:5801: inode 3 [ 544.222952][T13635] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.223204][T13635] ext4 filesystem being mounted at /362/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 544.248909][T13626] EXT4-fs (loop6): Remounting filesystem read-only [ 544.257819][T13626] Quota error (device loop6): write_blk: dquota write failed [ 544.260625][T13639] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.261165][T13639] ext4 filesystem being mounted at /373/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 544.261590][T13626] Quota error (device loop6): qtree_write_dquot: Error -30 occurred while creating quota [ 544.273074][T13626] EXT4-fs (loop6): 1 truncate cleaned up [ 544.305789][T13635] xt_CT: No such helper "syz1" [ 544.306636][T13626] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.307057][T13626] ext4 filesystem being mounted at /372/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 544.406950][T13639] xt_CT: No such helper "syz1" [ 544.433291][T13633] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.433539][T13633] ext4 filesystem being mounted at /376/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 544.522897][ T29] audit: type=1400 audit(1792840233.708:792): avc: denied { write } for pid=13625 comm="syz.6.2774" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 544.578777][T13633] xt_CT: No such helper "syz1" [ 544.631084][T13651] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 544.640831][T13656] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 544.850631][ T5914] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.858304][ T5906] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.942283][ T5903] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.064806][ T5895] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.267009][T13667] loop6: detected capacity change from 0 to 512 [ 545.324019][T13663] loop8: detected capacity change from 0 to 512 [ 545.333392][T13667] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.333831][T13667] ext4 filesystem being mounted at /373/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.350134][T13642] loop9: detected capacity change from 0 to 4096 [ 545.353501][T13642] ext2: Unknown parameter 'dont_appraise' [ 545.407893][T13667] xt_CT: No such helper "syz1" [ 545.433352][T13673] loop5: detected capacity change from 0 to 128 [ 545.461736][T13673] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 545.461770][T13673] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 545.489064][T13663] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.510056][T13663] ext4 filesystem being mounted at /363/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.556630][ T29] audit: type=1400 audit(1792840234.738:793): avc: denied { allowed } for pid=13641 comm="syz.9.2781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 545.583838][ T29] audit: type=1400 audit(1792840234.768:794): avc: denied { mount } for pid=13641 comm="syz.9.2781" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 545.606753][T13672] loop7: detected capacity change from 0 to 128 [ 545.649400][T13680] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 545.654035][T13663] xt_CT: No such helper "syz1" [ 545.745490][T13667] Process accounting paused [ 545.751079][ T5903] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.807328][ T29] audit: type=1400 audit(1792840234.988:795): avc: denied { unmount } for pid=5922 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 546.049895][T13699] loop5: detected capacity change from 0 to 128 [ 546.118659][ T5914] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.482494][T13704] ext2: Unknown parameter 'dont_appraise' [ 547.277697][T13721] EXT4-fs: Ignoring removed nobh option [ 547.286526][T13721] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 547.384525][T13721] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #3: comm syz.5.2793: corrupted inode contents [ 547.384645][T13721] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 547.386863][T13721] EXT4-fs (loop5): Remounting filesystem read-only [ 547.399500][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 547.399550][ C1] EXT4-fs (loop5): initial error at time 1792840236: ext4_do_update_inode:5801: inode 3 [ 547.399635][ C1] EXT4-fs (loop5): last error at time 1792840236: ext4_do_update_inode:5801: inode 3 [ 547.411061][T13721] Quota error (device loop5): write_blk: dquota write failed [ 547.411157][T13721] Quota error (device loop5): qtree_write_dquot: Error -30 occurred while creating quota [ 547.420373][T13721] EXT4-fs (loop5): 1 truncate cleaned up [ 547.476558][T13721] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.477358][T13721] ext4 filesystem being mounted at /379/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 547.551270][T13723] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.553392][T13723] ext4 filesystem being mounted at /375/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 547.561009][T13725] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.561297][T13725] ext4 filesystem being mounted at /365/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 547.589947][ T29] audit: type=1400 audit(1792840236.778:796): avc: denied { write } for pid=13720 comm="syz.5.2793" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 547.607562][T13727] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.607912][T13727] ext4 filesystem being mounted at /377/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 547.701242][T13725] xt_CT: No such helper "syz1" [ 547.714664][T13723] xt_CT: No such helper "syz1" [ 547.748169][T13727] xt_CT: No such helper "syz1" [ 547.893275][T13745] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 547.896176][T13749] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 547.947802][T13740] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.948349][T13740] ext4 filesystem being mounted at /352/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 547.997398][ T5914] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.997897][ T5903] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.062493][T13740] xt_CT: No such helper "syz1" [ 548.086085][ T5895] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.159638][ T5906] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.225019][T13759] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 548.399893][T13764] bio_check_eod: 79 callbacks suppressed [ 548.399915][T13764] syz.5.2800: attempt to access beyond end of device [ 548.399915][T13764] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 548.400222][T13764] syz.5.2800: attempt to access beyond end of device [ 548.400222][T13764] loop5: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 548.400254][T13764] buffer_io_error: 48 callbacks suppressed [ 548.400268][T13764] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 548.400337][T13764] syz.5.2800: attempt to access beyond end of device [ 548.400337][T13764] loop5: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 548.400367][T13764] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 548.400498][T13764] syz.5.2800: attempt to access beyond end of device [ 548.400498][T13764] loop5: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 548.488100][T13764] syz.5.2800: attempt to access beyond end of device [ 548.488100][T13764] loop5: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 548.488250][T13764] Buffer I/O error on dev loop5, logical block 83, lost async page write [ 548.488272][T13764] syz.5.2800: attempt to access beyond end of device [ 548.488272][T13764] loop5: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 548.488298][T13764] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 548.535011][T13764] syz.5.2800: attempt to access beyond end of device [ 548.535011][T13764] loop5: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 548.535283][T13764] syz.5.2800: attempt to access beyond end of device [ 548.535283][T13764] loop5: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 548.535317][T13764] Buffer I/O error on dev loop5, logical block 95, lost async page write [ 548.535342][T13764] syz.5.2800: attempt to access beyond end of device [ 548.535342][T13764] loop5: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 548.535415][T13764] Buffer I/O error on dev loop5, logical block 96, lost async page write [ 548.535631][T13764] syz.5.2800: attempt to access beyond end of device [ 548.535631][T13764] loop5: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 548.535947][T13764] Buffer I/O error on dev loop5, logical block 99, lost async page write [ 548.535976][T13764] Buffer I/O error on dev loop5, logical block 100, lost async page write [ 548.544804][T13764] Buffer I/O error on dev loop5, logical block 111, lost async page write [ 548.544982][T13764] Buffer I/O error on dev loop5, logical block 112, lost async page write [ 548.746683][ T5922] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.907087][T13763] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.907777][T13763] ext4 filesystem being mounted at /378/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 548.994978][T13761] ext2: Unknown parameter 'dont_appraise' [ 549.036611][T13763] xt_CT: No such helper "syz1" [ 549.119964][ T5906] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.555493][T13782] set_capacity_and_notify: 10 callbacks suppressed [ 549.555742][T13782] loop7: detected capacity change from 0 to 512 [ 549.560735][T13753] loop8: detected capacity change from 0 to 4096 [ 549.563336][T13753] ext2: Unknown parameter 'dont_appraise' [ 549.829897][T13793] loop6: detected capacity change from 0 to 512 [ 549.863574][T13782] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.864893][T13782] ext4 filesystem being mounted at /379/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.882277][T13791] loop5: detected capacity change from 0 to 512 [ 549.938159][T13793] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.970022][T13793] ext4 filesystem being mounted at /378/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.986346][T13791] ext4 filesystem being mounted at /383/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.005977][T13782] xt_CT: No such helper "syz1" [ 550.030937][T13791] xt_CT: No such helper "syz1" [ 550.053774][T13793] xt_CT: No such helper "syz1" [ 550.107648][T13808] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 550.304491][T13810] loop9: detected capacity change from 0 to 512 [ 550.495697][T13810] ext4 filesystem being mounted at /355/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.513826][T13816] loop7: detected capacity change from 0 to 512 [ 550.522370][T13816] EXT4-fs: Ignoring removed nobh option [ 550.528924][T13816] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 550.682882][T13810] xt_CT: No such helper "syz1" [ 550.691189][T13816] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #3: comm syz.7.2813: corrupted inode contents [ 550.691265][T13816] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 550.694400][T13816] EXT4-fs (loop7): Remounting filesystem read-only [ 550.696226][T13816] Quota error (device loop7): write_blk: dquota write failed [ 550.698235][T13816] Quota error (device loop7): qtree_write_dquot: Error -30 occurred while creating quota [ 550.700366][T13816] EXT4-fs (loop7): 1 truncate cleaned up [ 550.725057][T13816] ext4 filesystem being mounted at /380/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.756828][T13829] loop5: detected capacity change from 0 to 512 [ 550.757156][T13829] EXT4-fs: Ignoring removed nobh option [ 550.757722][T13829] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 550.787747][T13829] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #3: comm syz.5.2814: corrupted inode contents [ 550.787776][T13829] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 550.788816][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 550.788886][ C1] EXT4-fs (loop5): initial error at time 1792840239: ext4_do_update_inode:5801: inode 3 [ 550.788990][ C1] EXT4-fs (loop5): last error at time 1792840239: ext4_do_update_inode:5801: inode 3 [ 550.792390][T13829] EXT4-fs (loop5): Remounting filesystem read-only [ 550.796933][T13829] Quota error (device loop5): write_blk: dquota write failed [ 550.797013][T13829] Quota error (device loop5): qtree_write_dquot: Error -30 occurred while creating quota [ 550.797801][T13829] EXT4-fs (loop5): 1 truncate cleaned up [ 550.804143][T13829] ext4 filesystem being mounted at /384/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.875785][ T29] audit: type=1400 audit(1792840240.048:797): avc: denied { write } for pid=13815 comm="syz.7.2813" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 550.876235][T13835] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 550.940227][ T29] audit: type=1400 audit(1792840240.128:798): avc: denied { write } for pid=13824 comm="syz.5.2814" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 551.515802][T13839] loop8: detected capacity change from 0 to 512 [ 551.913905][T13852] loop9: detected capacity change from 0 to 4096 [ 551.916067][T13852] ext2: Unknown parameter 'dont_appraise' [ 552.015003][T13845] loop5: detected capacity change from 0 to 128 [ 552.030763][T13839] ext4 filesystem being mounted at /369/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.098454][T13859] Process accounting paused [ 552.132309][T13839] xt_CT: No such helper "syz1" [ 552.197282][T13863] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 552.906402][T13883] EXT4-fs: Ignoring removed nobh option [ 552.934915][T13883] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 553.021070][T13883] EXT4-fs error (device loop8): ext4_do_update_inode:5801: inode #3: comm syz.8.2828: corrupted inode contents [ 553.021271][T13883] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 553.025703][T13883] EXT4-fs (loop8): Remounting filesystem read-only [ 553.029372][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 553.029662][ C0] EXT4-fs (loop8): initial error at time 1792840242: ext4_do_update_inode:5801: inode 3 [ 553.029880][ C0] EXT4-fs (loop8): last error at time 1792840242: ext4_do_update_inode:5801: inode 3 [ 553.078813][T13883] Quota error (device loop8): write_blk: dquota write failed [ 553.079023][T13883] Quota error (device loop8): qtree_write_dquot: Error -30 occurred while creating quota [ 553.083118][T13883] EXT4-fs (loop8): 1 truncate cleaned up [ 553.104901][T13883] ext4 filesystem being mounted at /371/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 553.381443][ T29] audit: type=1400 audit(1792840242.558:799): avc: denied { write } for pid=13882 comm="syz.8.2828" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 553.529905][T13890] EXT4-fs: Ignoring removed nobh option [ 553.548310][T13890] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 553.707447][T13892] ext4 filesystem being mounted at /382/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 553.716585][T13890] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #3: comm syz.9.2829: corrupted inode contents [ 553.716735][T13890] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 553.717548][T13890] EXT4-fs (loop9): Remounting filesystem read-only [ 553.723115][T13890] Quota error (device loop9): write_blk: dquota write failed [ 553.727663][T13890] EXT4-fs (loop9): 1 truncate cleaned up [ 553.745123][T13890] ext4 filesystem being mounted at /360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 553.807430][T13892] xt_CT: No such helper "syz1" [ 554.236061][T13909] ext4 filesystem being mounted at /385/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 554.352962][T13909] xt_CT: No such helper "syz1" [ 554.464599][T13930] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 554.621561][T13934] set_capacity_and_notify: 4 callbacks suppressed [ 554.621628][T13934] loop8: detected capacity change from 0 to 512 [ 554.641959][T13934] EXT4-fs: Ignoring removed nobh option [ 554.663032][T13934] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 554.685495][T13934] EXT4-fs error (device loop8): ext4_do_update_inode:5801: inode #3: comm syz.8.2840: corrupted inode contents [ 554.685541][T13934] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 554.685737][T13934] EXT4-fs (loop8): Remounting filesystem read-only [ 554.686557][T13934] EXT4-fs (loop8): 1 truncate cleaned up [ 554.727116][T13934] ext4 filesystem being mounted at /373/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 554.877186][T13935] loop6: detected capacity change from 0 to 512 [ 555.077045][T13935] ext4 filesystem being mounted at /386/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 555.258776][T13935] xt_CT: No such helper "syz1" [ 555.597548][T13950] loop5: detected capacity change from 0 to 128 [ 555.826245][T13961] loop6: detected capacity change from 0 to 512 [ 555.833241][T13950] bio_check_eod: 38 callbacks suppressed [ 555.844349][T13950] syz.5.2844: attempt to access beyond end of device [ 555.844349][T13950] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 555.853883][T13950] syz.5.2844: attempt to access beyond end of device [ 555.853883][T13950] loop5: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 555.857053][T13950] buffer_io_error: 22 callbacks suppressed [ 555.857091][T13950] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 555.857157][T13950] syz.5.2844: attempt to access beyond end of device [ 555.857157][T13950] loop5: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 555.857222][T13950] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 555.857774][T13950] syz.5.2844: attempt to access beyond end of device [ 555.857774][T13950] loop5: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 555.878367][T13950] syz.5.2844: attempt to access beyond end of device [ 555.878367][T13950] loop5: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 555.878525][T13950] Buffer I/O error on dev loop5, logical block 83, lost async page write [ 555.878596][T13950] syz.5.2844: attempt to access beyond end of device [ 555.878596][T13950] loop5: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 555.879011][T13950] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 555.891620][T13950] syz.5.2844: attempt to access beyond end of device [ 555.891620][T13950] loop5: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 555.902073][T13950] syz.5.2844: attempt to access beyond end of device [ 555.902073][T13950] loop5: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 555.902172][T13950] Buffer I/O error on dev loop5, logical block 95, lost async page write [ 555.902349][T13950] syz.5.2844: attempt to access beyond end of device [ 555.902349][T13950] loop5: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 555.902420][T13950] Buffer I/O error on dev loop5, logical block 96, lost async page write [ 555.915381][T13963] loop9: detected capacity change from 0 to 512 [ 555.929652][T13950] syz.5.2844: attempt to access beyond end of device [ 555.929652][T13950] loop5: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 555.961856][T13963] ext4 filesystem being mounted at /362/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 555.996346][T13961] ext4 filesystem being mounted at /387/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 555.999236][T13950] Buffer I/O error on dev loop5, logical block 99, lost async page write [ 555.999311][T13950] Buffer I/O error on dev loop5, logical block 100, lost async page write [ 556.043095][T13967] loop7: detected capacity change from 0 to 512 [ 556.116547][T13963] xt_CT: No such helper "syz1" [ 556.148234][T13967] ext4 filesystem being mounted at /386/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 556.158005][T13961] xt_CT: No such helper "syz1" [ 556.210127][T13967] xt_CT: No such helper "syz1" [ 556.247475][T13963] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 556.259139][T13981] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 556.280705][T13982] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 556.825695][T13989] loop6: detected capacity change from 0 to 512 [ 557.234078][T13989] ext4 filesystem being mounted at /388/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 557.249149][T13997] loop7: detected capacity change from 0 to 512 [ 557.621950][T13997] ext4 filesystem being mounted at /387/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 557.766197][T13997] xt_CT: No such helper "syz1" [ 558.089665][T14030] loop9: detected capacity change from 0 to 512 [ 558.201220][T14022] loop6: detected capacity change from 0 to 512 [ 558.363175][T14030] ext4 filesystem being mounted at /365/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.465403][T14022] ext4 filesystem being mounted at /389/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.756998][T14044] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 558.758895][T14046] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 558.780266][T14030] xt_CT: No such helper "syz1" [ 558.803334][T14022] xt_CT: No such helper "syz1" [ 559.117152][T14062] EXT4-fs: Ignoring removed nobh option [ 559.135427][T14062] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 559.155194][T14062] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #3: comm syz.7.2866: corrupted inode contents [ 559.155227][T14062] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 559.156945][T14062] EXT4-fs (loop7): Remounting filesystem read-only [ 559.157300][T14062] __quota_error: 5 callbacks suppressed [ 559.157315][T14062] Quota error (device loop7): write_blk: dquota write failed [ 559.157343][T14062] Quota error (device loop7): qtree_write_dquot: Error -30 occurred while creating quota [ 559.159010][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 559.159062][ C0] EXT4-fs (loop7): initial error at time 1792840248: ext4_do_update_inode:5801: inode 3 [ 559.159156][ C0] EXT4-fs (loop7): last error at time 1792840248: ext4_do_update_inode:5801: inode 3 [ 559.161613][T14062] EXT4-fs (loop7): 1 truncate cleaned up [ 559.162775][T14062] ext4 filesystem being mounted at /389/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 559.260753][T14050] ext4 filesystem being mounted at /366/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 559.327281][ T29] audit: type=1400 audit(1792840248.508:802): avc: denied { write } for pid=14053 comm="syz.7.2866" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 559.466513][T14074] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 559.804442][T14050] xt_CT: No such helper "syz1" [ 559.845099][T14061] ext4 filesystem being mounted at /397/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 560.061430][T14072] set_capacity_and_notify: 3 callbacks suppressed [ 560.061522][T14072] loop6: detected capacity change from 0 to 512 [ 560.079605][T14061] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 560.125570][T14078] loop8: detected capacity change from 0 to 512 [ 560.376014][T14072] ext4 filesystem being mounted at /392/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 560.540492][T14078] ext4 filesystem being mounted at /378/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 560.548011][T14072] xt_CT: No such helper "syz1" [ 560.574173][T14107] loop5: detected capacity change from 0 to 512 [ 560.574633][T14107] EXT4-fs: Ignoring removed nobh option [ 560.594206][T14107] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 560.611273][T14107] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #3: comm syz.5.2876: corrupted inode contents [ 560.611320][T14107] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 560.611561][T14107] EXT4-fs (loop5): Remounting filesystem read-only [ 560.611817][T14107] Quota error (device loop5): write_blk: dquota write failed [ 560.611847][T14107] Quota error (device loop5): qtree_write_dquot: Error -30 occurred while creating quota [ 560.612101][T14107] EXT4-fs (loop5): 1 truncate cleaned up [ 560.612609][T14107] ext4 filesystem being mounted at /399/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 560.641486][T14109] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 560.707285][T14078] xt_CT: No such helper "syz1" [ 560.774534][ T29] audit: type=1400 audit(1792840249.958:803): avc: denied { write } for pid=14100 comm="syz.5.2876" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 560.808485][T14078] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 560.932308][T14121] loop6: detected capacity change from 0 to 512 [ 560.932896][T14121] EXT4-fs: Ignoring removed nobh option [ 560.938284][T14121] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 560.946803][T14121] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #3: comm syz.6.2879: corrupted inode contents [ 560.946882][T14121] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 560.947724][T14121] EXT4-fs (loop6): Remounting filesystem read-only [ 560.948772][T14121] Quota error (device loop6): write_blk: dquota write failed [ 560.948890][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 560.948941][ C0] EXT4-fs (loop6): initial error at time 1792840250: ext4_do_update_inode:5801: inode 3 [ 560.949023][ C0] EXT4-fs (loop6): last error at time 1792840250: ext4_do_update_inode:5801: inode 3 [ 560.949222][T14121] Quota error (device loop6): qtree_write_dquot: Error -30 occurred while creating quota [ 560.950777][T14121] EXT4-fs (loop6): 1 truncate cleaned up [ 560.975304][T14121] ext4 filesystem being mounted at /393/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 561.242616][T14131] loop8: detected capacity change from 0 to 512 [ 561.243094][T14131] EXT4-fs: Ignoring removed nobh option [ 561.262818][T14131] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 561.284499][T14131] EXT4-fs error (device loop8): ext4_do_update_inode:5801: inode #3: comm syz.8.2880: corrupted inode contents [ 561.284549][T14131] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 561.284719][T14131] EXT4-fs (loop8): Remounting filesystem read-only [ 561.284970][T14131] Quota error (device loop8): write_blk: dquota write failed [ 561.285000][T14131] Quota error (device loop8): qtree_write_dquot: Error -30 occurred while creating quota [ 561.285336][T14131] EXT4-fs (loop8): 1 truncate cleaned up [ 561.285857][T14131] ext4 filesystem being mounted at /379/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 562.135212][T14147] loop7: detected capacity change from 0 to 512 [ 562.249411][T14145] loop5: detected capacity change from 0 to 512 [ 562.314150][T14147] ext4 filesystem being mounted at /393/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 562.405882][T14147] xt_CT: No such helper "syz1" [ 562.462632][T14145] ext4 filesystem being mounted at /401/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 562.494853][T14161] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 562.615369][T14145] xt_CT: No such helper "syz1" [ 562.888424][T14171] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 563.185472][T14186] loop9: detected capacity change from 0 to 512 [ 563.185956][T14186] EXT4-fs: Ignoring removed nobh option [ 563.188865][T14186] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 563.236982][T14186] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #3: comm syz.9.2893: corrupted inode contents [ 563.237019][T14186] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 563.237319][T14186] EXT4-fs (loop9): Remounting filesystem read-only [ 563.237859][T14186] EXT4-fs (loop9): 1 truncate cleaned up [ 563.238926][T14186] ext4 filesystem being mounted at /373/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 563.616574][T14203] loop6: detected capacity change from 0 to 128 [ 563.661322][T14212] loop9: detected capacity change from 0 to 512 [ 563.665091][T14212] EXT4-fs: Ignoring removed nobh option [ 563.669020][T14212] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 563.694565][T14212] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #3: comm syz.9.2899: corrupted inode contents [ 563.694601][T14212] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 563.694790][T14212] EXT4-fs (loop9): Remounting filesystem read-only [ 563.695391][T14212] EXT4-fs (loop9): 1 truncate cleaned up [ 563.696208][T14212] ext4 filesystem being mounted at /374/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 563.708406][T14197] bio_check_eod: 3 callbacks suppressed [ 563.708448][T14197] syz.6.2895: attempt to access beyond end of device [ 563.708448][T14197] loop6: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 563.729817][T14197] syz.6.2895: attempt to access beyond end of device [ 563.729817][T14197] loop6: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 563.729896][T14197] Buffer I/O error on dev loop6, logical block 79, lost async page write [ 563.730114][T14197] syz.6.2895: attempt to access beyond end of device [ 563.730114][T14197] loop6: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 563.730195][T14197] Buffer I/O error on dev loop6, logical block 80, lost async page write [ 563.730824][T14197] syz.6.2895: attempt to access beyond end of device [ 563.730824][T14197] loop6: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 563.784912][T14197] syz.6.2895: attempt to access beyond end of device [ 563.784912][T14197] loop6: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 563.785165][T14197] Buffer I/O error on dev loop6, logical block 83, lost async page write [ 563.785230][T14197] syz.6.2895: attempt to access beyond end of device [ 563.785230][T14197] loop6: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 563.785300][T14197] Buffer I/O error on dev loop6, logical block 84, lost async page write [ 563.801795][T14197] syz.6.2895: attempt to access beyond end of device [ 563.801795][T14197] loop6: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 563.809977][T14197] syz.6.2895: attempt to access beyond end of device [ 563.809977][T14197] loop6: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 563.810072][T14197] Buffer I/O error on dev loop6, logical block 95, lost async page write [ 563.810326][T14197] syz.6.2895: attempt to access beyond end of device [ 563.810326][T14197] loop6: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 563.810395][T14197] Buffer I/O error on dev loop6, logical block 96, lost async page write [ 563.811188][T14197] syz.6.2895: attempt to access beyond end of device [ 563.811188][T14197] loop6: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 563.882464][T14197] Buffer I/O error on dev loop6, logical block 99, lost async page write [ 563.882553][T14197] Buffer I/O error on dev loop6, logical block 100, lost async page write [ 563.887468][T14197] Buffer I/O error on dev loop6, logical block 111, lost async page write [ 563.887754][T14197] Buffer I/O error on dev loop6, logical block 112, lost async page write [ 563.927052][T14198] Process accounting resumed [ 564.567186][T14233] Process accounting resumed [ 564.898315][T14222] ext4 filesystem being mounted at /382/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 564.911694][T14226] ext4 filesystem being mounted at /375/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 565.074385][T14242] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 565.106909][T14256] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 565.153976][T14222] xt_CT: No such helper "syz1" [ 565.169458][T14257] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 565.192000][T14242] xt_CT: No such helper "syz1" [ 565.301568][T14261] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 565.302562][T14255] set_capacity_and_notify: 3 callbacks suppressed [ 565.302659][T14255] loop6: detected capacity change from 0 to 512 [ 565.338713][T14255] EXT4-fs: Ignoring removed nobh option [ 565.359939][T14226] xt_CT: No such helper "syz1" [ 565.457867][T14255] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 565.698903][T14255] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #3: comm syz.6.2910: corrupted inode contents [ 565.699014][T14255] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 565.707281][T14255] EXT4-fs (loop6): Remounting filesystem read-only [ 565.709432][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 565.709619][ C1] EXT4-fs (loop6): initial error at time 1792840254: ext4_do_update_inode:5801: inode 3 [ 565.710042][ C1] EXT4-fs (loop6): last error at time 1792840254: ext4_do_update_inode:5801: inode 3 [ 565.721513][T14255] __quota_error: 10 callbacks suppressed [ 565.721562][T14255] Quota error (device loop6): write_blk: dquota write failed [ 565.721645][T14255] Quota error (device loop6): qtree_write_dquot: Error -30 occurred while creating quota [ 565.723262][T14255] EXT4-fs (loop6): 1 truncate cleaned up [ 565.739940][T14270] loop8: detected capacity change from 0 to 512 [ 565.773819][T14255] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 565.808683][T14267] loop9: detected capacity change from 0 to 512 [ 565.866846][T14270] ext4 filesystem being mounted at /384/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 565.879647][T14267] EXT4-fs: Ignoring removed nobh option [ 565.898515][T14267] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 565.970425][ T29] audit: type=1400 audit(1792840255.158:810): avc: denied { write } for pid=14254 comm="syz.6.2910" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 566.088419][T14270] xt_CT: No such helper "syz1" [ 566.157620][T14267] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #3: comm syz.9.2912: corrupted inode contents [ 566.157941][T14267] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 566.161550][T14278] loop5: detected capacity change from 0 to 512 [ 566.162716][T14267] EXT4-fs (loop9): Remounting filesystem read-only [ 566.167362][T14267] Quota error (device loop9): write_blk: dquota write failed [ 566.167561][T14267] Quota error (device loop9): qtree_write_dquot: Error -30 occurred while creating quota [ 566.169093][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 566.169138][ C1] EXT4-fs (loop9): initial error at time 1792840255: ext4_do_update_inode:5801: inode 3 [ 566.169230][ C1] EXT4-fs (loop9): last error at time 1792840255: ext4_do_update_inode:5801: inode 3 [ 566.178088][T14267] EXT4-fs (loop9): 1 truncate cleaned up [ 566.217104][T14278] ext4 filesystem being mounted at /409/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 566.224401][T14267] ext4 filesystem being mounted at /376/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 566.293558][T14278] xt_CT: No such helper "syz1" [ 566.371526][T14270] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 566.425840][T14278] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 566.561594][ T29] audit: type=1400 audit(1792840255.738:811): avc: denied { write } for pid=14266 comm="syz.9.2912" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 566.711681][T14295] loop7: detected capacity change from 0 to 128 [ 566.731283][T14299] loop8: detected capacity change from 0 to 512 [ 566.747363][T14299] EXT4-fs: Ignoring removed nobh option [ 566.775021][T14299] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 566.919899][T14299] EXT4-fs error (device loop8): ext4_do_update_inode:5801: inode #3: comm syz.8.2918: corrupted inode contents [ 566.919937][T14299] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 566.921701][T14299] EXT4-fs (loop8): Remounting filesystem read-only [ 566.928946][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 566.929146][ C1] EXT4-fs (loop8): initial error at time 1792840256: ext4_do_update_inode:5801: inode 3 [ 566.929795][ C1] EXT4-fs (loop8): last error at time 1792840256: ext4_do_update_inode:5801: inode 3 [ 566.931429][T14299] Quota error (device loop8): write_blk: dquota write failed [ 566.932026][T14299] Quota error (device loop8): qtree_write_dquot: Error -30 occurred while creating quota [ 566.933585][T14299] EXT4-fs (loop8): 1 truncate cleaned up [ 566.942094][T14299] ext4 filesystem being mounted at /385/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 567.092642][ T29] audit: type=1400 audit(1792840256.278:812): avc: denied { write } for pid=14298 comm="syz.8.2918" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 567.600136][T14316] loop6: detected capacity change from 0 to 512 [ 567.808162][T14316] EXT4-fs mount: 77 callbacks suppressed [ 567.808227][T14316] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.830894][T14316] ext4 filesystem being mounted at /400/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 567.947762][T14316] xt_CT: No such helper "syz1" [ 568.115416][T14339] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 568.187530][ T5903] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.474766][ T5914] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.522402][T14342] loop5: detected capacity change from 0 to 512 [ 568.654860][T14342] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.656105][T14342] ext4 filesystem being mounted at /412/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.734620][T14342] xt_CT: No such helper "syz1" [ 568.809426][T14352] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 568.984807][T14338] loop7: detected capacity change from 0 to 512 [ 569.091109][T14338] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.093788][T14338] ext4 filesystem being mounted at /402/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 569.133084][ T5895] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.135210][T14357] loop9: detected capacity change from 0 to 4096 [ 569.135587][T14357] ext2: Unknown parameter 'dont_appraise' [ 569.223402][T14338] xt_CT: No such helper "syz1" [ 569.347674][T14369] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 569.596620][ T5906] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.006656][T14368] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.012346][T14368] ext4 filesystem being mounted at /387/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 570.038186][T14365] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.052886][T14365] ext4 filesystem being mounted at /413/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 570.137210][T14368] xt_CT: No such helper "syz1" [ 570.190235][T14365] xt_CT: No such helper "syz1" [ 570.212939][T14392] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 570.315271][T14365] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 570.377186][ T5914] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.495016][ T5895] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.619148][T14409] set_capacity_and_notify: 2 callbacks suppressed [ 570.619168][T14409] loop5: detected capacity change from 0 to 512 [ 570.648430][T14409] EXT4-fs: Ignoring removed nobh option [ 570.661716][T14409] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 570.685247][T14409] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #3: comm syz.5.2944: corrupted inode contents [ 570.685314][T14409] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 570.685466][T14409] EXT4-fs (loop5): Remounting filesystem read-only [ 570.685832][T14409] Quota error (device loop5): write_blk: dquota write failed [ 570.686464][T14409] EXT4-fs (loop5): 1 truncate cleaned up [ 570.707812][T14409] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.710040][T14409] ext4 filesystem being mounted at /414/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.021860][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 571.021883][ T29] audit: type=1400 audit(1792840260.198:813): avc: denied { write } for pid=14405 comm="syz.5.2944" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 571.394726][T14422] loop8: detected capacity change from 0 to 512 [ 571.599022][T14422] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.599926][T14422] ext4 filesystem being mounted at /390/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.764474][T14434] loop7: detected capacity change from 0 to 512 [ 571.857279][T14422] xt_CT: No such helper "syz1" [ 571.882631][T14446] loop9: detected capacity change from 0 to 512 [ 571.883165][T14446] EXT4-fs: Ignoring removed nobh option [ 571.900152][T14446] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 571.914508][T14446] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #3: comm syz.9.2953: corrupted inode contents [ 571.914589][T14446] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 571.915474][T14446] EXT4-fs (loop9): Remounting filesystem read-only [ 571.918854][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 571.918914][ C0] EXT4-fs (loop9): initial error at time 1792840261: ext4_do_update_inode:5801: inode 3 [ 571.918971][ C0] EXT4-fs (loop9): last error at time 1792840261: ext4_do_update_inode:5801: inode 3 [ 571.919189][T14446] Quota error (device loop9): write_blk: dquota write failed [ 571.919261][T14446] Quota error (device loop9): qtree_write_dquot: Error -30 occurred while creating quota [ 571.922734][T14446] EXT4-fs (loop9): 1 truncate cleaned up [ 571.923723][T14446] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.929529][T14446] ext4 filesystem being mounted at /385/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 572.010901][T14422] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 572.015733][T14434] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.016102][T14434] ext4 filesystem being mounted at /408/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 572.075462][ T5914] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.128353][T14434] xt_CT: No such helper "syz1" [ 572.138386][ T29] audit: type=1400 audit(1792840261.318:814): avc: denied { write } for pid=14441 comm="syz.9.2953" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 572.236637][T14457] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 572.247698][ T5895] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.248636][T14453] loop6: detected capacity change from 0 to 512 [ 572.578071][T14453] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.582844][ T5906] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.616933][T14453] ext4 filesystem being mounted at /408/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 572.768542][T14469] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 572.906385][ T5903] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.021360][T14473] loop5: detected capacity change from 0 to 512 [ 573.068091][ T5922] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.250159][T14473] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.254115][T14473] ext4 filesystem being mounted at /416/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 573.347076][T14479] loop8: detected capacity change from 0 to 512 [ 573.410316][T14473] xt_CT: No such helper "syz1" [ 573.593438][T14494] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 573.751520][ T5895] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.760571][T14479] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.760890][T14479] ext4 filesystem being mounted at /392/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 573.919730][T14479] xt_CT: No such helper "syz1" [ 574.048590][T14479] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 574.146968][T14513] Process accounting resumed [ 574.154526][ T5914] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.186997][T14516] loop6: detected capacity change from 0 to 512 [ 574.312232][T14516] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.314084][T14516] ext4 filesystem being mounted at /412/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 574.418263][T14516] xt_CT: No such helper "syz1" [ 574.494530][T14531] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 574.720721][T14535] loop9: detected capacity change from 0 to 512 [ 574.721176][T14535] EXT4-fs: Ignoring removed nobh option [ 574.724426][T14535] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 574.766401][T14535] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #3: comm syz.9.2975: corrupted inode contents [ 574.766443][T14535] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 574.766588][T14535] EXT4-fs (loop9): Remounting filesystem read-only [ 574.766880][T14535] Quota error (device loop9): write_blk: dquota write failed [ 574.766966][T14535] Quota error (device loop9): qtree_write_dquot: Error -30 occurred while creating quota [ 574.767285][T14535] EXT4-fs (loop9): 1 truncate cleaned up [ 574.767676][T14535] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.767831][T14535] ext4 filesystem being mounted at /390/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 574.840899][T14537] loop5: detected capacity change from 0 to 512 [ 574.877859][ T29] audit: type=1400 audit(1792840264.058:815): avc: denied { write } for pid=14533 comm="syz.9.2975" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 574.985537][ T5903] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.037504][T14537] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.037568][T14537] ext4 filesystem being mounted at /418/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 575.187549][T14537] xt_CT: No such helper "syz1" [ 575.272472][T14556] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 575.274505][ T5922] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.618558][T14550] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.622798][T14550] ext4 filesystem being mounted at /395/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 575.692491][ T5895] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.728009][T14550] xt_CT: No such helper "syz1" [ 575.897383][T14550] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 575.960221][T14578] Process accounting resumed [ 575.978412][ T5914] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.169465][T14584] set_capacity_and_notify: 1 callbacks suppressed [ 576.170107][T14584] loop7: detected capacity change from 0 to 512 [ 576.528253][T14597] loop5: detected capacity change from 0 to 512 [ 576.578012][T14584] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.596860][T14584] ext4 filesystem being mounted at /418/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 576.727069][T14590] loop8: detected capacity change from 0 to 512 [ 576.734056][T14597] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.759734][T14597] ext4 filesystem being mounted at /421/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 576.791562][T14584] xt_CT: No such helper "syz1" [ 576.834765][T14590] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.835632][T14590] ext4 filesystem being mounted at /396/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 576.870827][T14590] xt_CT: No such helper "syz1" [ 576.937530][T14597] xt_CT: No such helper "syz1" [ 576.969585][T14620] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 577.098318][T14584] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 577.098877][T14621] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 577.135850][ T5914] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.156937][ T5906] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.232569][ T5895] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.319259][T14623] loop9: detected capacity change from 0 to 512 [ 577.327341][T14623] EXT4-fs: Ignoring removed nobh option [ 577.347738][T14623] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 577.491567][T14636] loop6: detected capacity change from 0 to 512 [ 577.492114][T14636] EXT4-fs: Ignoring removed nobh option [ 577.495049][T14636] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 577.527663][T14636] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #3: comm syz.6.3000: corrupted inode contents [ 577.527730][T14636] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 577.539751][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 577.539781][ C1] EXT4-fs (loop6): initial error at time 1792840266: ext4_do_update_inode:5801: inode 3 [ 577.539820][ C1] EXT4-fs (loop6): last error at time 1792840266: ext4_do_update_inode:5801: inode 3 [ 577.570556][T14636] EXT4-fs (loop6): Remounting filesystem read-only [ 577.574215][T14636] Quota error (device loop6): write_blk: dquota write failed [ 577.574333][T14636] Quota error (device loop6): qtree_write_dquot: Error -30 occurred while creating quota [ 577.575144][T14636] EXT4-fs (loop6): 1 truncate cleaned up [ 577.579621][T14636] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.579914][T14636] ext4 filesystem being mounted at /418/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 577.645355][ T29] audit: type=1400 audit(1792840266.828:816): avc: denied { write } for pid=14634 comm="syz.6.3000" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 577.650804][T14623] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #3: comm syz.9.2995: corrupted inode contents [ 577.650895][T14623] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 577.654713][T14623] EXT4-fs (loop9): Remounting filesystem read-only [ 577.656595][T14623] Quota error (device loop9): write_blk: dquota write failed [ 577.656747][T14623] Quota error (device loop9): qtree_write_dquot: Error -30 occurred while creating quota [ 577.657862][T14623] EXT4-fs (loop9): 1 truncate cleaned up [ 577.697873][T14623] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.698302][T14623] ext4 filesystem being mounted at /394/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 577.730172][T14628] loop7: detected capacity change from 0 to 512 [ 577.762494][T14628] EXT4-fs: Ignoring removed nobh option [ 577.780349][T14628] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 577.881274][ T5903] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.975533][T14628] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #3: comm syz.7.2997: corrupted inode contents [ 577.975743][T14628] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 577.978911][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 577.979251][ C1] EXT4-fs (loop7): initial error at time 1792840267: ext4_do_update_inode:5801: inode 3 [ 577.979381][ C1] EXT4-fs (loop7): last error at time 1792840267: ext4_do_update_inode:5801: inode 3 [ 577.986915][ T29] audit: type=1400 audit(1792840267.168:817): avc: denied { write } for pid=14622 comm="syz.9.2995" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 578.039062][T14628] EXT4-fs (loop7): Remounting filesystem read-only [ 578.045182][T14628] Quota error (device loop7): write_blk: dquota write failed [ 578.045692][T14628] Quota error (device loop7): qtree_write_dquot: Error -30 occurred while creating quota [ 578.050353][T14628] EXT4-fs (loop7): 1 truncate cleaned up [ 578.096231][T14628] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.096991][T14628] ext4 filesystem being mounted at /419/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 578.563651][ T29] audit: type=1400 audit(1792840267.738:818): avc: denied { write } for pid=14627 comm="syz.7.2997" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 578.742984][ T5922] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.223019][T14683] loop8: detected capacity change from 0 to 512 [ 579.223459][T14683] EXT4-fs: Ignoring removed nobh option [ 579.248032][T14683] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 579.251396][T14683] EXT4-fs error (device loop8): ext4_do_update_inode:5801: inode #3: comm syz.8.3012: corrupted inode contents [ 579.251479][T14683] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 579.252081][T14683] EXT4-fs (loop8): Remounting filesystem read-only [ 579.252718][T14683] Quota error (device loop8): write_blk: dquota write failed [ 579.253376][T14683] EXT4-fs (loop8): 1 truncate cleaned up [ 579.254306][T14683] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.254585][T14683] ext4 filesystem being mounted at /401/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 579.716138][ T5914] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.746913][ T5906] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.314325][T14709] loop7: detected capacity change from 0 to 512 [ 580.323205][T14706] loop9: detected capacity change from 0 to 512 [ 580.607766][T14709] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.607865][T14709] ext4 filesystem being mounted at /420/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 580.610579][T14706] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.610741][T14706] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 580.772530][T14709] xt_CT: No such helper "syz1" [ 580.847316][T14732] loop5: detected capacity change from 0 to 128 [ 580.848091][T14742] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 580.873687][T14743] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 580.891079][T14732] bio_check_eod: 56 callbacks suppressed [ 580.891097][T14732] syz.5.3024: attempt to access beyond end of device [ 580.891097][T14732] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 580.891368][T14732] syz.5.3024: attempt to access beyond end of device [ 580.891368][T14732] loop5: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 580.891524][T14732] buffer_io_error: 34 callbacks suppressed [ 580.891563][T14732] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 580.891631][T14732] syz.5.3024: attempt to access beyond end of device [ 580.891631][T14732] loop5: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 580.891696][T14732] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 580.892040][T14732] syz.5.3024: attempt to access beyond end of device [ 580.892040][T14732] loop5: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 580.892914][T14732] syz.5.3024: attempt to access beyond end of device [ 580.892914][T14732] loop5: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 580.892999][T14732] Buffer I/O error on dev loop5, logical block 83, lost async page write [ 580.893050][T14732] syz.5.3024: attempt to access beyond end of device [ 580.893050][T14732] loop5: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 580.893180][T14732] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 580.893779][T14732] syz.5.3024: attempt to access beyond end of device [ 580.893779][T14732] loop5: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 580.894378][T14732] syz.5.3024: attempt to access beyond end of device [ 580.894378][T14732] loop5: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 580.894450][T14732] Buffer I/O error on dev loop5, logical block 95, lost async page write [ 580.894575][T14732] syz.5.3024: attempt to access beyond end of device [ 580.894575][T14732] loop5: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 580.894652][T14732] Buffer I/O error on dev loop5, logical block 96, lost async page write [ 580.895138][T14732] syz.5.3024: attempt to access beyond end of device [ 580.895138][T14732] loop5: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 580.895743][T14732] Buffer I/O error on dev loop5, logical block 99, lost async page write [ 580.895870][T14732] Buffer I/O error on dev loop5, logical block 100, lost async page write [ 580.897032][T14732] Buffer I/O error on dev loop5, logical block 111, lost async page write [ 580.897078][T14732] Buffer I/O error on dev loop5, logical block 112, lost async page write [ 581.027103][T14730] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.027306][T14730] ext4 filesystem being mounted at /403/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 581.081008][ T5906] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.203858][T14706] xt_CT: No such helper "syz1" [ 581.244934][T14753] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 581.263099][T14754] set_capacity_and_notify: 1 callbacks suppressed [ 581.263118][T14754] loop7: detected capacity change from 0 to 512 [ 581.267246][ T5922] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.291507][T14754] EXT4-fs: Ignoring removed nobh option [ 581.301223][T14754] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 581.324122][T14754] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #3: comm syz.7.3026: corrupted inode contents [ 581.324158][T14754] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 581.324478][T14754] EXT4-fs (loop7): Remounting filesystem read-only [ 581.325273][T14754] EXT4-fs (loop7): 1 truncate cleaned up [ 581.327983][T14754] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.328183][T14754] ext4 filesystem being mounted at /421/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 581.377006][T14752] loop5: detected capacity change from 0 to 512 [ 581.495039][ T5914] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.525975][T14752] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.542881][T14752] ext4 filesystem being mounted at /430/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 581.655724][T14752] xt_CT: No such helper "syz1" [ 581.683679][T14763] loop9: detected capacity change from 0 to 512 [ 581.823243][T14767] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 581.832910][T14763] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.833104][T14763] ext4 filesystem being mounted at /400/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 581.950053][ T5895] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.004273][T14776] xt_CT: No such helper "syz1" [ 582.131363][T14776] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 582.392460][T14763] Process accounting resumed [ 582.395728][ T5922] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.489242][ T5906] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.025400][T14816] loop6: detected capacity change from 0 to 512 [ 583.041927][T14813] loop5: detected capacity change from 0 to 512 [ 583.042699][T14816] EXT4-fs: Ignoring removed nobh option [ 583.063537][T14816] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 583.095580][T14816] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #3: comm syz.6.3043: corrupted inode contents [ 583.095614][T14816] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 583.095837][T14816] EXT4-fs (loop6): Remounting filesystem read-only [ 583.096280][T14816] __quota_error: 5 callbacks suppressed [ 583.096339][T14816] Quota error (device loop6): write_blk: dquota write failed [ 583.096365][T14816] Quota error (device loop6): qtree_write_dquot: Error -30 occurred while creating quota [ 583.096681][T14816] EXT4-fs (loop6): 1 truncate cleaned up [ 583.097494][T14816] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.097725][T14816] ext4 filesystem being mounted at /431/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 583.164461][T14813] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.164567][T14813] ext4 filesystem being mounted at /433/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 583.192180][ T29] audit: type=1400 audit(1792840272.368:821): avc: denied { write } for pid=14814 comm="syz.6.3043" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 583.277168][T14813] xt_CT: No such helper "syz1" [ 583.422083][T14813] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 583.474497][ T5895] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.572201][ T5903] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.901630][T14834] loop5: detected capacity change from 0 to 512 [ 584.153088][T14834] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.171424][T14834] ext4 filesystem being mounted at /434/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 584.383651][T14834] xt_CT: No such helper "syz1" [ 584.449116][T14862] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 584.598947][T14855] loop9: detected capacity change from 0 to 512 [ 584.912286][T14855] ext4 filesystem being mounted at /403/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 585.052664][T14877] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 585.218091][T14855] xt_CT: No such helper "syz1" [ 585.470449][T14891] loop9: detected capacity change from 0 to 512 [ 585.482193][T14887] loop5: detected capacity change from 0 to 512 [ 585.508968][T14891] EXT4-fs: Ignoring removed nobh option [ 585.531030][T14891] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 585.692341][T14891] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #3: comm syz.9.3059: corrupted inode contents [ 585.714161][T14891] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 585.718100][T14891] EXT4-fs (loop9): Remounting filesystem read-only [ 585.718902][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 585.719340][ C0] EXT4-fs (loop9): initial error at time 1792840274: ext4_do_update_inode:5801: inode 3 [ 585.719730][ C0] EXT4-fs (loop9): last error at time 1792840274: ext4_do_update_inode:5801: inode 3 [ 585.722670][T14891] Quota error (device loop9): write_blk: dquota write failed [ 585.722865][T14891] Quota error (device loop9): qtree_write_dquot: Error -30 occurred while creating quota [ 585.723870][T14891] EXT4-fs (loop9): 1 truncate cleaned up [ 585.733882][T14887] ext4 filesystem being mounted at /436/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 585.741159][T14891] ext4 filesystem being mounted at /404/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 585.844423][T14899] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 586.084729][ T29] audit: type=1400 audit(1792840275.268:822): avc: denied { read write } for pid=14903 comm="syz.7.3061" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 586.084773][ T29] audit: type=1400 audit(1792840275.268:823): avc: denied { open } for pid=14903 comm="syz.7.3061" path="/427/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 586.087569][ T29] audit: type=1400 audit(1792840275.268:824): avc: denied { mounton } for pid=14903 comm="syz.7.3061" path="/427/bus" dev="tmpfs" ino=2528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 586.183433][ T29] audit: type=1400 audit(1792840275.368:825): avc: denied { write } for pid=14890 comm="syz.9.3059" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 587.062168][T14914] loop7: detected capacity change from 0 to 512 [ 587.315531][T14914] ext4 filesystem being mounted at /428/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 587.424724][T14914] xt_CT: No such helper "syz1" [ 587.522310][T14948] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 587.686395][T14939] loop6: detected capacity change from 0 to 128 [ 587.916257][T14939] bio_check_eod: 32 callbacks suppressed [ 587.916277][T14939] syz.6.3070: attempt to access beyond end of device [ 587.916277][T14939] loop6: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 587.938230][T14939] syz.6.3070: attempt to access beyond end of device [ 587.938230][T14939] loop6: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 587.938309][T14939] buffer_io_error: 18 callbacks suppressed [ 587.938587][T14939] Buffer I/O error on dev loop6, logical block 79, lost async page write [ 587.956426][T14950] loop5: detected capacity change from 0 to 128 [ 587.979303][T14939] syz.6.3070: attempt to access beyond end of device [ 587.979303][T14939] loop6: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 587.979423][T14939] Buffer I/O error on dev loop6, logical block 80, lost async page write [ 588.046878][T14954] loop8: detected capacity change from 0 to 512 [ 588.050582][T14950] syz.5.3071: attempt to access beyond end of device [ 588.050582][T14950] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 588.059111][T14950] syz.5.3071: attempt to access beyond end of device [ 588.059111][T14950] loop5: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 588.059195][T14950] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 588.059480][T14950] syz.5.3071: attempt to access beyond end of device [ 588.059480][T14950] loop5: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 588.059557][T14950] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 588.060140][T14939] syz.6.3070: attempt to access beyond end of device [ 588.060140][T14939] loop6: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 588.062305][T14950] syz.5.3071: attempt to access beyond end of device [ 588.062305][T14950] loop5: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 588.065177][T14939] syz.6.3070: attempt to access beyond end of device [ 588.065177][T14939] loop6: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 588.065559][T14939] Buffer I/O error on dev loop6, logical block 83, lost async page write [ 588.066770][T14950] syz.5.3071: attempt to access beyond end of device [ 588.066770][T14950] loop5: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 588.066867][T14950] Buffer I/O error on dev loop5, logical block 83, lost async page write [ 588.067174][T14950] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 588.082259][T14939] Buffer I/O error on dev loop6, logical block 84, lost async page write [ 588.097819][T14950] Buffer I/O error on dev loop5, logical block 95, lost async page write [ 588.098000][T14950] Buffer I/O error on dev loop5, logical block 96, lost async page write [ 588.158039][T14954] ext4 filesystem being mounted at /414/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 588.257667][T14954] xt_CT: No such helper "syz1" [ 588.427048][T14973] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 588.556136][T14974] loop9: detected capacity change from 0 to 512 [ 588.733948][T14986] loop5: detected capacity change from 0 to 512 [ 588.734483][T14986] EXT4-fs: Ignoring removed nobh option [ 588.759352][T14986] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 588.776151][T14974] ext4 filesystem being mounted at /407/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 588.794231][T14986] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #3: comm syz.5.3078: corrupted inode contents [ 588.794268][T14986] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 588.794452][T14986] EXT4-fs (loop5): Remounting filesystem read-only [ 588.794923][T14986] Quota error (device loop5): write_blk: dquota write failed [ 588.794952][T14986] Quota error (device loop5): qtree_write_dquot: Error -30 occurred while creating quota [ 588.795432][T14986] EXT4-fs (loop5): 1 truncate cleaned up [ 588.832692][T14986] ext4 filesystem being mounted at /440/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 588.931320][T14992] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 588.964884][T14974] xt_CT: No such helper "syz1" [ 589.005265][ T29] audit: type=1400 audit(1792840278.188:826): avc: denied { write } for pid=14982 comm="syz.5.3078" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 589.066650][T14981] loop7: detected capacity change from 0 to 512 [ 589.259925][T14981] ext4 filesystem being mounted at /430/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 589.398426][T14981] xt_CT: No such helper "syz1" [ 589.411057][T14995] loop6: detected capacity change from 0 to 512 [ 589.493684][T15007] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 589.586461][T14995] ext4 filesystem being mounted at /439/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 589.659014][ T29] audit: type=1400 audit(1792840278.838:827): avc: denied { mounton } for pid=15003 comm="syz.8.3083" path="/416/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 589.660386][T14995] xt_CT: No such helper "syz1" [ 589.760348][T15018] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 590.120510][T15019] loop7: detected capacity change from 0 to 512 [ 590.335185][T15019] ext4 filesystem being mounted at /431/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.470753][T15019] xt_CT: No such helper "syz1" [ 590.712328][T15019] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 590.939014][T15051] loop9: detected capacity change from 0 to 128 [ 591.340562][T15062] ext4 filesystem being mounted at /432/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 591.412807][T15062] xt_CT: No such helper "syz1" [ 591.485056][T15068] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 591.996651][T15087] EXT4-fs: Ignoring removed nobh option [ 592.006892][T15087] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 592.036755][T15087] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #3: comm syz.7.3099: corrupted inode contents [ 592.036792][T15087] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 592.037092][T15087] EXT4-fs (loop7): Remounting filesystem read-only [ 592.037516][T15087] Quota error (device loop7): write_blk: dquota write failed [ 592.037546][T15087] Quota error (device loop7): qtree_write_dquot: Error -30 occurred while creating quota [ 592.037872][T15087] EXT4-fs (loop7): 1 truncate cleaned up [ 592.038255][T15087] ext4 filesystem being mounted at /433/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 592.052218][ T29] audit: type=1400 audit(1792840281.238:828): avc: denied { write } for pid=15085 comm="syz.7.3099" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 593.617216][T15130] set_capacity_and_notify: 3 callbacks suppressed [ 593.617436][T15130] loop7: detected capacity change from 0 to 512 [ 593.693988][T15135] xt_CT: No such helper "syz1" [ 593.768877][T15130] ext4 filesystem being mounted at /435/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 593.868584][T15146] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 593.915656][T15135] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 593.960634][T15140] Process accounting paused [ 594.486490][T15153] loop6: detected capacity change from 0 to 512 [ 594.491813][T15151] loop5: detected capacity change from 0 to 512 [ 594.496342][T15151] EXT4-fs: Ignoring removed nobh option [ 594.513709][T15151] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 594.527135][T15157] loop7: detected capacity change from 0 to 512 [ 594.529644][T15151] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #3: comm syz.5.3115: corrupted inode contents [ 594.529764][T15151] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 594.538193][T15151] EXT4-fs (loop5): Remounting filesystem read-only [ 594.538882][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 594.538949][ C0] EXT4-fs (loop5): initial error at time 1792840283: ext4_do_update_inode:5801: inode 3 [ 594.539203][ C0] EXT4-fs (loop5): last error at time 1792840283: ext4_do_update_inode:5801: inode 3 [ 594.550422][T15151] Quota error (device loop5): write_blk: dquota write failed [ 594.552537][T15151] Quota error (device loop5): qtree_write_dquot: Error -30 occurred while creating quota [ 594.561777][T15151] EXT4-fs (loop5): 1 truncate cleaned up [ 594.569435][T15151] ext4 filesystem being mounted at /449/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 594.654091][ T29] audit: type=1400 audit(1792840283.838:829): avc: denied { write } for pid=15149 comm="syz.5.3115" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 594.667553][T15157] ext4 filesystem being mounted at /436/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 594.777422][T15153] ext4 filesystem being mounted at /445/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 594.780049][T15157] xt_CT: No such helper "syz1" [ 594.855773][T15174] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 594.925991][T15153] xt_CT: No such helper "syz1" [ 595.109752][T15153] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 595.263785][T15157] Process accounting paused [ 595.578408][T15203] loop6: detected capacity change from 0 to 128 [ 595.622663][T15194] bio_check_eod: 68 callbacks suppressed [ 595.622687][T15194] syz.6.3125: attempt to access beyond end of device [ 595.622687][T15194] loop6: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 595.673422][T15194] syz.6.3125: attempt to access beyond end of device [ 595.673422][T15194] loop6: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 595.673460][T15194] buffer_io_error: 40 callbacks suppressed [ 595.673474][T15194] Buffer I/O error on dev loop6, logical block 79, lost async page write [ 595.673497][T15194] syz.6.3125: attempt to access beyond end of device [ 595.673497][T15194] loop6: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 595.673523][T15194] Buffer I/O error on dev loop6, logical block 80, lost async page write [ 595.683778][T15194] syz.6.3125: attempt to access beyond end of device [ 595.683778][T15194] loop6: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 595.763414][T15194] syz.6.3125: attempt to access beyond end of device [ 595.763414][T15194] loop6: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 595.763449][T15194] Buffer I/O error on dev loop6, logical block 83, lost async page write [ 595.763501][T15194] syz.6.3125: attempt to access beyond end of device [ 595.763501][T15194] loop6: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 595.764367][T15194] Buffer I/O error on dev loop6, logical block 84, lost async page write [ 595.823356][T15194] syz.6.3125: attempt to access beyond end of device [ 595.823356][T15194] loop6: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 595.832636][T15206] loop9: detected capacity change from 0 to 512 [ 595.852603][T15194] syz.6.3125: attempt to access beyond end of device [ 595.852603][T15194] loop6: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 595.852822][T15194] Buffer I/O error on dev loop6, logical block 95, lost async page write [ 595.852923][T15194] syz.6.3125: attempt to access beyond end of device [ 595.852923][T15194] loop6: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 595.853013][T15194] Buffer I/O error on dev loop6, logical block 96, lost async page write [ 595.869767][T15194] syz.6.3125: attempt to access beyond end of device [ 595.869767][T15194] loop6: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 595.895146][T15194] Buffer I/O error on dev loop6, logical block 99, lost async page write [ 595.895238][T15194] Buffer I/O error on dev loop6, logical block 100, lost async page write [ 595.968341][T15194] Buffer I/O error on dev loop6, logical block 111, lost async page write [ 595.977494][T15194] Buffer I/O error on dev loop6, logical block 112, lost async page write [ 596.042162][T15206] ext4 filesystem being mounted at /416/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 596.068751][T15213] loop8: detected capacity change from 0 to 512 [ 596.092554][T15213] ext4 filesystem being mounted at /429/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 596.130009][T15213] xt_CT: No such helper "syz1" [ 596.131283][T15221] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 596.189136][T15222] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 596.951818][T15238] loop9: detected capacity change from 0 to 512 [ 597.043154][T15242] loop8: detected capacity change from 0 to 512 [ 597.256448][T15238] ext4 filesystem being mounted at /417/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 597.393059][T15242] ext4 filesystem being mounted at /430/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 597.454528][T15242] xt_CT: No such helper "syz1" [ 597.475822][T15257] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 597.562102][T15260] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 597.636608][T15238] xt_CT: No such helper "syz1" [ 598.123642][T15263] loop7: detected capacity change from 0 to 512 [ 598.305182][T15263] EXT4-fs mount: 41 callbacks suppressed [ 598.305418][T15263] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 598.307722][T15263] ext4 filesystem being mounted at /443/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 598.482867][T15287] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 598.677160][ T5906] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.795212][T15304] loop7: detected capacity change from 0 to 512 [ 598.795876][T15304] EXT4-fs: Ignoring removed nobh option [ 598.796157][T15304] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 598.818290][T15286] loop6: detected capacity change from 0 to 128 [ 598.832691][T15304] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #3: comm syz.7.3147: corrupted inode contents [ 598.832726][T15304] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 598.832929][T15304] EXT4-fs (loop7): Remounting filesystem read-only [ 598.833315][T15304] Quota error (device loop7): write_blk: dquota write failed [ 598.833343][T15304] Quota error (device loop7): qtree_write_dquot: Error -30 occurred while creating quota [ 598.833826][T15304] EXT4-fs (loop7): 1 truncate cleaned up [ 598.834625][T15304] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 598.834822][T15304] ext4 filesystem being mounted at /444/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 598.910529][ T29] audit: type=1400 audit(1792840288.098:830): avc: denied { write } for pid=15299 comm="syz.7.3147" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 598.986243][T15298] loop8: detected capacity change from 0 to 4096 [ 598.986650][T15298] ext2: Unknown parameter 'dont_appraise' [ 599.262372][ T5906] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.405534][ T2981] ================================================================== [ 599.405566][ T2981] BUG: KCSAN: data-race in d_make_discardable / path_lookupat [ 599.405596][ T2981] [ 599.405603][ T2981] write to 0xffff888109a77f00 of 4 bytes by task 10222 on cpu 0: [ 599.405622][ T2981] d_make_discardable+0x4f/0x90 [ 599.405644][ T2981] simple_unlink+0x68/0x80 [ 599.405677][ T2981] shmem_unlink+0x12d/0x140 [ 599.405708][ T2981] vfs_unlink+0x1c3/0x490 [ 599.405733][ T2981] filename_unlinkat+0x1dc/0x410 [ 599.405759][ T2981] __se_sys_unlink+0x2b/0xe0 [ 599.405788][ T2981] __x64_sys_unlink+0x1f/0x30 [ 599.405821][ T2981] x64_sys_call+0x18ee/0x2550 [ 599.405850][ T2981] do_syscall_64+0x112/0x360 [ 599.405887][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.405911][ T2981] [ 599.405917][ T2981] read to 0xffff888109a77f00 of 4 bytes by task 2981 on cpu 1: [ 599.405935][ T2981] path_lookupat+0x19b/0x4c0 [ 599.405958][ T2981] filename_lookup+0x18f/0x390 [ 599.405981][ T2981] do_readlinkat+0x74/0x2f0 [ 599.406004][ T2981] __x64_sys_readlink+0x47/0x60 [ 599.406022][ T2981] x64_sys_call+0x1d41/0x2550 [ 599.406045][ T2981] do_syscall_64+0x112/0x360 [ 599.406077][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.406095][ T2981] [ 599.406099][ T2981] value changed: 0x08300080 -> 0x00004080 [ 599.406112][ T2981] [ 599.406116][ T2981] Reported by Kernel Concurrency Sanitizer on: [ 599.406147][ T2981] CPU: 1 UID: 0 PID: 2981 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 599.406175][ T2981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 599.406190][ T2981] ================================================================== [ 599.533418][T15315] loop5: detected capacity change from 0 to 512 [ 599.716169][T15315] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.718352][T15315] ext4 filesystem being mounted at /456/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 599.820807][T15315] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 599.838194][ T5895] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.